last executing test programs: 10m4.484200897s ago: executing program 4 (id=297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/xfrm_stat\x00') preadv(r2, 0x0, 0x0, 0x4, 0x300) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r4, &(0x7f0000000200)=""/209, 0x128) tkill(r3, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) mq_open(0x0, 0x40, 0x2, 0x0) 10m4.355268779s ago: executing program 4 (id=299): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x302, 0x10000, 0x5, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0x101200) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 10m4.073256445s ago: executing program 4 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 10m4.003790306s ago: executing program 4 (id=304): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@usrquota}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) (async, rerun: 32) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r2, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kfree\x00', r4, 0x0, 0x10}, 0x18) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 32) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4, 0x0, @loopback, 0x2}, 0x1c) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85efb17b5508000018bb00", "0900b43f"}, 0x38) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r9, r6, 0x25, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x40) (async) setxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000400), &(0x7f0000000540)='system_u:object_r:printer_device_t:s0\x00', 0x26, 0x1) 10m3.426869337s ago: executing program 4 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0xfe, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xe, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001940)=ANY=[@ANYBLOB="aaaabb08004500001ca6992716"], 0x0) 10m2.661206022s ago: executing program 4 (id=325): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}}, 0x20000840) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="eb2e2e6694b7a304107a4adccc7055c01d6f14e01cdcae86019692e466ae18c717f0c131874eafc6d0c4dd68860f5d75f652786550f28a9bbb14396f45f513d4c357552da7f8ccf63672ec00100000bba8d3f21f9d2317459a5a3afe0aafedaa7b295364af94bf1effcc7354633a9703eb6b657b5e9a763da855481101f27aa8ac1943d33be1cabfe8ebd14ce41e39", @ANYRESOCT=r2], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) syz_io_uring_setup(0x10b, 0x0, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$nl_generic(r6, 0x0, 0x20044800) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x3) mknod$loop(0x0, 0x2000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00', @ANYRES16=r8], 0x78}, 0x1, 0xffffffff00000003}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') 10m2.660238162s ago: executing program 32 (id=325): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}}, 0x20000840) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="eb2e2e6694b7a304107a4adccc7055c01d6f14e01cdcae86019692e466ae18c717f0c131874eafc6d0c4dd68860f5d75f652786550f28a9bbb14396f45f513d4c357552da7f8ccf63672ec00100000bba8d3f21f9d2317459a5a3afe0aafedaa7b295364af94bf1effcc7354633a9703eb6b657b5e9a763da855481101f27aa8ac1943d33be1cabfe8ebd14ce41e39", @ANYRESOCT=r2], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) syz_io_uring_setup(0x10b, 0x0, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$nl_generic(r6, 0x0, 0x20044800) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x3) mknod$loop(0x0, 0x2000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00', @ANYRES16=r8], 0x78}, 0x1, 0xffffffff00000003}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') 8m0.422488962s ago: executing program 5 (id=2720): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) bind$tipc(r0, 0x0, 0x0) 8m0.402980242s ago: executing program 5 (id=2722): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f00000004c0)='GPL\x00'}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000300000000eaff006dea000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3, 0xec, 0xfffd}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001d00070f00000000000000000700", @ANYRES32=r2, @ANYBLOB="00005200060005000100000008000800", @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) 8m0.356260583s ago: executing program 5 (id=2723): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r3) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14) 8m0.315359804s ago: executing program 5 (id=2724): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000002100)=0x8, 0x4) acct(&(0x7f00000001c0)='./file0\x00') sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x7ff, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$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") socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m0.150521927s ago: executing program 5 (id=2727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 7m59.954464691s ago: executing program 5 (id=2728): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 7m59.943649532s ago: executing program 33 (id=2728): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 7m1.516080815s ago: executing program 3 (id=3565): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004110000c4d192c202ceaf13b5cdae4bcf18cb8a3376bf004b4bc29fd34779ba6309f052a43f81d32d161e8b489db67cd82e2460089f4dba8f4cd663bafe606142f4f8f7ebe0a175387cc023fe00f5a08e6221df761dbe2b06d4", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) (async) bind$can_raw(r1, &(0x7f0000000080), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117900000000008510000002000000850000008b00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 7m1.501515965s ago: executing program 3 (id=3566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1e2, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000980)=""/4096, &(0x7f0000000340)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013600004000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b00000000060014"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x1}, [@CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x3c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x4) 7m1.470509896s ago: executing program 3 (id=3567): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) write$P9_RVERSION(r2, &(0x7f00000004c0)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x2, 0x0, 0x10, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x40, 0x20000000, 0xc9}}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x48) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000000240)=""/61}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x18) (async) ioperm(0x5, 0xa, 0x100000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071105c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x24}, 0x94) 7m1.401469227s ago: executing program 3 (id=3568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0x17b}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1600, &(0x7f00000006c0)=[{&(0x7f0000000100)="d80000001000810468f70082db44b904021d080b0100000000091400000000120800040043000000a80016000a00014006000d00036000000000b8855c14c1d67f6f9400d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1ccd322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee00000000000000000000005ca110b140856895", 0xd8}], 0x1}, 0x20000004) 7m1.401318198s ago: executing program 3 (id=3569): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 7m1.374951008s ago: executing program 3 (id=3570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x10000}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000002000000, 0x2) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x60) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x140, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x18040, 0x4) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, '\\]&!'}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, '\\]&!'}}]}}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004006a1d0a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r10}, &(0x7f0000000540), &(0x7f0000000580)=r11}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r10}, &(0x7f0000000540), &(0x7f0000000580)=r11}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r10, &(0x7f0000000780)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r10, &(0x7f0000000780)}, 0x20) 6m46.18750657s ago: executing program 34 (id=3570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x10000}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000002000000, 0x2) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x60) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x140, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000340)=0x18040, 0x4) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, '\\]&!'}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, '\\]&!'}}]}}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004006a1d0a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r10}, &(0x7f0000000540), &(0x7f0000000580)=r11}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r10}, &(0x7f0000000540), &(0x7f0000000580)=r11}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r10, &(0x7f0000000780)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r10, &(0x7f0000000780)}, 0x20) 5m22.661530436s ago: executing program 2 (id=5381): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x21) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/208, 0xd0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r5, 0x80000004) epoll_create1(0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000007c0)='wlan1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m22.595148077s ago: executing program 2 (id=5384): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x4, 0x1, 0x6) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000180)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@block_validity}]}, 0x2, 0x44a, &(0x7f0000000880)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x28011, r0, 0x0) io_setup(0x20, &(0x7f0000001140)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) 5m22.340726512s ago: executing program 2 (id=5386): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 5m22.313275682s ago: executing program 2 (id=5387): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000009}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x10000, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 5m22.248960824s ago: executing program 2 (id=5389): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c000a0000060900020073797a310000000009009a7a310000000020000380100000800c00018006000100d10300000c0000800800001100010000000000000000000100000a00"/164], 0xb0}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r5 = socket(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x21, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400a850}, 0x4084) r7 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r8, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) 5m21.861433601s ago: executing program 2 (id=5393): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000380)=[{0x4, 0x3, 0x1000}], 0x1, 0x0) unshare(0x20060400) 5m21.861231101s ago: executing program 35 (id=5393): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000380)=[{0x4, 0x3, 0x1000}], 0x1, 0x0) unshare(0x20060400) 49.90019398s ago: executing program 0 (id=10790): lsm_get_self_attr(0x69, &(0x7f0000000080)={0x0, 0x0, 0x71, 0x51, ""/81}, &(0x7f0000000140)=0x71, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff4}, 0x18) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) stat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 49.881140421s ago: executing program 0 (id=10791): openat$misdntimer(0xffffffffffffff9c, 0x0, 0x20280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) timer_delete(r2) write$eventfd(r1, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79b0, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32=r6, @ANYBLOB="03dfffffff000000000000000000000000200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000008000"/15], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 48.88433065s ago: executing program 0 (id=10806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x300, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 48.776100352s ago: executing program 0 (id=10807): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x40) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000080)='./file3\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=rdma,']) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000080)="9e", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e25, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) 48.775630432s ago: executing program 0 (id=10808): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000002500)='\f', 0x1}, {&(0x7f0000000000)='0', 0x1}], 0x2) 48.708692514s ago: executing program 0 (id=10811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f91124fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 48.683435564s ago: executing program 36 (id=10811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f91124fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 3.479322873s ago: executing program 6 (id=11435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737968843188a259d222a83d7274803c7eed7a310000000008000a40fffffffc400000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4008000) close(r0) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) 3.268378437s ago: executing program 6 (id=11437): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 3.064400521s ago: executing program 7 (id=11442): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x800) listen(r1, 0x402) socket$unix(0x1, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0xffbfff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) accept(r1, 0x0, 0x0) 2.712620017s ago: executing program 1 (id=11448): syz_read_part_table(0x4098, &(0x7f00000040c0)="$eJzszzFOKzEUBdA7Vv5k8oM0rABBTcMKIjaRtdCRSOyEMothN1QURplhSAgtCITOKexrv+cnOfyop0Nsk1ynmY7daetQWaS8HZf75fIqD5ta61Fbl+0U50lqn5ScJbl5LPv3/ewwYL37hi8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/0L9xKyfX3Xnm3ZDu+s+Paq2bpElyv0qybafCy+qiye2Yl8Pc9r2WxYcZZb37ul8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/XYtzKsP5PMk99TtMdtbTJ7JX9ObZBKIaBAHrwExTEFGxCwV7ZhS2pguQgRqB6r7LPusJHkp2t8qj5NS4tSR/Jfa7n7VfpSUtO67tW45xZl2Nn7+tf/gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBWAAAA//9GviMa") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000bf030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000000)) 2.56868488s ago: executing program 9 (id=11450): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)}, {&(0x7f0000000240)="1e217b53eb21", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000810b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000040) 2.514318311s ago: executing program 9 (id=11451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) 2.365136095s ago: executing program 9 (id=11452): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c00028008000140000000050800"], 0x140}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x0, 0x2, 0x2a}, 0x2c) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000180)='./file0\x00', 0x810000, &(0x7f00000005c0), 0x1, 0x549, &(0x7f0000000b40)="$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") 2.025407501s ago: executing program 1 (id=11453): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getresgid(&(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300)) 1.970607741s ago: executing program 1 (id=11454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='ext4_mark_inode_dirty\x00', r2, 0x0, 0xc}, 0x18) r3 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f3, &(0x7f0000000740)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r3, 0x12, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r6, r2, 0x23, 0x10, 0x0, @void, @value=r6, @void, @void, r7}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map=r8, r1, 0x38, 0x4, 0x0, @void, @value=r0, @void, @void, r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) flistxattr(r10, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) socket$xdp(0x2c, 0x3, 0x0) 1.723498676s ago: executing program 8 (id=11455): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r3, r3, 0x0, 0x7f03) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000040)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fcntl$setpipe(r0, 0x407, 0x6) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") 1.722763626s ago: executing program 7 (id=11456): r0 = memfd_secret(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) ioctl$sock_ifreq(r2, 0x89b0, &(0x7f0000000040)={'pim6reg\x00', @ifru_addrs=@qipcrtr={0x2a, 0x4, 0x4001}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.624548569s ago: executing program 8 (id=11457): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2d275f7a8fa7c9f34200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x4f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) r5 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000800)="59fdd4", 0xfdef}], 0x1, 0x8, 0x365) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@o_path={0x0}, 0x18) io_pgetevents(0x0, 0x80000001, 0x6, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={[0x357]}, 0x8}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) syslog(0x3, &(0x7f0000000240)=""/254, 0xfe) 1.623984248s ago: executing program 1 (id=11458): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mq_unlink(0x0) 1.620574149s ago: executing program 1 (id=11459): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdb"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2d275f7a8fa7c9f34200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r4}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) r6 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000800)="59fdd4", 0xfdef}], 0x1, 0x8, 0x365) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@o_path={0x0, r1}, 0x18) io_pgetevents(0x0, 0x80000001, 0x6, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={[0x357]}, 0x8}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) syslog(0x3, &(0x7f0000000240)=""/254, 0xfe) 1.417302382s ago: executing program 9 (id=11460): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xfffffff8, 0x1, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r5, 0x891f, &(0x7f0000000380)={'gre0\x00', @ifru_ivalue=0x3}) r6 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000080)='(())') write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$can_raw(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r7}, 0x10, &(0x7f0000000280)={&(0x7f00000001c0)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x10, 0x1, 0x0, 0x0, "72d17527f48760e3fe78667aa85e35e8025d369341b5bc6e8c12e197051b208a34e6d7edf875df914e1cda70b511a54afea4588bfcbcab9311e4f644e4b8f465"}, 0x48}, 0x1, 0x0, 0x0, 0x400a010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.369269923s ago: executing program 6 (id=11461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1.365751464s ago: executing program 8 (id=11462): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") io_setup(0x5, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x6}, 0x18) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000280)=ANY=[], 0x18) sendto$inet6(r5, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0xcaa1, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0xd}, 0x1c) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 1.194543917s ago: executing program 8 (id=11463): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0xc17a) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r4 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', 0x101c08a, &(0x7f0000000380)={[{@utf8no}, {@rodir}, {@fat=@errors_continue}, {@uni_xlate}, {@rodir}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@numtail}, {@shortname_win95}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@utf8}, {@utf8no}, {@utf8}]}, 0x6, 0x2d2, &(0x7f00000008c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f0000000280)=ANY=[@ANYRESHEX=r4], 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x184) 1.162366538s ago: executing program 9 (id=11464): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) prlimit64(r0, 0x3, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) 1.158459078s ago: executing program 1 (id=11465): syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000000}, 0x10}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000080)=r3) close(r4) close(r0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='afs_send_data\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) shutdown(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) syz_usbip_server_init(0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) 1.132135018s ago: executing program 7 (id=11466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0xa, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0xfffffffd}, {0x2, 0x0, 0x0, 0xc}]}, 0x94) socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106", @ANYRES64], 0xffe) 1.096710139s ago: executing program 6 (id=11467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x200008, 0x8, 0x5, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x22, 0x0) 1.05231505s ago: executing program 6 (id=11468): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [], {}, [{0x8, 0x4}, {0x8, 0x4}]}, 0x34, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x2f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (fail_nth: 7) 1.051610129s ago: executing program 7 (id=11469): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mq_unlink(0x0) 989.314811ms ago: executing program 7 (id=11470): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x8040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f00000000c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$caif_stream(0x25, 0x1, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') preadv(r1, &(0x7f0000002540)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x47fff, 0x6) 988.923571ms ago: executing program 8 (id=11471): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) read(r3, &(0x7f0000000380)=""/189, 0x8) 311.132654ms ago: executing program 9 (id=11472): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) read(r3, &(0x7f0000000380)=""/189, 0x8) 200.892956ms ago: executing program 6 (id=11473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0dd7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000007d5e1cace81ed6c117ab5d6d69bda651297f9583b89965f52df514039e81f86f60f0bffece0b4", 0xd8}], 0x1}, 0x14) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={0x0, @phonet={0x23, 0x9, 0xfd, 0x5}, @generic={0x11, "db999351350a99d84028b0f49d30"}, @in={0x2, 0x4e21, @private=0xa010102}, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x9, 0x968}) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="add86bb0cf91db75bb86582fca15905205236f32fa95cd4fb7b0bbe82cf15c3b41b1ba195e52426569eaf726a0d4f80fa63bd94a3b68ccea0ac846"], 0x56) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x33) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r7, 0x852dd6c070cd7e4d}, 0x14}, 0x4, 0x700000000000000}, 0x0) socket$inet6(0xa, 0x1, 0x1) 67.561248ms ago: executing program 8 (id=11474): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=11475): r0 = socket(0xa, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x5, 0xb1, 0x3, 0x0, 0x5, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext={0x5}, 0x4a25, 0x8, 0x81, 0x7, 0x62ac, 0x8, 0x3, 0x0, 0x1be7, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe95258081d8eedf1, 0x2010, 0xffffffffffffffff, 0x9b662000) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe95258081d8eedf1, 0x2010, 0xffffffffffffffff, 0x9b662000) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$loop(&(0x7f00000004c0), 0xe, 0x101702) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) mprotect(&(0x7f00005f2000/0x1000)=nil, 0x1000, 0x2000003) socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x7, &(0x7f0000002400)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4f0}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4f0}}}, 0x108) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000308000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000017c0)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x9, @local, 0x9}}, {{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}]}, 0x190) kernel console output (not intermixed with test programs): is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.616160][T32443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.640915][T32443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.648135][T32443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.676179][T32443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.715874][T32443] hsr_slave_0: entered promiscuous mode [ 606.722682][T32443] hsr_slave_1: entered promiscuous mode [ 606.729642][T32443] debugfs: 'hsr0' already exists in 'hsr' [ 606.735555][T32443] Cannot create hsr debugfs directory [ 606.768643][T32484] 9pnet_fd: Insufficient options for proto=fd [ 606.931412][T32443] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 606.950943][T32443] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 606.972054][T32443] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 607.010846][T32443] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 607.029844][T32491] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10857'. [ 607.058593][T32506] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10862'. [ 607.069894][T32506] gretap0: entered promiscuous mode [ 607.082368][T32506] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10862'. [ 607.106766][T32443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.118477][T32443] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.138904][T32443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 607.149533][T32443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 607.167439][T32506] 0XD: renamed from gretap0 [ 607.172871][T32506] FAULT_INJECTION: forcing a failure. [ 607.172871][T32506] name failslab, interval 1, probability 0, space 0, times 0 [ 607.183945][T32507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32507 comm=syz.1.10862 [ 607.185841][T32506] CPU: 0 UID: 0 PID: 32506 Comm: syz.1.10862 Not tainted syzkaller #0 PREEMPT(voluntary) [ 607.185870][T32506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 607.185934][T32506] Call Trace: [ 607.185940][T32506] [ 607.185948][T32506] __dump_stack+0x1d/0x30 [ 607.185997][T32506] dump_stack_lvl+0xe8/0x140 [ 607.186016][T32506] dump_stack+0x15/0x1b [ 607.186032][T32506] should_fail_ex+0x265/0x280 [ 607.186080][T32506] should_failslab+0x8c/0xb0 [ 607.186109][T32506] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 607.186150][T32506] ? kstrdup_const+0x3e/0x50 [ 607.186174][T32506] ? __schedule+0x6b9/0xb30 [ 607.186262][T32506] kstrdup+0x3e/0xd0 [ 607.186309][T32506] kstrdup_const+0x3e/0x50 [ 607.186332][T32506] kernfs_rename_ns+0x22c/0x410 [ 607.186439][T32506] sysfs_rename_link_ns+0xfc/0x120 [ 607.186463][T32506] device_rename+0xd2/0x180 [ 607.186489][T32506] netif_change_name+0x1eb/0x6b0 [ 607.186538][T32506] ? __rcu_read_unlock+0x4f/0x70 [ 607.186559][T32506] ? xfd_validate_state+0x45/0xf0 [ 607.186591][T32506] ? nla_strscpy+0xec/0x120 [ 607.186641][T32506] do_setlink+0x80b/0x2810 [ 607.186661][T32506] ? __schedule+0x6b9/0xb30 [ 607.186684][T32506] ? __list_del_entry_valid_or_report+0x65/0x130 [ 607.186766][T32506] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 607.186788][T32506] ? __mutex_lock+0x25d/0xcc0 [ 607.186886][T32506] rtnl_setlink+0x311/0x420 [ 607.186931][T32506] ? selinux_capable+0x31/0x40 [ 607.186958][T32506] ? security_capable+0x83/0x90 [ 607.186982][T32506] ? ns_capable+0x7d/0xb0 [ 607.187054][T32506] ? __pfx_rtnl_setlink+0x10/0x10 [ 607.187118][T32506] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 607.187146][T32506] ? avc_has_perm_noaudit+0x1b1/0x200 [ 607.187172][T32506] netlink_rcv_skb+0x123/0x220 [ 607.187236][T32506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 607.187300][T32506] rtnetlink_rcv+0x1c/0x30 [ 607.187326][T32506] netlink_unicast+0x5bd/0x690 [ 607.187418][T32506] netlink_sendmsg+0x58b/0x6b0 [ 607.187444][T32506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.187544][T32506] __sock_sendmsg+0x142/0x180 [ 607.187573][T32506] sock_write_iter+0x165/0x1b0 [ 607.187605][T32506] do_iter_readv_writev+0x49c/0x540 [ 607.187634][T32506] vfs_writev+0x2df/0x8b0 [ 607.187669][T32506] do_writev+0xe7/0x210 [ 607.187696][T32506] __x64_sys_writev+0x45/0x50 [ 607.187719][T32506] x64_sys_call+0x1e9a/0x2ff0 [ 607.187747][T32506] do_syscall_64+0xd2/0x200 [ 607.187775][T32506] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 607.187846][T32506] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 607.187873][T32506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.187894][T32506] RIP: 0033:0x7f5a41a4ebe9 [ 607.187911][T32506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.187931][T32506] RSP: 002b:00007f5a404af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 607.187950][T32506] RAX: ffffffffffffffda RBX: 00007f5a41c85fa0 RCX: 00007f5a41a4ebe9 [ 607.187963][T32506] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 607.187975][T32506] RBP: 00007f5a404af090 R08: 0000000000000000 R09: 0000000000000000 [ 607.188062][T32506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.188074][T32506] R13: 00007f5a41c86038 R14: 00007f5a41c85fa0 R15: 00007fff259e3aa8 [ 607.188093][T32506] [ 607.190620][ T2194] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.259717][T32510] FAULT_INJECTION: forcing a failure. [ 607.259717][T32510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.263069][ T2194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.267060][T32510] CPU: 1 UID: 0 PID: 32510 Comm: syz.1.10863 Not tainted syzkaller #0 PREEMPT(voluntary) [ 607.267116][T32510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 607.267154][T32510] Call Trace: [ 607.267160][T32510] [ 607.267167][T32510] __dump_stack+0x1d/0x30 [ 607.267189][T32510] dump_stack_lvl+0xe8/0x140 [ 607.267217][T32510] dump_stack+0x15/0x1b [ 607.267234][T32510] should_fail_ex+0x265/0x280 [ 607.267258][T32510] should_fail+0xb/0x20 [ 607.267316][T32510] should_fail_usercopy+0x1a/0x20 [ 607.267346][T32510] _copy_from_user+0x1c/0xb0 [ 607.267374][T32510] ___sys_recvmsg+0xaa/0x370 [ 607.267398][T32510] ? _parse_integer+0x27/0x40 [ 607.267495][T32510] do_recvmmsg+0x1ef/0x540 [ 607.267525][T32510] ? fput+0x8f/0xc0 [ 607.267554][T32510] __x64_sys_recvmmsg+0xe5/0x170 [ 607.267581][T32510] x64_sys_call+0x27a6/0x2ff0 [ 607.267653][T32510] do_syscall_64+0xd2/0x200 [ 607.267682][T32510] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 607.267705][T32510] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 607.267733][T32510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.267897][T32510] RIP: 0033:0x7f5a41a4ebe9 [ 607.267913][T32510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.267930][T32510] RSP: 002b:00007f5a404af038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 607.267951][T32510] RAX: ffffffffffffffda RBX: 00007f5a41c85fa0 RCX: 00007f5a41a4ebe9 [ 607.267964][T32510] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000006 [ 607.267977][T32510] RBP: 00007f5a404af090 R08: 0000000000000000 R09: 0000000000000000 [ 607.268065][T32510] R10: 0000000040000001 R11: 0000000000000246 R12: 0000000000000001 [ 607.268078][T32510] R13: 00007f5a41c86038 R14: 00007f5a41c85fa0 R15: 00007fff259e3aa8 [ 607.268096][T32510] [ 607.740473][ T2194] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.747683][ T2194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.856951][T32443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.927249][T32537] netlink: 3 bytes leftover after parsing attributes in process `syz.6.10872'. [ 607.965133][T32537] batadv1: entered promiscuous mode [ 607.970549][T32537] batadv1: entered allmulticast mode [ 607.986348][T32540] netlink: 3 bytes leftover after parsing attributes in process `syz.6.10872'. [ 608.018523][T32540] batadv1: entered promiscuous mode [ 608.023861][T32540] batadv1: entered allmulticast mode [ 608.241229][T32443] veth0_vlan: entered promiscuous mode [ 608.264280][T32443] veth1_vlan: entered promiscuous mode [ 608.295577][T32443] veth0_macvtap: entered promiscuous mode [ 608.313070][T32558] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10875'. [ 608.333046][T32443] veth1_macvtap: entered promiscuous mode [ 608.347587][T32443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.375596][T32443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.406882][ T51] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.421649][ T51] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.450943][ T51] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.473288][ T51] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.669602][T32571] FAULT_INJECTION: forcing a failure. [ 608.669602][T32571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.682828][T32571] CPU: 0 UID: 0 PID: 32571 Comm: syz.1.10880 Not tainted syzkaller #0 PREEMPT(voluntary) [ 608.682857][T32571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 608.682937][T32571] Call Trace: [ 608.682945][T32571] [ 608.682955][T32571] __dump_stack+0x1d/0x30 [ 608.682981][T32571] dump_stack_lvl+0xe8/0x140 [ 608.683081][T32571] dump_stack+0x15/0x1b [ 608.683096][T32571] should_fail_ex+0x265/0x280 [ 608.683123][T32571] should_fail+0xb/0x20 [ 608.683147][T32571] should_fail_usercopy+0x1a/0x20 [ 608.683189][T32571] _copy_from_user+0x1c/0xb0 [ 608.683225][T32571] io_register_rsrc_update+0x5f/0x120 [ 608.683256][T32571] __se_sys_io_uring_register+0x6d9/0xeb0 [ 608.683313][T32571] ? trace_sys_enter+0xd0/0xf0 [ 608.683337][T32571] __x64_sys_io_uring_register+0x55/0x70 [ 608.683370][T32571] x64_sys_call+0x18a3/0x2ff0 [ 608.683469][T32571] do_syscall_64+0xd2/0x200 [ 608.683527][T32571] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 608.683555][T32571] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 608.683584][T32571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.683695][T32571] RIP: 0033:0x7f5a41a4ebe9 [ 608.683711][T32571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.683763][T32571] RSP: 002b:00007f5a404af038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 608.683800][T32571] RAX: ffffffffffffffda RBX: 00007f5a41c85fa0 RCX: 00007f5a41a4ebe9 [ 608.683812][T32571] RDX: 0000200000000600 RSI: 0000000000000010 RDI: 0000000000000003 [ 608.683868][T32571] RBP: 00007f5a404af090 R08: 0000000000000000 R09: 0000000000000000 [ 608.683923][T32571] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 608.683938][T32571] R13: 00007f5a41c86038 R14: 00007f5a41c85fa0 R15: 00007fff259e3aa8 [ 608.684000][T32571] [ 609.290280][T32590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10887'. [ 609.349487][T32592] lo speed is unknown, defaulting to 1000 [ 609.414699][T32590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.432504][T32590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.756019][T32598] 9pnet_fd: Insufficient options for proto=fd [ 609.787059][T32600] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10888'. [ 609.801017][T32600] netlink: 'syz.8.10888': attribute type 2 has an invalid length. [ 610.103428][T32620] lo speed is unknown, defaulting to 1000 [ 610.109951][T32620] lo speed is unknown, defaulting to 1000 [ 610.116279][T32620] lo speed is unknown, defaulting to 1000 [ 610.171828][T32620] infiniband sz1: set down [ 610.176383][T32620] infiniband sz1: added lo [ 610.184304][ T1035] lo speed is unknown, defaulting to 1000 [ 610.207630][T32620] RDS/IB: sz1: added [ 610.211928][T32620] smc: adding ib device sz1 with port count 1 [ 610.218320][T32620] smc: ib device sz1 port 1 has pnetid [ 610.224660][T32620] lo speed is unknown, defaulting to 1000 [ 610.279081][T32620] lo speed is unknown, defaulting to 1000 [ 610.334378][T32620] lo speed is unknown, defaulting to 1000 [ 610.387199][T32620] lo speed is unknown, defaulting to 1000 [ 610.440840][T32620] lo speed is unknown, defaulting to 1000 [ 610.492362][T32620] lo speed is unknown, defaulting to 1000 [ 610.533601][T32620] lo speed is unknown, defaulting to 1000 [ 610.607889][T32620] lo speed is unknown, defaulting to 1000 [ 610.683207][ T1035] lo speed is unknown, defaulting to 1000 [ 610.775844][T32641] 9pnet_fd: Insufficient options for proto=fd [ 610.833766][T32643] __nla_validate_parse: 3 callbacks suppressed [ 610.833783][T32643] netlink: 94 bytes leftover after parsing attributes in process `syz.7.10906'. [ 610.851139][T32643] netlink: 60 bytes leftover after parsing attributes in process `syz.7.10906'. [ 610.863724][T32652] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10908'. [ 610.878359][T32654] FAULT_INJECTION: forcing a failure. [ 610.878359][T32654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.891533][T32654] CPU: 0 UID: 0 PID: 32654 Comm: syz.7.10909 Not tainted syzkaller #0 PREEMPT(voluntary) [ 610.891571][T32654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.891582][T32654] Call Trace: [ 610.891588][T32654] [ 610.891595][T32654] __dump_stack+0x1d/0x30 [ 610.891619][T32654] dump_stack_lvl+0xe8/0x140 [ 610.891641][T32654] dump_stack+0x15/0x1b [ 610.891725][T32654] should_fail_ex+0x265/0x280 [ 610.891746][T32654] should_fail+0xb/0x20 [ 610.891765][T32654] should_fail_usercopy+0x1a/0x20 [ 610.891791][T32654] _copy_from_user+0x1c/0xb0 [ 610.891817][T32654] ___sys_recvmsg+0xaa/0x370 [ 610.891874][T32654] ? _parse_integer+0x27/0x40 [ 610.891901][T32654] do_recvmmsg+0x1ef/0x540 [ 610.891965][T32654] ? fput+0x8f/0xc0 [ 610.892020][T32654] __x64_sys_recvmmsg+0xe5/0x170 [ 610.892050][T32654] x64_sys_call+0x27a6/0x2ff0 [ 610.892172][T32654] do_syscall_64+0xd2/0x200 [ 610.892202][T32654] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 610.892223][T32654] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 610.892248][T32654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.892311][T32654] RIP: 0033:0x7f7f3ce3ebe9 [ 610.892329][T32654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.892352][T32654] RSP: 002b:00007f7f3b89f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 610.892373][T32654] RAX: ffffffffffffffda RBX: 00007f7f3d075fa0 RCX: 00007f7f3ce3ebe9 [ 610.892441][T32654] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000003 [ 610.892453][T32654] RBP: 00007f7f3b89f090 R08: 0000000000000000 R09: 0000000000000000 [ 610.892464][T32654] R10: 0000000040000001 R11: 0000000000000246 R12: 0000000000000001 [ 610.892475][T32654] R13: 00007f7f3d076038 R14: 00007f7f3d075fa0 R15: 00007ffccfa09d18 [ 610.892493][T32654] [ 611.092971][T32658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.110206][T32658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.134893][T32658] netlink: 'syz.9.10911': attribute type 1 has an invalid length. [ 611.142812][T32658] netlink: 216 bytes leftover after parsing attributes in process `syz.9.10911'. [ 611.151975][T32658] NCSI netlink: No device for ifindex 0 [ 611.175851][T32658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.194717][T32658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.473576][T32672] lo speed is unknown, defaulting to 1000 [ 611.481475][T32672] lo speed is unknown, defaulting to 1000 [ 611.932439][T32677] netlink: 88 bytes leftover after parsing attributes in process `syz.7.10915'. [ 611.942814][T32677] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.310040][T32689] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10922'. [ 612.389568][ T29] kauditd_printk_skb: 6622 callbacks suppressed [ 612.389585][ T29] audit: type=1400 audit(3702.389:133228): avc: denied { write } for pid=32699 comm="syz.7.10926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 612.415334][ T29] audit: type=1400 audit(3702.389:133229): avc: denied { mac_admin } for pid=32703 comm="+}[@" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 612.436115][ T29] audit: type=1400 audit(3702.389:133230): avc: denied { create } for pid=32703 comm="+}[@" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 612.457110][ T29] audit: type=1400 audit(3702.389:133231): avc: denied { associate } for pid=32703 comm="+}[@" name="file2" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=DC [ 612.479270][ T29] audit: type=1400 audit(3702.389:133232): avc: denied { read write open } for pid=32703 comm="+}[@" path="/10/file2" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 612.501122][T32702] netlink: 94 bytes leftover after parsing attributes in process `syz.8.10927'. [ 612.503207][ T29] audit: type=1400 audit(3702.389:133233): avc: denied { ioctl } for pid=32703 comm="+}[@" path="/10/file2" dev="tmpfs" ino=75 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 612.536553][ T29] audit: type=1400 audit(3702.389:133234): avc: denied { unlink } for pid=32443 comm="syz-executor" name="file1" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 612.560991][ T29] audit: type=1400 audit(3702.559:133235): avc: denied { ioctl } for pid=32707 comm="syz.9.10929" path="socket:[122186]" dev="sockfs" ino=122186 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 612.610799][ T29] audit: type=1400 audit(3702.609:133236): avc: denied { create } for pid=32711 comm="syz.7.10931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 612.803152][T32724] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10934'. [ 612.833625][T32726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.845776][T32726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.857140][ T29] audit: type=1400 audit(3702.849:133237): avc: denied { write } for pid=32725 comm="syz.9.10935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 613.041929][T32727] netlink: 88 bytes leftover after parsing attributes in process `syz.7.10933'. [ 613.052542][T32727] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 613.374525][T32739] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10940'. [ 613.659826][T32754] 9pnet_fd: Insufficient options for proto=fd [ 613.801011][T32741] Set syz1 is full, maxelem 65536 reached [ 614.144259][ T333] FAULT_INJECTION: forcing a failure. [ 614.144259][ T333] name failslab, interval 1, probability 0, space 0, times 0 [ 614.156972][ T333] CPU: 0 UID: 0 PID: 333 Comm: syz.9.10965 Not tainted syzkaller #0 PREEMPT(voluntary) [ 614.156999][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.157056][ T333] Call Trace: [ 614.157064][ T333] [ 614.157074][ T333] __dump_stack+0x1d/0x30 [ 614.157099][ T333] dump_stack_lvl+0xe8/0x140 [ 614.157122][ T333] dump_stack+0x15/0x1b [ 614.157143][ T333] should_fail_ex+0x265/0x280 [ 614.157172][ T333] should_failslab+0x8c/0xb0 [ 614.157197][ T333] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 614.157230][ T333] ? debugfs_alloc_inode+0x34/0x40 [ 614.157259][ T333] ? lookup_noperm+0xc9/0x180 [ 614.157355][ T333] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 614.157415][ T333] debugfs_alloc_inode+0x34/0x40 [ 614.157440][ T333] alloc_inode+0x3d/0x170 [ 614.157461][ T333] new_inode+0x1d/0xe0 [ 614.157482][ T333] __debugfs_create_file+0x109/0x330 [ 614.157567][ T333] debugfs_create_file_full+0x3f/0x60 [ 614.157590][ T333] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 614.157615][ T333] ref_tracker_dir_debugfs+0x100/0x1e0 [ 614.157650][ T333] alloc_netdev_mqs+0x1a2/0xa30 [ 614.157853][ T333] ? sized_strscpy+0x121/0x1a0 [ 614.157886][ T333] ip6_tnl_locate+0x37e/0x4a0 [ 614.157924][ T333] ip6_tnl_siocdevprivate+0x550/0x920 [ 614.157966][ T333] dev_ifsioc+0x8f5/0xaa0 [ 614.158011][ T333] dev_ioctl+0x78d/0x960 [ 614.158045][ T333] sock_ioctl+0x593/0x610 [ 614.158079][ T333] ? __pfx_sock_ioctl+0x10/0x10 [ 614.158176][ T333] __se_sys_ioctl+0xcb/0x140 [ 614.158197][ T333] __x64_sys_ioctl+0x43/0x50 [ 614.158229][ T333] x64_sys_call+0x1816/0x2ff0 [ 614.158249][ T333] do_syscall_64+0xd2/0x200 [ 614.158295][ T333] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 614.158360][ T333] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 614.158385][ T333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.158439][ T333] RIP: 0033:0x7f362cf3ebe9 [ 614.158455][ T333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.158541][ T333] RSP: 002b:00007f362b9a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.158561][ T333] RAX: ffffffffffffffda RBX: 00007f362d175fa0 RCX: 00007f362cf3ebe9 [ 614.158573][ T333] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 614.158586][ T333] RBP: 00007f362b9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 614.158598][ T333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.158612][ T333] R13: 00007f362d176038 R14: 00007f362d175fa0 R15: 00007fff1add2788 [ 614.158633][ T333] [ 614.413124][ T333] debugfs: out of free dentries, can not create file 'netdev@ffff88811a06e550' [ 614.524224][ T348] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 614.940487][ T367] lo speed is unknown, defaulting to 1000 [ 614.946574][ T367] lo speed is unknown, defaulting to 1000 [ 615.114686][ T368] lo speed is unknown, defaulting to 1000 [ 615.206789][ T368] lo speed is unknown, defaulting to 1000 [ 615.261183][ T373] lo speed is unknown, defaulting to 1000 [ 615.299958][ T374] bond0: (slave dummy0): Releasing backup interface [ 615.327536][ T374] bridge_slave_0: left allmulticast mode [ 615.333317][ T374] bridge_slave_0: left promiscuous mode [ 615.339065][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.405790][ T374] bridge_slave_1: left allmulticast mode [ 615.411622][ T374] bridge_slave_1: left promiscuous mode [ 615.417709][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.496132][ T374] bond0: (slave bond_slave_0): Releasing backup interface [ 615.528980][ T374] bond0: (slave bond_slave_1): Releasing backup interface [ 615.569184][ T374] team0: Port device team_slave_0 removed [ 615.597379][ T374] team0: Port device team_slave_1 removed [ 615.604976][ T374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.635438][ T389] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 615.642005][ T389] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 615.649610][ T389] vhci_hcd vhci_hcd.0: Device attached [ 615.655664][ T374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.703114][ T394] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 615.709782][ T394] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 615.717454][ T394] vhci_hcd vhci_hcd.0: Device attached [ 615.729125][ T373] lo speed is unknown, defaulting to 1000 [ 615.761170][ T389] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(5) [ 615.767711][ T389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 615.775245][ T389] vhci_hcd vhci_hcd.0: Device attached [ 615.880396][ T389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 615.913412][ T383] lo speed is unknown, defaulting to 1000 [ 615.927977][ T36] usb 13-1: new low-speed USB device number 4 using vhci_hcd [ 615.951976][ T389] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(14) [ 615.958723][ T389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 615.961507][ T383] lo speed is unknown, defaulting to 1000 [ 615.966272][ T389] vhci_hcd vhci_hcd.0: Device attached [ 616.011504][ T404] vhci_hcd: connection closed [ 616.013840][ T399] vhci_hcd: connection closed [ 616.015655][ T396] vhci_hcd: connection closed [ 616.019746][ T390] vhci_hcd: connection reset by peer [ 616.033536][ T51] vhci_hcd: stop threads [ 616.037879][ T51] vhci_hcd: release socket [ 616.042414][ T51] vhci_hcd: disconnect device [ 616.077902][ T51] vhci_hcd: stop threads [ 616.082179][ T51] vhci_hcd: release socket [ 616.086790][ T51] vhci_hcd: disconnect device [ 616.117101][ T51] vhci_hcd: stop threads [ 616.121455][ T51] vhci_hcd: release socket [ 616.125929][ T51] vhci_hcd: disconnect device [ 616.161189][ T51] vhci_hcd: stop threads [ 616.165555][ T51] vhci_hcd: release socket [ 616.170056][ T51] vhci_hcd: disconnect device [ 616.238638][ T411] __nla_validate_parse: 2 callbacks suppressed [ 616.238654][ T411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10989'. [ 616.287067][ T415] netlink: 94 bytes leftover after parsing attributes in process `syz.1.10991'. [ 616.302852][ T417] 9pnet_fd: Insufficient options for proto=fd [ 616.315437][ T415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10991'. [ 616.844946][ T437] lo speed is unknown, defaulting to 1000 [ 616.851576][ T437] lo speed is unknown, defaulting to 1000 [ 617.324750][ T444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11002'. [ 617.398621][ T29] kauditd_printk_skb: 764 callbacks suppressed [ 617.398638][ T29] audit: type=1326 audit(3707.399:134002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=452 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 617.428268][ T29] audit: type=1326 audit(3707.399:134003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=452 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 617.451448][ T29] audit: type=1326 audit(3707.399:134004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=452 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 617.495566][ T29] audit: type=1326 audit(3707.469:134005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=452 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 617.518771][ T29] audit: type=1326 audit(3707.469:134006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=452 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 617.541959][ T29] audit: type=1326 audit(3707.469:134007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=452 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 617.565136][ T29] audit: type=1326 audit(3707.489:134008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.9.11001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 617.588259][ T29] audit: type=1326 audit(3707.489:134009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.9.11001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 617.618358][ T29] audit: type=1326 audit(3707.519:134010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=452 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 617.636510][ T461] netlink: 'syz.8.11008': attribute type 4 has an invalid length. [ 617.641644][ T29] audit: type=1326 audit(3707.519:134011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=452 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 617.721787][ T471] FAULT_INJECTION: forcing a failure. [ 617.721787][ T471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.734969][ T471] CPU: 0 UID: 0 PID: 471 Comm: syz.6.11014 Not tainted syzkaller #0 PREEMPT(voluntary) [ 617.734997][ T471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 617.735014][ T471] Call Trace: [ 617.735021][ T471] [ 617.735030][ T471] __dump_stack+0x1d/0x30 [ 617.735110][ T471] dump_stack_lvl+0xe8/0x140 [ 617.735203][ T471] dump_stack+0x15/0x1b [ 617.735221][ T471] should_fail_ex+0x265/0x280 [ 617.735244][ T471] should_fail+0xb/0x20 [ 617.735332][ T471] should_fail_usercopy+0x1a/0x20 [ 617.735354][ T471] _copy_from_user+0x1c/0xb0 [ 617.735381][ T471] ___sys_sendmsg+0xc1/0x1d0 [ 617.735415][ T471] __x64_sys_sendmsg+0xd4/0x160 [ 617.735494][ T471] x64_sys_call+0x191e/0x2ff0 [ 617.735513][ T471] do_syscall_64+0xd2/0x200 [ 617.735540][ T471] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 617.735579][ T471] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 617.735689][ T471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.735714][ T471] RIP: 0033:0x7fa910c9ebe9 [ 617.735733][ T471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.735794][ T471] RSP: 002b:00007fa90f6ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.735812][ T471] RAX: ffffffffffffffda RBX: 00007fa910ed5fa0 RCX: 00007fa910c9ebe9 [ 617.735824][ T471] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 617.735836][ T471] RBP: 00007fa90f6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 617.735874][ T471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.735885][ T471] R13: 00007fa910ed6038 R14: 00007fa910ed5fa0 R15: 00007ffde269bb38 [ 617.735902][ T471] [ 617.929061][ T475] netlink: 94 bytes leftover after parsing attributes in process `syz.6.11016'. [ 617.938723][ T475] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11016'. [ 617.972365][ T477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11017'. [ 617.984367][ T477] netlink: 'syz.1.11017': attribute type 2 has an invalid length. [ 618.055234][ T488] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 618.094836][ T493] FAULT_INJECTION: forcing a failure. [ 618.094836][ T493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.108012][ T493] CPU: 0 UID: 0 PID: 493 Comm: syz.1.11021 Not tainted syzkaller #0 PREEMPT(voluntary) [ 618.108043][ T493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 618.108055][ T493] Call Trace: [ 618.108061][ T493] [ 618.108068][ T493] __dump_stack+0x1d/0x30 [ 618.108093][ T493] dump_stack_lvl+0xe8/0x140 [ 618.108195][ T493] dump_stack+0x15/0x1b [ 618.108212][ T493] should_fail_ex+0x265/0x280 [ 618.108317][ T493] should_fail+0xb/0x20 [ 618.108392][ T493] should_fail_usercopy+0x1a/0x20 [ 618.108445][ T493] _copy_to_user+0x20/0xa0 [ 618.108589][ T493] bpf_test_finish+0x351/0x500 [ 618.108613][ T493] bpf_prog_test_run_xdp+0x578/0x910 [ 618.108640][ T493] ? __rcu_read_unlock+0x4f/0x70 [ 618.108667][ T493] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 618.108759][ T493] bpf_prog_test_run+0x22a/0x390 [ 618.108787][ T493] __sys_bpf+0x4b9/0x7b0 [ 618.108816][ T493] __x64_sys_bpf+0x41/0x50 [ 618.108865][ T493] x64_sys_call+0x2aea/0x2ff0 [ 618.108890][ T493] do_syscall_64+0xd2/0x200 [ 618.109001][ T493] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 618.109026][ T493] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 618.109164][ T493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.109188][ T493] RIP: 0033:0x7f5a41a4ebe9 [ 618.109206][ T493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.109235][ T493] RSP: 002b:00007f5a404af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.109258][ T493] RAX: ffffffffffffffda RBX: 00007f5a41c85fa0 RCX: 00007f5a41a4ebe9 [ 618.109272][ T493] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 618.109284][ T493] RBP: 00007f5a404af090 R08: 0000000000000000 R09: 0000000000000000 [ 618.109296][ T493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.109307][ T493] R13: 00007f5a41c86038 R14: 00007f5a41c85fa0 R15: 00007fff259e3aa8 [ 618.109331][ T493] [ 618.382224][ T498] lo speed is unknown, defaulting to 1000 [ 618.388541][ T498] lo speed is unknown, defaulting to 1000 [ 618.954050][ T512] 9pnet_fd: Insufficient options for proto=fd [ 618.981181][ T515] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11028'. [ 619.138673][ T520] FAULT_INJECTION: forcing a failure. [ 619.138673][ T520] name failslab, interval 1, probability 0, space 0, times 0 [ 619.151402][ T520] CPU: 0 UID: 0 PID: 520 Comm: syz.6.11029 Not tainted syzkaller #0 PREEMPT(voluntary) [ 619.151435][ T520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.151449][ T520] Call Trace: [ 619.151458][ T520] [ 619.151466][ T520] __dump_stack+0x1d/0x30 [ 619.151550][ T520] dump_stack_lvl+0xe8/0x140 [ 619.151639][ T520] dump_stack+0x15/0x1b [ 619.151655][ T520] should_fail_ex+0x265/0x280 [ 619.151723][ T520] ? tcf_action_init_1+0x11e/0x4a0 [ 619.151758][ T520] should_failslab+0x8c/0xb0 [ 619.151787][ T520] __kmalloc_cache_noprof+0x4c/0x320 [ 619.151818][ T520] tcf_action_init_1+0x11e/0x4a0 [ 619.151921][ T520] tcf_action_init+0x267/0x6d0 [ 619.151974][ T520] tc_ctl_action+0x291/0x830 [ 619.152075][ T520] ? __pfx_tc_ctl_action+0x10/0x10 [ 619.152185][ T520] rtnetlink_rcv_msg+0x65a/0x6d0 [ 619.152212][ T520] ? avc_has_perm_noaudit+0x1b1/0x200 [ 619.152263][ T520] netlink_rcv_skb+0x123/0x220 [ 619.152324][ T520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 619.152361][ T520] rtnetlink_rcv+0x1c/0x30 [ 619.152391][ T520] netlink_unicast+0x5bd/0x690 [ 619.152453][ T520] netlink_sendmsg+0x58b/0x6b0 [ 619.152483][ T520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.152578][ T520] __sock_sendmsg+0x142/0x180 [ 619.152613][ T520] ____sys_sendmsg+0x31e/0x4e0 [ 619.152644][ T520] ___sys_sendmsg+0x17b/0x1d0 [ 619.152676][ T520] __x64_sys_sendmsg+0xd4/0x160 [ 619.152757][ T520] x64_sys_call+0x191e/0x2ff0 [ 619.152778][ T520] do_syscall_64+0xd2/0x200 [ 619.152804][ T520] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 619.152825][ T520] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 619.152918][ T520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.152940][ T520] RIP: 0033:0x7fa910c9ebe9 [ 619.152955][ T520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.152983][ T520] RSP: 002b:00007fa90f6ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.153012][ T520] RAX: ffffffffffffffda RBX: 00007fa910ed5fa0 RCX: 00007fa910c9ebe9 [ 619.153027][ T520] RDX: 00000000000040c0 RSI: 0000200000002f80 RDI: 0000000000000003 [ 619.153083][ T520] RBP: 00007fa90f6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 619.153166][ T520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.153180][ T520] R13: 00007fa910ed6038 R14: 00007fa910ed5fa0 R15: 00007ffde269bb38 [ 619.153201][ T520] [ 619.481628][ T530] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11034'. [ 619.546691][ T540] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11038'. [ 619.571187][ T542] netlink: 'syz.1.11039': attribute type 4 has an invalid length. [ 619.627509][ T549] 9pnet_fd: Insufficient options for proto=fd [ 619.870012][ T555] siw: device registration error -23 [ 620.379161][ T600] FAULT_INJECTION: forcing a failure. [ 620.379161][ T600] name failslab, interval 1, probability 0, space 0, times 0 [ 620.391887][ T600] CPU: 0 UID: 0 PID: 600 Comm: syz.8.11062 Not tainted syzkaller #0 PREEMPT(voluntary) [ 620.391969][ T600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.392060][ T600] Call Trace: [ 620.392069][ T600] [ 620.392078][ T600] __dump_stack+0x1d/0x30 [ 620.392103][ T600] dump_stack_lvl+0xe8/0x140 [ 620.392124][ T600] dump_stack+0x15/0x1b [ 620.392177][ T600] should_fail_ex+0x265/0x280 [ 620.392204][ T600] should_failslab+0x8c/0xb0 [ 620.392230][ T600] kmem_cache_alloc_noprof+0x50/0x310 [ 620.392260][ T600] ? getname_kernel+0x3c/0x1f0 [ 620.392291][ T600] getname_kernel+0x3c/0x1f0 [ 620.392413][ T600] kern_path+0x23/0x130 [ 620.392438][ T600] create_local_trace_uprobe+0x53/0x2c0 [ 620.392461][ T600] perf_uprobe_init+0xc0/0x150 [ 620.392492][ T600] perf_uprobe_event_init+0xc4/0x140 [ 620.392534][ T600] perf_try_init_event+0xd6/0x540 [ 620.392563][ T600] ? perf_event_alloc+0xb1c/0x1740 [ 620.392589][ T600] perf_event_alloc+0xb27/0x1740 [ 620.392656][ T600] __se_sys_perf_event_open+0x615/0x11c0 [ 620.392727][ T600] ? __rcu_read_unlock+0x4f/0x70 [ 620.392753][ T600] __x64_sys_perf_event_open+0x67/0x80 [ 620.392844][ T600] x64_sys_call+0x7bd/0x2ff0 [ 620.392868][ T600] do_syscall_64+0xd2/0x200 [ 620.392964][ T600] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 620.392985][ T600] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 620.393018][ T600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.393095][ T600] RIP: 0033:0x7f905ba9ebe9 [ 620.393113][ T600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.393145][ T600] RSP: 002b:00007f905a4ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 620.393164][ T600] RAX: ffffffffffffffda RBX: 00007f905bcd5fa0 RCX: 00007f905ba9ebe9 [ 620.393176][ T600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 620.393210][ T600] RBP: 00007f905a4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 620.393222][ T600] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 620.393233][ T600] R13: 00007f905bcd6038 R14: 00007f905bcd5fa0 R15: 00007ffced676828 [ 620.393251][ T600] [ 620.723951][ T625] FAULT_INJECTION: forcing a failure. [ 620.723951][ T625] name failslab, interval 1, probability 0, space 0, times 0 [ 620.736901][ T625] CPU: 0 UID: 0 PID: 625 Comm: syz.8.11073 Not tainted syzkaller #0 PREEMPT(voluntary) [ 620.736932][ T625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.736943][ T625] Call Trace: [ 620.736952][ T625] [ 620.736959][ T625] __dump_stack+0x1d/0x30 [ 620.736984][ T625] dump_stack_lvl+0xe8/0x140 [ 620.737069][ T625] dump_stack+0x15/0x1b [ 620.737083][ T625] should_fail_ex+0x265/0x280 [ 620.737136][ T625] should_failslab+0x8c/0xb0 [ 620.737159][ T625] __kmalloc_node_noprof+0xa9/0x410 [ 620.737183][ T625] ? get_callchain_buffers+0x19c/0x2f0 [ 620.737204][ T625] get_callchain_buffers+0x19c/0x2f0 [ 620.737254][ T625] stack_map_alloc+0x247/0x2b0 [ 620.737279][ T625] map_create+0x840/0xca0 [ 620.737331][ T625] ? security_bpf+0x2b/0x90 [ 620.737359][ T625] __sys_bpf+0x545/0x7b0 [ 620.737386][ T625] __x64_sys_bpf+0x41/0x50 [ 620.737481][ T625] x64_sys_call+0x2aea/0x2ff0 [ 620.737500][ T625] do_syscall_64+0xd2/0x200 [ 620.737526][ T625] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 620.737547][ T625] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 620.737617][ T625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.737636][ T625] RIP: 0033:0x7f905ba9ebe9 [ 620.737651][ T625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.737667][ T625] RSP: 002b:00007f905a4ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.737754][ T625] RAX: ffffffffffffffda RBX: 00007f905bcd5fa0 RCX: 00007f905ba9ebe9 [ 620.737765][ T625] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 620.737777][ T625] RBP: 00007f905a4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 620.737787][ T625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.737798][ T625] R13: 00007f905bcd6038 R14: 00007f905bcd5fa0 R15: 00007ffced676828 [ 620.737814][ T625] [ 620.999935][ T36] usb 13-1: enqueue for inactive port 0 [ 621.037236][ T36] usb 13-1: enqueue for inactive port 0 [ 621.170090][ T36] vhci_hcd: vhci_device speed not set [ 621.266227][ T666] __nla_validate_parse: 8 callbacks suppressed [ 621.266246][ T666] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11089'. [ 621.282853][ T666] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11089'. [ 621.622382][ T683] netlink: 88 bytes leftover after parsing attributes in process `syz.6.11090'. [ 621.633034][ T683] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 621.759732][ T690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11097'. [ 621.862431][ T694] FAULT_INJECTION: forcing a failure. [ 621.862431][ T694] name failslab, interval 1, probability 0, space 0, times 0 [ 621.875244][ T694] CPU: 1 UID: 0 PID: 694 Comm: syz.8.11099 Not tainted syzkaller #0 PREEMPT(voluntary) [ 621.875273][ T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 621.875288][ T694] Call Trace: [ 621.875302][ T694] [ 621.875311][ T694] __dump_stack+0x1d/0x30 [ 621.875378][ T694] dump_stack_lvl+0xe8/0x140 [ 621.875445][ T694] dump_stack+0x15/0x1b [ 621.875464][ T694] should_fail_ex+0x265/0x280 [ 621.875495][ T694] should_failslab+0x8c/0xb0 [ 621.875564][ T694] __kmalloc_noprof+0xa5/0x3e0 [ 621.875596][ T694] ? usb_hcd_submit_urb+0x5d3/0x1200 [ 621.875627][ T694] ? terminate_walk+0x27f/0x2a0 [ 621.875689][ T694] usb_hcd_submit_urb+0x5d3/0x1200 [ 621.875722][ T694] usb_submit_urb+0xae2/0xc20 [ 621.875827][ T694] usbfs_start_wait_urb+0x95/0x1c0 [ 621.875851][ T694] do_proc_control+0x628/0x8b0 [ 621.875874][ T694] proc_control_compat+0xae/0xe0 [ 621.875903][ T694] usbdev_ioctl+0xee1/0x1710 [ 621.875995][ T694] ? __pfx_usbdev_ioctl+0x10/0x10 [ 621.876023][ T694] __se_sys_ioctl+0xcb/0x140 [ 621.876046][ T694] __x64_sys_ioctl+0x43/0x50 [ 621.876122][ T694] x64_sys_call+0x1816/0x2ff0 [ 621.876145][ T694] do_syscall_64+0xd2/0x200 [ 621.876180][ T694] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 621.876203][ T694] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 621.876367][ T694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.876392][ T694] RIP: 0033:0x7f905ba9ebe9 [ 621.876411][ T694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.876431][ T694] RSP: 002b:00007f905a4ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.876498][ T694] RAX: ffffffffffffffda RBX: 00007f905bcd5fa0 RCX: 00007f905ba9ebe9 [ 621.876513][ T694] RDX: 0000200000000000 RSI: 00000000c0105500 RDI: 0000000000000003 [ 621.876527][ T694] RBP: 00007f905a4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 621.876542][ T694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.876556][ T694] R13: 00007f905bcd6038 R14: 00007f905bcd5fa0 R15: 00007ffced676828 [ 621.876575][ T694] [ 622.181452][ T700] syz.8.11101 (700): /proc/699/oom_adj is deprecated, please use /proc/699/oom_score_adj instead. [ 622.200260][ T698] FAULT_INJECTION: forcing a failure. [ 622.200260][ T698] name failslab, interval 1, probability 0, space 0, times 0 [ 622.212949][ T698] CPU: 1 UID: 0 PID: 698 Comm: syz.9.11102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 622.213053][ T698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.213068][ T698] Call Trace: [ 622.213076][ T698] [ 622.213086][ T698] __dump_stack+0x1d/0x30 [ 622.213110][ T698] dump_stack_lvl+0xe8/0x140 [ 622.213131][ T698] dump_stack+0x15/0x1b [ 622.213150][ T698] should_fail_ex+0x265/0x280 [ 622.213186][ T698] should_failslab+0x8c/0xb0 [ 622.213213][ T698] __kmalloc_node_noprof+0xa9/0x410 [ 622.213243][ T698] ? x64_sys_call+0x191e/0x2ff0 [ 622.213380][ T698] ? qdisc_alloc+0x65/0x440 [ 622.213467][ T698] qdisc_alloc+0x65/0x440 [ 622.213552][ T698] qdisc_create_dflt+0x7f/0x2d0 [ 622.213577][ T698] taprio_init+0x286/0x5f0 [ 622.213609][ T698] ? __pfx_taprio_init+0x10/0x10 [ 622.213638][ T698] qdisc_create+0x58e/0x9e0 [ 622.213699][ T698] tc_modify_qdisc+0xf2e/0x1420 [ 622.213734][ T698] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 622.213793][ T698] rtnetlink_rcv_msg+0x65a/0x6d0 [ 622.213850][ T698] netlink_rcv_skb+0x123/0x220 [ 622.213876][ T698] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 622.213936][ T698] rtnetlink_rcv+0x1c/0x30 [ 622.213960][ T698] netlink_unicast+0x5bd/0x690 [ 622.214025][ T698] netlink_sendmsg+0x58b/0x6b0 [ 622.214122][ T698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.214194][ T698] __sock_sendmsg+0x142/0x180 [ 622.214306][ T698] ____sys_sendmsg+0x31e/0x4e0 [ 622.214331][ T698] ___sys_sendmsg+0x17b/0x1d0 [ 622.214368][ T698] __x64_sys_sendmsg+0xd4/0x160 [ 622.214411][ T698] x64_sys_call+0x191e/0x2ff0 [ 622.214431][ T698] do_syscall_64+0xd2/0x200 [ 622.214461][ T698] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 622.214483][ T698] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 622.214647][ T698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.214672][ T698] RIP: 0033:0x7f362cf3ebe9 [ 622.214762][ T698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.214782][ T698] RSP: 002b:00007f362b9a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.214806][ T698] RAX: ffffffffffffffda RBX: 00007f362d175fa0 RCX: 00007f362cf3ebe9 [ 622.214820][ T698] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 622.214890][ T698] RBP: 00007f362b9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 622.214902][ T698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 622.214913][ T698] R13: 00007f362d176038 R14: 00007f362d175fa0 R15: 00007fff1add2788 [ 622.214930][ T698] [ 622.495412][ T710] 9pnet_fd: Insufficient options for proto=fd [ 622.499055][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 622.499073][ T29] audit: type=1326 audit(3712.489:134542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.11106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905ba9ebe9 code=0x7ffc0000 [ 622.503901][ T711] FAULT_INJECTION: forcing a failure. [ 622.503901][ T711] name failslab, interval 1, probability 0, space 0, times 0 [ 622.507967][ T29] audit: type=1326 audit(3712.489:134543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.11106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f905ba9ebe9 code=0x7ffc0000 [ 622.531277][ T711] CPU: 1 UID: 0 PID: 711 Comm: syz.9.11107 Not tainted syzkaller #0 PREEMPT(voluntary) [ 622.531302][ T711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.531315][ T711] Call Trace: [ 622.531320][ T711] [ 622.531327][ T711] __dump_stack+0x1d/0x30 [ 622.531348][ T711] dump_stack_lvl+0xe8/0x140 [ 622.531372][ T711] dump_stack+0x15/0x1b [ 622.531388][ T711] should_fail_ex+0x265/0x280 [ 622.531464][ T711] should_failslab+0x8c/0xb0 [ 622.531488][ T711] kmem_cache_alloc_noprof+0x50/0x310 [ 622.531514][ T711] ? skb_clone+0x151/0x1f0 [ 622.531541][ T711] skb_clone+0x151/0x1f0 [ 622.531710][ T711] __netlink_deliver_tap+0x2c9/0x500 [ 622.531738][ T711] netlink_unicast+0x66b/0x690 [ 622.531788][ T711] netlink_sendmsg+0x58b/0x6b0 [ 622.531825][ T711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.531928][ T711] __sock_sendmsg+0x142/0x180 [ 622.532010][ T711] ____sys_sendmsg+0x31e/0x4e0 [ 622.532037][ T711] ___sys_sendmsg+0x17b/0x1d0 [ 622.532072][ T711] __x64_sys_sendmsg+0xd4/0x160 [ 622.532151][ T711] x64_sys_call+0x191e/0x2ff0 [ 622.532172][ T711] do_syscall_64+0xd2/0x200 [ 622.532200][ T711] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 622.532273][ T711] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 622.532300][ T711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.532384][ T711] RIP: 0033:0x7f362cf3ebe9 [ 622.532400][ T711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.532417][ T711] RSP: 002b:00007f362b9a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.532482][ T711] RAX: ffffffffffffffda RBX: 00007f362d175fa0 RCX: 00007f362cf3ebe9 [ 622.532495][ T711] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000003 [ 622.532550][ T711] RBP: 00007f362b9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 622.532587][ T711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.532670][ T711] R13: 00007f362d176038 R14: 00007f362d175fa0 R15: 00007fff1add2788 [ 622.532775][ T711] [ 622.533394][ T711] IPv6: Can't replace route, no match found [ 622.544157][ T29] audit: type=1326 audit(3712.489:134544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.11106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905ba9ebe9 code=0x7ffc0000 [ 622.700005][ T718] lo speed is unknown, defaulting to 1000 [ 622.701008][ T29] audit: type=1326 audit(3712.489:134545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.11106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f905ba9ebe9 code=0x7ffc0000 [ 622.721110][ T718] lo speed is unknown, defaulting to 1000 [ 622.845278][ T29] audit: type=1326 audit(3712.499:134546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.11106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905ba9ebe9 code=0x7ffc0000 [ 622.868561][ T29] audit: type=1326 audit(3712.499:134547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.11106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f905ba9ebe9 code=0x7ffc0000 [ 622.911479][ T29] audit: type=1326 audit(3712.909:134548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.11106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905ba9ebe9 code=0x7ffc0000 [ 622.934679][ T29] audit: type=1326 audit(3712.909:134549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.8.11106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905ba9ebe9 code=0x7ffc0000 [ 622.999577][ T730] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11109'. [ 623.027993][ T29] audit: type=1400 audit(3713.019:134550): avc: denied { block_suspend } for pid=736 comm="syz.6.11117" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 623.054071][ T743] FAULT_INJECTION: forcing a failure. [ 623.054071][ T743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.067391][ T743] CPU: 0 UID: 0 PID: 743 Comm: syz.8.11116 Not tainted syzkaller #0 PREEMPT(voluntary) [ 623.067419][ T743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.067445][ T743] Call Trace: [ 623.067453][ T743] [ 623.067462][ T743] __dump_stack+0x1d/0x30 [ 623.067486][ T743] dump_stack_lvl+0xe8/0x140 [ 623.067507][ T743] dump_stack+0x15/0x1b [ 623.067526][ T743] should_fail_ex+0x265/0x280 [ 623.067553][ T743] should_fail+0xb/0x20 [ 623.067672][ T743] should_fail_usercopy+0x1a/0x20 [ 623.067694][ T743] _copy_from_user+0x1c/0xb0 [ 623.067775][ T743] restore_altstack+0x4b/0x2d0 [ 623.067804][ T743] ? __set_task_blocked+0x23a/0x2a0 [ 623.067833][ T743] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 623.067860][ T743] ? _raw_spin_unlock_irq+0x26/0x50 [ 623.067880][ T743] ? signal_setup_done+0x266/0x290 [ 623.067899][ T743] ? xfd_validate_state+0x45/0xf0 [ 623.067934][ T743] ? fpu__clear_user_states+0x63/0x1e0 [ 623.068026][ T743] ? fpregs_mark_activate+0x66/0x140 [ 623.068054][ T743] ? fpu__clear_user_states+0x63/0x1e0 [ 623.068105][ T743] ? arch_do_signal_or_restart+0x2f3/0x480 [ 623.068202][ T743] ? __rcu_read_unlock+0x4f/0x70 [ 623.068234][ T743] x64_sys_call+0x2d3c/0x2ff0 [ 623.068256][ T743] do_syscall_64+0xd2/0x200 [ 623.068288][ T743] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 623.068394][ T743] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 623.068446][ T743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.068513][ T743] RIP: 0033:0x7f905ba3adb9 [ 623.068530][ T743] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 623.068551][ T743] RSP: 002b:00007f905a4fea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 623.068570][ T743] RAX: ffffffffffffffda RBX: 00007f905bcd5fa0 RCX: 00007f905ba3adb9 [ 623.068650][ T743] RDX: 00007f905a4fea80 RSI: 00007f905a4febb0 RDI: 0000000000000021 [ 623.068665][ T743] RBP: 00007f905a4ff090 R08: 0000000000000007 R09: 0000000000000009 [ 623.068679][ T743] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 623.068693][ T743] R13: 00007f905bcd6038 R14: 00007f905bcd5fa0 R15: 00007ffced676828 [ 623.068714][ T743] [ 623.085438][ T29] audit: type=1326 audit(3713.029:134551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.1.11115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 623.357797][ T745] bond0: entered promiscuous mode [ 623.362995][ T745] bond_slave_0: entered promiscuous mode [ 623.369308][ T745] bond_slave_1: entered promiscuous mode [ 623.375388][ T745] bond0: entered allmulticast mode [ 623.380612][ T745] bond_slave_0: entered allmulticast mode [ 623.386499][ T745] bond_slave_1: entered allmulticast mode [ 623.394546][ T745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.621179][T17802] tipc: Resetting bearer [ 623.686278][ T767] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11128'. [ 623.717606][ T771] IPv6: Can't replace route, no match found [ 623.759331][T17802] tipc: Disabling bearer [ 623.880066][T17802] bond0 (unregistering): Released all slaves [ 623.888023][ T784] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11135'. [ 623.907518][ T769] lo speed is unknown, defaulting to 1000 [ 623.913582][ T769] lo speed is unknown, defaulting to 1000 [ 623.991527][T17802] tipc: Left network mode [ 624.025280][ T798] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11140'. [ 624.153825][T17802] hsr_slave_0: left promiscuous mode [ 624.161085][T17802] hsr_slave_1: left promiscuous mode [ 624.173968][T17802] veth1_macvtap: left promiscuous mode [ 624.181084][T17802] veth0_macvtap: left promiscuous mode [ 624.187402][T17802] veth1_vlan: left promiscuous mode [ 624.194160][T17802] veth0_vlan: left promiscuous mode [ 624.253702][ T807] 9pnet_fd: Insufficient options for proto=fd [ 624.706652][ T832] netlink: 'syz.7.11156': attribute type 4 has an invalid length. [ 624.721917][ T837] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 624.728461][ T837] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 624.736040][ T837] vhci_hcd vhci_hcd.0: Device attached [ 624.783912][ T841] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(6) [ 624.790503][ T841] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 624.798176][ T841] vhci_hcd vhci_hcd.0: Device attached [ 624.809839][T17802] IPVS: stop unused estimator thread 0... [ 624.849898][ T851] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11160'. [ 624.860491][ T837] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(5) [ 624.867135][ T837] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 624.874711][ T837] vhci_hcd vhci_hcd.0: Device attached [ 624.970168][ T864] FAULT_INJECTION: forcing a failure. [ 624.970168][ T864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.983509][ T864] CPU: 0 UID: 0 PID: 864 Comm: syz.8.11167 Not tainted syzkaller #0 PREEMPT(voluntary) [ 624.983564][ T864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.983579][ T864] Call Trace: [ 624.983618][ T864] [ 624.983628][ T864] __dump_stack+0x1d/0x30 [ 624.983723][ T864] dump_stack_lvl+0xe8/0x140 [ 624.983743][ T864] dump_stack+0x15/0x1b [ 624.983762][ T864] should_fail_ex+0x265/0x280 [ 624.983790][ T864] should_fail+0xb/0x20 [ 624.983811][ T864] should_fail_usercopy+0x1a/0x20 [ 624.983945][ T864] _copy_from_user+0x1c/0xb0 [ 624.983978][ T864] ___sys_sendmsg+0xc1/0x1d0 [ 624.984022][ T864] __x64_sys_sendmsg+0xd4/0x160 [ 624.984057][ T864] x64_sys_call+0x191e/0x2ff0 [ 624.984157][ T864] do_syscall_64+0xd2/0x200 [ 624.984186][ T864] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 624.984221][ T864] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 624.984258][ T864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.984283][ T864] RIP: 0033:0x7f905ba9ebe9 [ 624.984301][ T864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.984330][ T864] RSP: 002b:00007f905a4ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.984415][ T864] RAX: ffffffffffffffda RBX: 00007f905bcd5fa0 RCX: 00007f905ba9ebe9 [ 624.984428][ T864] RDX: 0000000000000800 RSI: 0000200000000480 RDI: 0000000000000003 [ 624.984448][ T864] RBP: 00007f905a4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 624.984463][ T864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.984477][ T864] R13: 00007f905bcd6038 R14: 00007f905bcd5fa0 R15: 00007ffced676828 [ 624.984499][ T864] [ 625.062513][ T36] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 625.067430][ T841] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 625.192374][ T865] lo speed is unknown, defaulting to 1000 [ 625.198706][ T865] lo speed is unknown, defaulting to 1000 [ 625.571640][ T837] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(15) [ 625.578420][ T837] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 625.585940][ T837] vhci_hcd vhci_hcd.0: Device attached [ 625.615092][ T870] vhci_hcd: connection closed [ 625.615369][ T51] vhci_hcd: stop threads [ 625.615413][ T842] vhci_hcd: connection closed [ 625.620255][ T51] vhci_hcd: release socket [ 625.624551][ T838] vhci_hcd: connection reset by peer [ 625.629130][ T51] vhci_hcd: disconnect device [ 625.633705][ T852] vhci_hcd: connection closed [ 625.767803][ T876] netlink: 88 bytes leftover after parsing attributes in process `syz.8.11168'. [ 625.791368][ T51] vhci_hcd: stop threads [ 625.795649][ T51] vhci_hcd: release socket [ 625.800134][ T51] vhci_hcd: disconnect device [ 625.812599][ T876] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 625.955330][ T51] vhci_hcd: stop threads [ 625.959727][ T51] vhci_hcd: release socket [ 625.964220][ T51] vhci_hcd: disconnect device [ 626.102103][ T51] vhci_hcd: stop threads [ 626.106403][ T51] vhci_hcd: release socket [ 626.110941][ T51] vhci_hcd: disconnect device [ 626.377868][ T892] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11175'. [ 626.378078][ T889] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11174'. [ 626.741299][ T916] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 626.748016][ T916] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.755800][ T916] vhci_hcd vhci_hcd.0: Device attached [ 626.792716][ T916] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 626.799313][ T916] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.806876][ T916] vhci_hcd vhci_hcd.0: Device attached [ 626.829598][ T929] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11188'. [ 626.847684][ T933] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11189'. [ 626.856873][ T916] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 626.863452][ T916] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 626.871035][ T916] vhci_hcd vhci_hcd.0: Device attached [ 626.940819][ T916] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 626.956312][ T916] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(14) [ 626.963285][ T916] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 626.970776][ T916] vhci_hcd vhci_hcd.0: Device attached [ 626.989369][ T945] vhci_hcd: connection closed [ 626.989739][ T51] vhci_hcd: stop threads [ 626.998897][ T51] vhci_hcd: release socket [ 627.003357][ T51] vhci_hcd: disconnect device [ 627.008595][ T5043] usb 13-1: new low-speed USB device number 5 using vhci_hcd [ 627.018174][ T930] vhci_hcd: connection closed [ 627.018335][ T926] vhci_hcd: connection closed [ 627.023278][ T917] vhci_hcd: connection reset by peer [ 627.036423][ T51] vhci_hcd: stop threads [ 627.040772][ T51] vhci_hcd: release socket [ 627.045286][ T51] vhci_hcd: disconnect device [ 627.050300][ T51] vhci_hcd: stop threads [ 627.054602][ T51] vhci_hcd: release socket [ 627.059084][ T51] vhci_hcd: disconnect device [ 627.064949][ T51] vhci_hcd: stop threads [ 627.069304][ T51] vhci_hcd: release socket [ 627.073803][ T51] vhci_hcd: disconnect device [ 627.465570][ T961] FAULT_INJECTION: forcing a failure. [ 627.465570][ T961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.478716][ T961] CPU: 0 UID: 0 PID: 961 Comm: syz.1.11198 Not tainted syzkaller #0 PREEMPT(voluntary) [ 627.478742][ T961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 627.478763][ T961] Call Trace: [ 627.478771][ T961] [ 627.478779][ T961] __dump_stack+0x1d/0x30 [ 627.478802][ T961] dump_stack_lvl+0xe8/0x140 [ 627.478823][ T961] dump_stack+0x15/0x1b [ 627.478838][ T961] should_fail_ex+0x265/0x280 [ 627.478859][ T961] should_fail+0xb/0x20 [ 627.478900][ T961] should_fail_usercopy+0x1a/0x20 [ 627.478927][ T961] _copy_from_user+0x1c/0xb0 [ 627.478965][ T961] ___sys_sendmsg+0xc1/0x1d0 [ 627.478999][ T961] __x64_sys_sendmsg+0xd4/0x160 [ 627.479081][ T961] x64_sys_call+0x191e/0x2ff0 [ 627.479106][ T961] do_syscall_64+0xd2/0x200 [ 627.479200][ T961] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 627.479221][ T961] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 627.479250][ T961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.479274][ T961] RIP: 0033:0x7f5a41a4ebe9 [ 627.479291][ T961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.479406][ T961] RSP: 002b:00007f5a404af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.479485][ T961] RAX: ffffffffffffffda RBX: 00007f5a41c85fa0 RCX: 00007f5a41a4ebe9 [ 627.479497][ T961] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 627.479509][ T961] RBP: 00007f5a404af090 R08: 0000000000000000 R09: 0000000000000000 [ 627.479522][ T961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.479535][ T961] R13: 00007f5a41c86038 R14: 00007f5a41c85fa0 R15: 00007fff259e3aa8 [ 627.479555][ T961] [ 627.682776][ T966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11200'. [ 627.686471][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 627.686487][ T29] audit: type=1326 audit(3717.679:134947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.6.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 627.731945][ T29] audit: type=1326 audit(3717.719:134948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.6.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 627.755154][ T29] audit: type=1326 audit(3717.719:134949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.6.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 627.778786][ T29] audit: type=1326 audit(3717.719:134950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.6.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 627.802279][ T29] audit: type=1326 audit(3717.719:134951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.6.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 627.825402][ T29] audit: type=1326 audit(3717.719:134952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.6.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 627.848611][ T29] audit: type=1326 audit(3717.719:134953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.6.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 627.871781][ T29] audit: type=1326 audit(3717.719:134954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.6.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 627.879234][ T968] hub 9-0:1.0: USB hub found [ 627.894847][ T29] audit: type=1326 audit(3717.719:134955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.6.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 627.903058][ T971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11202'. [ 627.922560][ T29] audit: type=1326 audit(3717.719:134956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.6.11201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 627.957478][ T968] hub 9-0:1.0: 8 ports detected [ 628.022813][ T975] netlink: 94 bytes leftover after parsing attributes in process `syz.8.11204'. [ 628.053877][ T975] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11204'. [ 628.065729][ T982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11206'. [ 628.159518][ T984] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20000 [ 628.176151][ T1002] netlink: 'syz.7.11215': attribute type 10 has an invalid length. [ 628.196365][ T1002] team0: Port device dummy0 added [ 628.235980][ T1002] lo speed is unknown, defaulting to 1000 [ 628.244324][ T1002] lo speed is unknown, defaulting to 1000 [ 628.384828][ T1025] netlink: 94 bytes leftover after parsing attributes in process `syz.6.11222'. [ 628.658442][ T1054] FAULT_INJECTION: forcing a failure. [ 628.658442][ T1054] name failslab, interval 1, probability 0, space 0, times 0 [ 628.671346][ T1054] CPU: 1 UID: 0 PID: 1054 Comm: syz.1.11232 Not tainted syzkaller #0 PREEMPT(voluntary) [ 628.671378][ T1054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.671390][ T1054] Call Trace: [ 628.671398][ T1054] [ 628.671451][ T1054] __dump_stack+0x1d/0x30 [ 628.671507][ T1054] dump_stack_lvl+0xe8/0x140 [ 628.671529][ T1054] dump_stack+0x15/0x1b [ 628.671548][ T1054] should_fail_ex+0x265/0x280 [ 628.671572][ T1054] should_failslab+0x8c/0xb0 [ 628.671598][ T1054] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 628.671634][ T1054] ? debugfs_alloc_inode+0x34/0x40 [ 628.671664][ T1054] ? lookup_noperm+0xc9/0x180 [ 628.671742][ T1054] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 628.671770][ T1054] debugfs_alloc_inode+0x34/0x40 [ 628.671846][ T1054] alloc_inode+0x3d/0x170 [ 628.671868][ T1054] new_inode+0x1d/0xe0 [ 628.671891][ T1054] __debugfs_create_file+0x109/0x330 [ 628.671992][ T1054] debugfs_create_file_full+0x3f/0x60 [ 628.672019][ T1054] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 628.672052][ T1054] ref_tracker_dir_debugfs+0x100/0x1e0 [ 628.672164][ T1054] alloc_netdev_mqs+0x1a2/0xa30 [ 628.672224][ T1054] ? sized_strscpy+0x121/0x1a0 [ 628.672262][ T1054] ip6_tnl_locate+0x37e/0x4a0 [ 628.672359][ T1054] ip6_tnl_siocdevprivate+0x550/0x920 [ 628.672419][ T1054] dev_ifsioc+0x8f5/0xaa0 [ 628.672451][ T1054] dev_ioctl+0x78d/0x960 [ 628.672480][ T1054] sock_ioctl+0x593/0x610 [ 628.672509][ T1054] ? __pfx_sock_ioctl+0x10/0x10 [ 628.672594][ T1054] __se_sys_ioctl+0xcb/0x140 [ 628.672616][ T1054] __x64_sys_ioctl+0x43/0x50 [ 628.672636][ T1054] x64_sys_call+0x1816/0x2ff0 [ 628.672661][ T1054] do_syscall_64+0xd2/0x200 [ 628.672728][ T1054] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 628.672755][ T1054] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 628.672891][ T1054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.672913][ T1054] RIP: 0033:0x7f5a41a4ebe9 [ 628.672953][ T1054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.672973][ T1054] RSP: 002b:00007f5a404af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.672997][ T1054] RAX: ffffffffffffffda RBX: 00007f5a41c85fa0 RCX: 00007f5a41a4ebe9 [ 628.673087][ T1054] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 628.673102][ T1054] RBP: 00007f5a404af090 R08: 0000000000000000 R09: 0000000000000000 [ 628.673113][ T1054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.673126][ T1054] R13: 00007f5a41c86038 R14: 00007f5a41c85fa0 R15: 00007fff259e3aa8 [ 628.673164][ T1054] [ 628.673173][ T1054] debugfs: out of free dentries, can not create file 'netdev@ffff88811a8dd550' [ 629.040075][ T1068] lo speed is unknown, defaulting to 1000 [ 629.046671][ T1068] lo speed is unknown, defaulting to 1000 [ 629.408604][ T1090] bridge: RTM_NEWNEIGH with invalid ether address [ 629.457896][ T1098] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 629.464560][ T1098] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 629.472186][ T1098] vhci_hcd vhci_hcd.0: Device attached [ 629.481888][ T1098] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 629.488607][ T1098] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 629.496281][ T1098] vhci_hcd vhci_hcd.0: Device attached [ 629.503725][ T1098] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 629.510420][ T1098] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 629.517903][ T1098] vhci_hcd vhci_hcd.0: Device attached [ 629.541315][ T1098] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 629.551340][ T1098] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(15) [ 629.557975][ T1098] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 629.565755][ T1098] vhci_hcd vhci_hcd.0: Device attached [ 629.578776][ T1098] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(17) [ 629.585412][ T1098] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 629.592904][ T1098] vhci_hcd vhci_hcd.0: Device attached [ 629.601811][ T1111] vhci_hcd: connection closed [ 629.601811][ T1113] vhci_hcd: connection closed [ 629.606792][T17801] vhci_hcd: stop threads [ 629.616063][T17801] vhci_hcd: release socket [ 629.620618][T17801] vhci_hcd: disconnect device [ 629.625725][T17801] vhci_hcd: stop threads [ 629.630095][T17801] vhci_hcd: release socket [ 629.634713][T17801] vhci_hcd: disconnect device [ 629.688331][ T1107] vhci_hcd: connection closed [ 629.688513][ T1099] vhci_hcd: connection closed [ 629.718135][ T1103] vhci_hcd: connection closed [ 629.723556][ T154] vhci_hcd: stop threads [ 629.732728][ T154] vhci_hcd: release socket [ 629.737284][ T154] vhci_hcd: disconnect device [ 629.742141][ T2961] usb 15-1: new low-speed USB device number 4 using vhci_hcd [ 629.773730][ T154] vhci_hcd: stop threads [ 629.778077][ T154] vhci_hcd: release socket [ 629.782612][ T154] vhci_hcd: disconnect device [ 629.785370][ T1120] 9pnet_fd: Insufficient options for proto=fd [ 629.794812][ T154] vhci_hcd: stop threads [ 629.799195][ T154] vhci_hcd: release socket [ 629.803625][ T154] vhci_hcd: disconnect device [ 629.919144][ T1120] FAULT_INJECTION: forcing a failure. [ 629.919144][ T1120] name failslab, interval 1, probability 0, space 0, times 0 [ 629.931907][ T1120] CPU: 1 UID: 0 PID: 1120 Comm: syz.1.11254 Not tainted syzkaller #0 PREEMPT(voluntary) [ 629.931937][ T1120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.931949][ T1120] Call Trace: [ 629.931958][ T1120] [ 629.931966][ T1120] __dump_stack+0x1d/0x30 [ 629.932033][ T1120] dump_stack_lvl+0xe8/0x140 [ 629.932071][ T1120] dump_stack+0x15/0x1b [ 629.932088][ T1120] should_fail_ex+0x265/0x280 [ 629.932112][ T1120] should_failslab+0x8c/0xb0 [ 629.932223][ T1120] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 629.932253][ T1120] ? sidtab_sid2str_get+0xa0/0x130 [ 629.932343][ T1120] kmemdup_noprof+0x2b/0x70 [ 629.932427][ T1120] sidtab_sid2str_get+0xa0/0x130 [ 629.932487][ T1120] security_sid_to_context_core+0x1eb/0x2e0 [ 629.932586][ T1120] security_sid_to_context+0x27/0x40 [ 629.932606][ T1120] selinux_lsmprop_to_secctx+0x67/0xf0 [ 629.932629][ T1120] security_lsmprop_to_secctx+0x43/0x80 [ 629.932657][ T1120] audit_log_task_context+0x77/0x190 [ 629.932690][ T1120] audit_log_task+0xf4/0x250 [ 629.932718][ T1120] audit_seccomp+0x61/0x100 [ 629.932766][ T1120] ? __seccomp_filter+0x68c/0x10d0 [ 629.932788][ T1120] __seccomp_filter+0x69d/0x10d0 [ 629.932812][ T1120] ? __pfx_default_wake_function+0x10/0x10 [ 629.932884][ T1120] __secure_computing+0x82/0x150 [ 629.932905][ T1120] syscall_trace_enter+0xcf/0x1e0 [ 629.932930][ T1120] do_syscall_64+0xac/0x200 [ 629.932979][ T1120] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 629.933007][ T1120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.933071][ T1120] RIP: 0033:0x7f5a41a4d5fc [ 629.933088][ T1120] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 629.933105][ T1120] RSP: 002b:00007f5a404af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 629.933126][ T1120] RAX: ffffffffffffffda RBX: 00007f5a41c85fa0 RCX: 00007f5a41a4d5fc [ 629.933187][ T1120] RDX: 000000000000000f RSI: 00007f5a404af0a0 RDI: 0000000000000006 [ 629.933200][ T1120] RBP: 00007f5a404af090 R08: 0000000000000000 R09: 0000000000000000 [ 629.933212][ T1120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.933225][ T1120] R13: 00007f5a41c86038 R14: 00007f5a41c85fa0 R15: 00007fff259e3aa8 [ 629.933244][ T1120] [ 630.482813][ T1157] wireguard0: entered promiscuous mode [ 630.608236][ T36] usb 19-1: enqueue for inactive port 0 [ 630.613860][ T36] usb 19-1: enqueue for inactive port 0 [ 630.687899][ T36] vhci_hcd: vhci_device speed not set [ 630.812849][ T1176] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 630.819450][ T1176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.827224][ T1176] vhci_hcd vhci_hcd.0: Device attached [ 630.855143][ T1176] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 630.861722][ T1176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.869383][ T1176] vhci_hcd vhci_hcd.0: Device attached [ 630.880132][ T1176] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 630.886726][ T1176] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 630.894316][ T1176] vhci_hcd vhci_hcd.0: Device attached [ 630.913236][ T1176] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 630.928348][ T1190] FAULT_INJECTION: forcing a failure. [ 630.928348][ T1190] name failslab, interval 1, probability 0, space 0, times 0 [ 630.941298][ T1190] CPU: 1 UID: 0 PID: 1190 Comm: syz.9.11279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 630.941328][ T1190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.941340][ T1190] Call Trace: [ 630.941347][ T1190] [ 630.941355][ T1190] __dump_stack+0x1d/0x30 [ 630.941434][ T1190] dump_stack_lvl+0xe8/0x140 [ 630.941516][ T1190] dump_stack+0x15/0x1b [ 630.941533][ T1190] should_fail_ex+0x265/0x280 [ 630.941556][ T1190] should_failslab+0x8c/0xb0 [ 630.941580][ T1190] kmem_cache_alloc_noprof+0x50/0x310 [ 630.941688][ T1190] ? skb_clone+0x151/0x1f0 [ 630.941715][ T1190] skb_clone+0x151/0x1f0 [ 630.941742][ T1190] __netlink_deliver_tap+0x2c9/0x500 [ 630.941802][ T1190] netlink_unicast+0x66b/0x690 [ 630.941829][ T1190] netlink_sendmsg+0x58b/0x6b0 [ 630.941859][ T1190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.941882][ T1190] __sock_sendmsg+0x142/0x180 [ 630.941984][ T1190] ____sys_sendmsg+0x31e/0x4e0 [ 630.942008][ T1190] ___sys_sendmsg+0x17b/0x1d0 [ 630.942040][ T1190] __x64_sys_sendmsg+0xd4/0x160 [ 630.942072][ T1190] x64_sys_call+0x191e/0x2ff0 [ 630.942172][ T1190] do_syscall_64+0xd2/0x200 [ 630.942200][ T1190] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 630.942221][ T1190] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 630.942249][ T1190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.942277][ T1190] RIP: 0033:0x7f362cf3ebe9 [ 630.942292][ T1190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.942364][ T1190] RSP: 002b:00007f362b9a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.942384][ T1190] RAX: ffffffffffffffda RBX: 00007f362d175fa0 RCX: 00007f362cf3ebe9 [ 630.942396][ T1190] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 630.942407][ T1190] RBP: 00007f362b9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 630.942419][ T1190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.942434][ T1190] R13: 00007f362d176038 R14: 00007f362d175fa0 R15: 00007fff1add2788 [ 630.942456][ T1190] [ 631.193522][ T1176] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(15) [ 631.200235][ T1176] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 631.208343][ T1176] vhci_hcd vhci_hcd.0: Device attached [ 631.376936][ T1176] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(17) [ 631.383634][ T1176] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 631.391246][ T1176] vhci_hcd vhci_hcd.0: Device attached [ 631.530960][ T1191] vhci_hcd: connection closed [ 631.538126][T17801] vhci_hcd: stop threads [ 631.544191][ T1202] vhci_hcd: connection closed [ 631.547197][T17801] vhci_hcd: release socket [ 631.556377][T17801] vhci_hcd: disconnect device [ 631.581769][T17801] vhci_hcd: stop threads [ 631.586072][T17801] vhci_hcd: release socket [ 631.590564][T17801] vhci_hcd: disconnect device [ 631.641754][ T1181] vhci_hcd: connection closed [ 631.641880][ T1177] vhci_hcd: connection reset by peer [ 631.642864][ T1185] vhci_hcd: connection closed [ 631.646960][T17801] vhci_hcd: stop threads [ 631.661223][T17801] vhci_hcd: release socket [ 631.665659][T17801] vhci_hcd: disconnect device [ 631.675800][T17801] vhci_hcd: stop threads [ 631.680159][T17801] vhci_hcd: release socket [ 631.684723][T17801] vhci_hcd: disconnect device [ 631.710958][ T1209] __nla_validate_parse: 21 callbacks suppressed [ 631.710973][ T1209] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11285'. [ 631.728203][ T1213] netlink: 94 bytes leftover after parsing attributes in process `syz.8.11287'. [ 631.731568][T17801] vhci_hcd: stop threads [ 631.741585][T17801] vhci_hcd: release socket [ 631.745285][ T1213] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11287'. [ 631.746022][T17801] vhci_hcd: disconnect device [ 631.772043][ T1219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11289'. [ 631.905241][ T1227] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11292'. [ 632.034988][ T1229] netlink: 88 bytes leftover after parsing attributes in process `syz.1.11290'. [ 632.380699][ T5043] usb 13-1: enqueue for inactive port 0 [ 632.386441][ T5043] usb 13-1: enqueue for inactive port 0 [ 632.441532][ T1236] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11295'. [ 632.488016][ T5043] vhci_hcd: vhci_device speed not set [ 632.798076][ T29] kauditd_printk_skb: 641 callbacks suppressed [ 632.798097][ T29] audit: type=1400 audit(3722.769:135597): avc: denied { create } for pid=1247 comm="syz.7.11300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 632.823693][ T29] audit: type=1400 audit(3722.779:135598): avc: denied { setopt } for pid=1247 comm="syz.7.11300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 632.928458][ T29] audit: type=1400 audit(3722.909:135599): avc: denied { tracepoint } for pid=1252 comm="syz.1.11301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 632.948168][ T29] audit: type=1400 audit(3722.919:135600): avc: denied { create } for pid=1252 comm="syz.1.11301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 632.967491][ T29] audit: type=1400 audit(3722.919:135601): avc: denied { write } for pid=1252 comm="syz.1.11301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 633.066710][ T1256] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11303'. [ 633.148037][ T29] audit: type=1326 audit(3723.139:135602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.8.11305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905ba9ebe9 code=0x7ffc0000 [ 633.181621][ T1270] ALSA: seq fatal error: cannot create timer (-22) [ 633.267353][ T1270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11304'. [ 633.291924][ T29] audit: type=1400 audit(3723.279:135603): avc: denied { firmware_load } for pid=1257 comm="syz.1.11304" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 633.611239][ T1281] netlink: 88 bytes leftover after parsing attributes in process `syz.9.11310'. [ 633.689991][ T5031] IPVS: starting estimator thread 0... [ 633.825376][ T1258] Set syz1 is full, maxelem 65536 reached [ 633.892405][ T1288] IPVS: using max 2928 ests per chain, 146400 per kthread [ 634.117991][ T29] audit: type=1326 audit(3724.089:135604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.9.11311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 634.141469][ T29] audit: type=1326 audit(3724.089:135605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.9.11311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 634.164914][ T29] audit: type=1326 audit(3724.099:135606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.9.11311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 634.757899][ T2961] usb 15-1: enqueue for inactive port 0 [ 634.763695][ T2961] usb 15-1: enqueue for inactive port 0 [ 634.838018][ T2961] vhci_hcd: vhci_device speed not set [ 634.953200][ T1339] lo speed is unknown, defaulting to 1000 [ 634.959821][ T1339] lo speed is unknown, defaulting to 1000 [ 635.525940][ T1347] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 635.532521][ T1347] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 635.540109][ T1347] vhci_hcd vhci_hcd.0: Device attached [ 635.554940][ T1311] syz.6.11319 (1311) used greatest stack depth: 7304 bytes left [ 635.572927][ T1343] lo speed is unknown, defaulting to 1000 [ 635.584672][ T1343] lo speed is unknown, defaulting to 1000 [ 635.637969][ T1350] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 635.644493][ T1350] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 635.652058][ T1347] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 635.658624][ T1347] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 635.666162][ T1350] vhci_hcd vhci_hcd.0: Device attached [ 635.666215][ T1347] vhci_hcd vhci_hcd.0: Device attached [ 635.752974][ T1350] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 635.783806][ T1347] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(10) [ 635.790521][ T1347] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 635.798181][ T1347] vhci_hcd vhci_hcd.0: Device attached [ 635.939450][ T5031] usb 3-1: new low-speed USB device number 9 using vhci_hcd [ 635.960169][ T1347] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(17) [ 635.966834][ T1347] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 635.974382][ T1347] vhci_hcd vhci_hcd.0: Device attached [ 636.030056][ T1371] vhci_hcd: connection closed [ 636.030301][ T38] vhci_hcd: stop threads [ 636.036062][ T1368] vhci_hcd: connection closed [ 636.039458][ T38] vhci_hcd: release socket [ 636.048644][ T38] vhci_hcd: disconnect device [ 636.061175][ T38] vhci_hcd: stop threads [ 636.065466][ T38] vhci_hcd: release socket [ 636.070058][ T38] vhci_hcd: disconnect device [ 636.080896][ T1361] FAULT_INJECTION: forcing a failure. [ 636.080896][ T1361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.094182][ T1361] CPU: 0 UID: 0 PID: 1361 Comm: kfree Not tainted syzkaller #0 PREEMPT(voluntary) [ 636.094212][ T1361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.094224][ T1361] Call Trace: [ 636.094248][ T1361] [ 636.094257][ T1361] __dump_stack+0x1d/0x30 [ 636.094283][ T1361] dump_stack_lvl+0xe8/0x140 [ 636.094369][ T1361] dump_stack+0x15/0x1b [ 636.094385][ T1361] should_fail_ex+0x265/0x280 [ 636.094406][ T1361] should_fail+0xb/0x20 [ 636.094436][ T1361] should_fail_usercopy+0x1a/0x20 [ 636.094460][ T1361] _copy_from_user+0x1c/0xb0 [ 636.094494][ T1361] __sys_bpf+0x178/0x7b0 [ 636.094529][ T1361] __x64_sys_bpf+0x41/0x50 [ 636.094580][ T1361] x64_sys_call+0x2aea/0x2ff0 [ 636.094661][ T1361] do_syscall_64+0xd2/0x200 [ 636.094688][ T1361] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 636.094715][ T1361] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 636.094747][ T1361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.094822][ T1361] RIP: 0033:0x7f905ba9ebe9 [ 636.094839][ T1361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.094857][ T1361] RSP: 002b:00007f905a4ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 636.094879][ T1361] RAX: ffffffffffffffda RBX: 00007f905bcd5fa0 RCX: 00007f905ba9ebe9 [ 636.094894][ T1361] RDX: 0000000000000020 RSI: 00002000000008c0 RDI: 0000000000000002 [ 636.094908][ T1361] RBP: 00007f905a4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 636.094923][ T1361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.094938][ T1361] R13: 00007f905bcd6038 R14: 00007f905bcd5fa0 R15: 00007ffced676828 [ 636.094977][ T1361] [ 636.374097][ T1358] vhci_hcd: connection closed [ 636.377874][ T1356] vhci_hcd: connection closed [ 636.407289][ T154] vhci_hcd: stop threads [ 636.416434][ T154] vhci_hcd: release socket [ 636.416715][ T1348] vhci_hcd: connection reset by peer [ 636.421015][ T154] vhci_hcd: disconnect device [ 636.426561][ T154] vhci_hcd: stop threads [ 636.435606][ T154] vhci_hcd: release socket [ 636.440111][ T154] vhci_hcd: disconnect device [ 636.451392][ T154] vhci_hcd: stop threads [ 636.455678][ T154] vhci_hcd: release socket [ 636.460375][ T154] vhci_hcd: disconnect device [ 636.637398][ T1390] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 636.862800][ T1397] netlink: 'syz.9.11346': attribute type 4 has an invalid length. [ 637.069316][ T1412] __nla_validate_parse: 14 callbacks suppressed [ 637.069335][ T1412] netlink: 256 bytes leftover after parsing attributes in process `syz.9.11352'. [ 637.258307][ T1422] lo speed is unknown, defaulting to 1000 [ 637.264916][ T1422] lo speed is unknown, defaulting to 1000 [ 637.932639][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 637.932656][ T29] audit: type=1400 audit(3727.849:135961): avc: denied { read } for pid=1448 comm="syz.9.11367" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 637.962302][ T29] audit: type=1400 audit(3727.849:135962): avc: denied { open } for pid=1448 comm="syz.9.11367" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 637.999412][ T1454] netlink: 94 bytes leftover after parsing attributes in process `syz.6.11370'. [ 638.009434][ T1454] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11370'. [ 638.141609][ T1459] netlink: 88 bytes leftover after parsing attributes in process `syz.8.11368'. [ 638.179958][ T1459] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 638.314036][ T1468] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11373'. [ 638.554327][ T29] audit: type=1326 audit(3728.549:135963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.9.11375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 638.579891][ T29] audit: type=1326 audit(3728.549:135964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.9.11375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 638.584575][ T1475] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11376'. [ 638.603316][ T29] audit: type=1326 audit(3728.549:135965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.9.11375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 638.635802][ T29] audit: type=1326 audit(3728.549:135966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.9.11375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 638.659072][ T29] audit: type=1326 audit(3728.549:135967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.9.11375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 638.682479][ T29] audit: type=1326 audit(3728.549:135968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.9.11375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 638.705793][ T29] audit: type=1326 audit(3728.549:135969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.9.11375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 638.729006][ T29] audit: type=1326 audit(3728.549:135970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.9.11375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362cf3ebe9 code=0x7ffc0000 [ 638.815883][ T1484] netlink: 27 bytes leftover after parsing attributes in process `syz.7.11381'. [ 639.154632][ T1505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11390'. [ 639.482504][ T1519] lo speed is unknown, defaulting to 1000 [ 639.500085][ T1519] lo speed is unknown, defaulting to 1000 [ 639.726682][ T1528] netlink: 88 bytes leftover after parsing attributes in process `syz.9.11392'. [ 639.739244][ T1528] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 640.253907][ T1523] FAULT_INJECTION: forcing a failure. [ 640.253907][ T1523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.267149][ T1523] CPU: 1 UID: 0 PID: 1523 Comm: syz.6.11397 Not tainted syzkaller #0 PREEMPT(voluntary) [ 640.267221][ T1523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.267235][ T1523] Call Trace: [ 640.267244][ T1523] [ 640.267253][ T1523] __dump_stack+0x1d/0x30 [ 640.267276][ T1523] dump_stack_lvl+0xe8/0x140 [ 640.267297][ T1523] dump_stack+0x15/0x1b [ 640.267345][ T1523] should_fail_ex+0x265/0x280 [ 640.267370][ T1523] should_fail+0xb/0x20 [ 640.267411][ T1523] should_fail_usercopy+0x1a/0x20 [ 640.267436][ T1523] _copy_from_iter+0xd2/0xe80 [ 640.267467][ T1523] ? __build_skb_around+0x1a0/0x200 [ 640.267491][ T1523] ? __alloc_skb+0x223/0x320 [ 640.267589][ T1523] netlink_sendmsg+0x471/0x6b0 [ 640.267617][ T1523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.267727][ T1523] __sock_sendmsg+0x142/0x180 [ 640.267757][ T1523] ____sys_sendmsg+0x31e/0x4e0 [ 640.267785][ T1523] ___sys_sendmsg+0x17b/0x1d0 [ 640.267827][ T1523] __x64_sys_sendmsg+0xd4/0x160 [ 640.267886][ T1523] x64_sys_call+0x191e/0x2ff0 [ 640.267908][ T1523] do_syscall_64+0xd2/0x200 [ 640.267938][ T1523] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 640.267963][ T1523] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 640.268044][ T1523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.268094][ T1523] RIP: 0033:0x7fa910c9ebe9 [ 640.268112][ T1523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.268173][ T1523] RSP: 002b:00007fa90f6ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.268260][ T1523] RAX: ffffffffffffffda RBX: 00007fa910ed5fa0 RCX: 00007fa910c9ebe9 [ 640.268274][ T1523] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 640.268288][ T1523] RBP: 00007fa90f6ff090 R08: 0000000000000000 R09: 0000000000000000 [ 640.268302][ T1523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 640.268316][ T1523] R13: 00007fa910ed6038 R14: 00007fa910ed5fa0 R15: 00007ffde269bb38 [ 640.268336][ T1523] [ 640.788456][ T1554] FAULT_INJECTION: forcing a failure. [ 640.788456][ T1554] name failslab, interval 1, probability 0, space 0, times 0 [ 640.801264][ T1554] CPU: 0 UID: 0 PID: 1554 Comm: syz.8.11405 Not tainted syzkaller #0 PREEMPT(voluntary) [ 640.801291][ T1554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.801304][ T1554] Call Trace: [ 640.801310][ T1554] [ 640.801318][ T1554] __dump_stack+0x1d/0x30 [ 640.801342][ T1554] dump_stack_lvl+0xe8/0x140 [ 640.801433][ T1554] dump_stack+0x15/0x1b [ 640.801448][ T1554] should_fail_ex+0x265/0x280 [ 640.801472][ T1554] should_failslab+0x8c/0xb0 [ 640.801512][ T1554] kmem_cache_alloc_node_noprof+0x57/0x320 [ 640.801612][ T1554] ? __alloc_skb+0x101/0x320 [ 640.801738][ T1554] ? __rtnl_unlock+0x95/0xb0 [ 640.801783][ T1554] __alloc_skb+0x101/0x320 [ 640.801812][ T1554] netlink_ack+0xfd/0x500 [ 640.801838][ T1554] ? avc_has_perm_noaudit+0x1b1/0x200 [ 640.801866][ T1554] netlink_rcv_skb+0x192/0x220 [ 640.801917][ T1554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 640.801953][ T1554] rtnetlink_rcv+0x1c/0x30 [ 640.802014][ T1554] netlink_unicast+0x5bd/0x690 [ 640.802043][ T1554] netlink_sendmsg+0x58b/0x6b0 [ 640.802163][ T1554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.802192][ T1554] __sock_sendmsg+0x142/0x180 [ 640.802227][ T1554] ____sys_sendmsg+0x31e/0x4e0 [ 640.802366][ T1554] ___sys_sendmsg+0x17b/0x1d0 [ 640.802504][ T1554] __x64_sys_sendmsg+0xd4/0x160 [ 640.802577][ T1554] x64_sys_call+0x191e/0x2ff0 [ 640.802668][ T1554] do_syscall_64+0xd2/0x200 [ 640.802704][ T1554] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 640.802733][ T1554] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 640.802765][ T1554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.802877][ T1554] RIP: 0033:0x7f905ba9ebe9 [ 640.802896][ T1554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.802953][ T1554] RSP: 002b:00007f905a4ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.802972][ T1554] RAX: ffffffffffffffda RBX: 00007f905bcd5fa0 RCX: 00007f905ba9ebe9 [ 640.802984][ T1554] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 640.803009][ T1554] RBP: 00007f905a4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 640.803022][ T1554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 640.803036][ T1554] R13: 00007f905bcd6038 R14: 00007f905bcd5fa0 R15: 00007ffced676828 [ 640.803054][ T1554] [ 641.061047][ T5031] usb 3-1: enqueue for inactive port 0 [ 641.066599][ T5031] usb 3-1: enqueue for inactive port 0 [ 641.103753][ T1559] lo speed is unknown, defaulting to 1000 [ 641.110398][ T1559] lo speed is unknown, defaulting to 1000 [ 641.464717][ T5031] vhci_hcd: vhci_device speed not set [ 641.528882][ T1565] SELinux: policydb magic number 0x5 does not match expected magic number 0xf97cff8c [ 641.542394][ T1565] SELinux: failed to load policy [ 641.552122][ T1566] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11408'. [ 641.733395][ T1581] FAULT_INJECTION: forcing a failure. [ 641.733395][ T1581] name failslab, interval 1, probability 0, space 0, times 0 [ 641.746411][ T1581] CPU: 0 UID: 0 PID: 1581 Comm: syz.9.11414 Not tainted syzkaller #0 PREEMPT(voluntary) [ 641.746442][ T1581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.746460][ T1581] Call Trace: [ 641.746469][ T1581] [ 641.746479][ T1581] __dump_stack+0x1d/0x30 [ 641.746501][ T1581] dump_stack_lvl+0xe8/0x140 [ 641.746544][ T1581] dump_stack+0x15/0x1b [ 641.746559][ T1581] should_fail_ex+0x265/0x280 [ 641.746587][ T1581] should_failslab+0x8c/0xb0 [ 641.746614][ T1581] kmem_cache_alloc_node_noprof+0x57/0x320 [ 641.746646][ T1581] ? alloc_vmap_area+0x231/0xe50 [ 641.746726][ T1581] alloc_vmap_area+0x231/0xe50 [ 641.746797][ T1581] ? should_failslab+0x8c/0xb0 [ 641.746819][ T1581] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 641.746852][ T1581] __get_vm_area_node+0x173/0x1d0 [ 641.746929][ T1581] __vmalloc_node_range_noprof+0x273/0xe00 [ 641.746956][ T1581] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 641.746981][ T1581] ? _parse_integer_limit+0x170/0x190 [ 641.747005][ T1581] ? _parse_integer+0x27/0x40 [ 641.747132][ T1581] ? __rcu_read_unlock+0x4f/0x70 [ 641.747151][ T1581] ? avc_has_perm_noaudit+0x1b1/0x200 [ 641.747174][ T1581] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 641.747275][ T1581] __vmalloc_noprof+0x83/0xc0 [ 641.747300][ T1581] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 641.747328][ T1581] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 641.747450][ T1581] ? bpf_prog_alloc+0x2a/0x150 [ 641.747505][ T1581] bpf_prog_alloc+0x3c/0x150 [ 641.747527][ T1581] bpf_prog_create_from_user+0x7d/0x260 [ 641.747551][ T1581] ? __pfx_seccomp_check_filter+0x10/0x10 [ 641.747633][ T1581] do_seccomp+0x5ef/0xa40 [ 641.747655][ T1581] ? fput+0x8f/0xc0 [ 641.747687][ T1581] ? ksys_write+0x192/0x1a0 [ 641.747713][ T1581] __x64_sys_seccomp+0x40/0x50 [ 641.747796][ T1581] x64_sys_call+0x2ad4/0x2ff0 [ 641.747825][ T1581] do_syscall_64+0xd2/0x200 [ 641.747893][ T1581] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 641.747919][ T1581] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 641.748012][ T1581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.748065][ T1581] RIP: 0033:0x7f362cf3ebe9 [ 641.748153][ T1581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.748173][ T1581] RSP: 002b:00007f362b9a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 641.748195][ T1581] RAX: ffffffffffffffda RBX: 00007f362d175fa0 RCX: 00007f362cf3ebe9 [ 641.748208][ T1581] RDX: 0000200000000280 RSI: 0000000000000008 RDI: 0000000000000001 [ 641.748220][ T1581] RBP: 00007f362b9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 641.748234][ T1581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.748248][ T1581] R13: 00007f362d176038 R14: 00007f362d175fa0 R15: 00007fff1add2788 [ 641.748327][ T1581] [ 642.022304][ T1581] syz.9.11414: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 642.038368][ T1581] CPU: 0 UID: 0 PID: 1581 Comm: syz.9.11414 Not tainted syzkaller #0 PREEMPT(voluntary) [ 642.038412][ T1581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.038423][ T1581] Call Trace: [ 642.038431][ T1581] [ 642.038441][ T1581] __dump_stack+0x1d/0x30 [ 642.038466][ T1581] dump_stack_lvl+0xe8/0x140 [ 642.038512][ T1581] dump_stack+0x15/0x1b [ 642.038530][ T1581] warn_alloc+0x12b/0x1a0 [ 642.038677][ T1581] __vmalloc_node_range_noprof+0x297/0xe00 [ 642.038706][ T1581] ? _parse_integer_limit+0x170/0x190 [ 642.038728][ T1581] ? _parse_integer+0x27/0x40 [ 642.038773][ T1581] ? __rcu_read_unlock+0x4f/0x70 [ 642.038792][ T1581] ? avc_has_perm_noaudit+0x1b1/0x200 [ 642.038815][ T1581] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 642.038838][ T1581] __vmalloc_noprof+0x83/0xc0 [ 642.038943][ T1581] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 642.038965][ T1581] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 642.038987][ T1581] ? bpf_prog_alloc+0x2a/0x150 [ 642.039009][ T1581] bpf_prog_alloc+0x3c/0x150 [ 642.039052][ T1581] bpf_prog_create_from_user+0x7d/0x260 [ 642.039075][ T1581] ? __pfx_seccomp_check_filter+0x10/0x10 [ 642.039105][ T1581] do_seccomp+0x5ef/0xa40 [ 642.039122][ T1581] ? fput+0x8f/0xc0 [ 642.039190][ T1581] ? ksys_write+0x192/0x1a0 [ 642.039209][ T1581] __x64_sys_seccomp+0x40/0x50 [ 642.039285][ T1581] x64_sys_call+0x2ad4/0x2ff0 [ 642.039436][ T1581] do_syscall_64+0xd2/0x200 [ 642.039462][ T1581] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 642.039486][ T1581] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 642.039510][ T1581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.039570][ T1581] RIP: 0033:0x7f362cf3ebe9 [ 642.039585][ T1581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.039616][ T1581] RSP: 002b:00007f362b9a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 642.039672][ T1581] RAX: ffffffffffffffda RBX: 00007f362d175fa0 RCX: 00007f362cf3ebe9 [ 642.039683][ T1581] RDX: 0000200000000280 RSI: 0000000000000008 RDI: 0000000000000001 [ 642.039694][ T1581] RBP: 00007f362b9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 642.039705][ T1581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.039716][ T1581] R13: 00007f362d176038 R14: 00007f362d175fa0 R15: 00007fff1add2788 [ 642.039732][ T1581] [ 642.039754][ T1581] Mem-Info: [ 642.210945][ T1594] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 642.221993][ T1581] active_anon:22184 inactive_anon:10 isolated_anon:0 [ 642.221993][ T1581] active_file:14939 inactive_file:15357 isolated_file:0 [ 642.221993][ T1581] unevictable:0 dirty:460 writeback:0 [ 642.221993][ T1581] slab_reclaimable:3948 slab_unreclaimable:22571 [ 642.221993][ T1581] mapped:43181 shmem:6013 pagetables:1770 [ 642.221993][ T1581] sec_pagetables:0 bounce:0 [ 642.221993][ T1581] kernel_misc_reclaimable:0 [ 642.221993][ T1581] free:1797034 free_pcp:37363 free_cma:0 [ 642.255559][ T1595] SELinux: security_context_str_to_sid (O*3!L;(x?8>${S7#!g.&[n٦9P9\ETWq3H*8YYLGR!I*' CDX [ 642.255559][ T1595] s0dnph5L0|qD81A{ꈆnK P) failed with errno=-22 [ 642.262802][ T1581] Node 0 active_anon:88852kB inactive_anon:40kB active_file:59756kB inactive_file:61428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172724kB dirty:1840kB writeback:0kB shmem:24168kB kernel_stack:6848kB pagetables:7080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 642.381780][ T1581] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.381951][ T1581] lowmem_reserve[]: 0 2883 7862 7862 [ 642.381978][ T1581] Node 0 DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 642.382076][ T1581] lowmem_reserve[]: 0 0 4978 4978 [ 642.382139][ T1581] Node 0 Normal free:4223588kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88852kB inactive_anon:40kB active_file:59756kB inactive_file:61428kB unevictable:0kB writepending:1840kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:145776kB local_pcp:85844kB free_cma:0kB [ 642.382244][ T1581] lowmem_reserve[]: 0 0 0 0 [ 642.382293][ T1581] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 642.382497][ T1581] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB [ 642.382796][ T1581] Node 0 Normal: 75*4kB (UME) 1227*8kB (UME) 672*16kB (UME) 563*32kB (UME) 470*64kB (UME) 320*128kB (UME) 243*256kB (UME) 227*512kB (UME) 131*1024kB (UME) 42*2048kB (UM) 907*4096kB (UM) = 4223588kB [ 642.383265][ T1581] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 642.383290][ T1581] 36346 total pagecache pages [ 642.383343][ T1581] 29 pages in swap cache [ 642.383357][ T1581] Free swap = 124756kB [ 642.383372][ T1581] Total swap = 124996kB [ 642.383386][ T1581] 2097051 pages RAM [ 642.383392][ T1581] 0 pages HighMem/MovableOnly [ 642.383398][ T1581] 80446 pages reserved [ 642.452247][ T1600] __nla_validate_parse: 1 callbacks suppressed [ 642.452266][ T1600] netlink: 88 bytes leftover after parsing attributes in process `syz.6.11418'. [ 642.489134][ T1600] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 642.907369][ T1611] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11423'. [ 643.001201][ T1616] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 643.007833][ T1616] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 643.015906][ T1616] vhci_hcd vhci_hcd.0: Device attached [ 643.031109][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 643.031125][ T29] audit: type=1400 audit(3733.029:136081): avc: denied { read } for pid=1617 comm="syz.1.11422" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 643.060299][ T29] audit: type=1400 audit(3733.029:136082): avc: denied { open } for pid=1617 comm="syz.1.11422" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 643.087664][ T29] audit: type=1400 audit(3733.079:136083): avc: denied { write } for pid=1617 comm="syz.1.11422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 643.106882][ T1624] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 643.113416][ T1624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 643.120981][ T1624] vhci_hcd vhci_hcd.0: Device attached [ 643.127031][ T1631] FAULT_INJECTION: forcing a failure. [ 643.127031][ T1631] name failslab, interval 1, probability 0, space 0, times 0 [ 643.127082][ T1616] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(5) [ 643.127111][ T1616] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 643.139778][ T1631] CPU: 1 UID: 0 PID: 1631 Comm: syz.7.11428 Not tainted syzkaller #0 PREEMPT(voluntary) [ 643.139808][ T1631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 643.139820][ T1631] Call Trace: [ 643.139826][ T1631] [ 643.139834][ T1631] __dump_stack+0x1d/0x30 [ 643.139886][ T1631] dump_stack_lvl+0xe8/0x140 [ 643.139906][ T1631] dump_stack+0x15/0x1b [ 643.139922][ T1631] should_fail_ex+0x265/0x280 [ 643.139945][ T1631] should_failslab+0x8c/0xb0 [ 643.140012][ T1631] __kvmalloc_node_noprof+0x123/0x4e0 [ 643.140041][ T1631] ? bpf_test_run_xdp_live+0x114/0xfe0 [ 643.140067][ T1631] bpf_test_run_xdp_live+0x114/0xfe0 [ 643.140089][ T1631] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 643.140171][ T1631] ? __pfx_autoremove_wake_function+0x10/0x10 [ 643.140202][ T1631] ? 0xffffffffa0205240 [ 643.140217][ T1631] ? synchronize_rcu+0x45/0x320 [ 643.140274][ T1631] ? 0xffffffffa0205240 [ 643.140287][ T1631] ? 0xffffffffa0205240 [ 643.140301][ T1631] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 643.140382][ T1631] ? 0xffffffffa0201918 [ 643.140444][ T1631] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 643.140475][ T1631] bpf_prog_test_run_xdp+0x4f5/0x910 [ 643.140499][ T1631] ? __rcu_read_unlock+0x4f/0x70 [ 643.140571][ T1631] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 643.140593][ T1631] bpf_prog_test_run+0x22a/0x390 [ 643.140700][ T1631] __sys_bpf+0x4b9/0x7b0 [ 643.140806][ T1631] __x64_sys_bpf+0x41/0x50 [ 643.140894][ T1631] x64_sys_call+0x2aea/0x2ff0 [ 643.140913][ T1631] do_syscall_64+0xd2/0x200 [ 643.140941][ T1631] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 643.141033][ T1631] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 643.141064][ T1631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.141085][ T1631] RIP: 0033:0x7f7f3ce3ebe9 [ 643.141102][ T1631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.141121][ T1631] RSP: 002b:00007f7f3b89f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 643.141141][ T1631] RAX: ffffffffffffffda RBX: 00007f7f3d075fa0 RCX: 00007f7f3ce3ebe9 [ 643.141164][ T1631] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 643.141177][ T1631] RBP: 00007f7f3b89f090 R08: 0000000000000000 R09: 0000000000000000 [ 643.141189][ T1631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.141254][ T1631] R13: 00007f7f3d076038 R14: 00007f7f3d075fa0 R15: 00007ffccfa09d18 [ 643.141272][ T1631] [ 643.395911][ T1616] vhci_hcd vhci_hcd.0: Device attached [ 643.443789][ T1640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11430'. [ 643.459218][ T1616] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 643.507925][ T29] audit: type=1326 audit(3733.499:136084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1645 comm="syz.1.11433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 643.531236][ T29] audit: type=1326 audit(3733.499:136085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1645 comm="syz.1.11433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 643.554385][ T29] audit: type=1326 audit(3733.499:136086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1645 comm="syz.1.11433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 643.562910][ T1646] lo speed is unknown, defaulting to 1000 [ 643.577651][ T29] audit: type=1326 audit(3733.499:136087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1645 comm="syz.1.11433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 643.583775][ T1646] lo speed is unknown, defaulting to 1000 [ 643.606423][ T29] audit: type=1326 audit(3733.499:136088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1645 comm="syz.1.11433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 643.606450][ T29] audit: type=1326 audit(3733.499:136089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1645 comm="syz.1.11433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5a41a4ebe9 code=0x7ffc0000 [ 643.666966][ T5043] usb 17-1: new low-speed USB device number 3 using vhci_hcd [ 643.678355][ T29] audit: type=1326 audit(3733.629:136090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1612 comm="syz.8.11425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905ba9ebe9 code=0x7ffc0000 [ 643.698154][ T1624] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(17) [ 643.708102][ T1624] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 643.708145][ T1616] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(14) [ 643.708167][ T1616] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 643.708235][ T1624] vhci_hcd vhci_hcd.0: Device attached [ 643.708282][ T1616] vhci_hcd vhci_hcd.0: Device attached [ 643.754440][ T1651] vhci_hcd: connection closed [ 643.754641][ T1650] vhci_hcd: connection closed [ 643.760148][ T1629] vhci_hcd: connection closed [ 643.765270][ T1626] vhci_hcd: connection closed [ 643.779443][ T1620] vhci_hcd: connection reset by peer [ 643.791781][ T51] vhci_hcd: stop threads [ 643.796045][ T51] vhci_hcd: release socket [ 643.800493][ T51] vhci_hcd: disconnect device [ 643.812417][ T1657] netlink: 88 bytes leftover after parsing attributes in process `syz.7.11431'. [ 643.824612][ T1657] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 643.907190][ T51] vhci_hcd: stop threads [ 643.912171][ T51] vhci_hcd: release socket [ 643.916735][ T51] vhci_hcd: disconnect device [ 643.997742][ T1661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11435'. [ 644.016333][ T51] vhci_hcd: stop threads [ 644.020695][ T51] vhci_hcd: release socket [ 644.025212][ T51] vhci_hcd: disconnect device [ 644.218288][ T51] vhci_hcd: stop threads [ 644.222610][ T51] vhci_hcd: release socket [ 644.227058][ T51] vhci_hcd: disconnect device [ 644.276131][ T51] vhci_hcd: stop threads [ 644.280504][ T51] vhci_hcd: release socket [ 644.284936][ T51] vhci_hcd: disconnect device [ 644.376888][ T1677] FAULT_INJECTION: forcing a failure. [ 644.376888][ T1677] name fail_futex, interval 1, probability 0, space 0, times 1 [ 644.389799][ T1677] CPU: 0 UID: 0 PID: 1677 Comm: syz.1.11440 Not tainted syzkaller #0 PREEMPT(voluntary) [ 644.389831][ T1677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.389921][ T1677] Call Trace: [ 644.389929][ T1677] [ 644.389939][ T1677] __dump_stack+0x1d/0x30 [ 644.389962][ T1677] dump_stack_lvl+0xe8/0x140 [ 644.389982][ T1677] dump_stack+0x15/0x1b [ 644.390000][ T1677] should_fail_ex+0x265/0x280 [ 644.390026][ T1677] should_fail+0xb/0x20 [ 644.390071][ T1677] get_futex_key+0x594/0xbd0 [ 644.390093][ T1677] ? timerqueue_add+0x14e/0x180 [ 644.390144][ T1677] futex_wait_requeue_pi+0x15c/0x640 [ 644.390177][ T1677] ? __pfx_futex_wake_mark+0x10/0x10 [ 644.390219][ T1677] do_futex+0x136/0x380 [ 644.390316][ T1677] __se_sys_futex+0x2ed/0x360 [ 644.390347][ T1677] __x64_sys_futex+0x78/0x90 [ 644.390375][ T1677] x64_sys_call+0x2e39/0x2ff0 [ 644.390399][ T1677] do_syscall_64+0xd2/0x200 [ 644.390486][ T1677] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 644.390513][ T1677] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 644.390607][ T1677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.390629][ T1677] RIP: 0033:0x7f5a41a4ebe9 [ 644.390646][ T1677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.390666][ T1677] RSP: 002b:00007f5a404af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 644.390689][ T1677] RAX: ffffffffffffffda RBX: 00007f5a41c85fa0 RCX: 00007f5a41a4ebe9 [ 644.390704][ T1677] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 644.390719][ T1677] RBP: 00007f5a404af090 R08: 0000200000048000 R09: 0000000000000300 [ 644.390814][ T1677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 644.390829][ T1677] R13: 00007f5a41c86038 R14: 00007f5a41c85fa0 R15: 00007fff259e3aa8 [ 644.390850][ T1677] [ 644.406093][ T1681] 9pnet: Could not find request transport: 0xffffffffffffffff [ 644.645374][ T1691] netlink: 168 bytes leftover after parsing attributes in process `syz.9.11446'. [ 644.737069][ T1697] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 644.743630][ T1697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 644.751299][ T1697] vhci_hcd vhci_hcd.0: Device attached [ 644.772103][ T1701] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 644.778673][ T1701] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 644.786296][ T1701] vhci_hcd vhci_hcd.0: Device attached [ 644.797026][ T1700] lo speed is unknown, defaulting to 1000 [ 644.816690][ T1700] lo speed is unknown, defaulting to 1000 [ 644.822652][ T1697] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(5) [ 644.829231][ T1697] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 644.836674][ T1697] vhci_hcd vhci_hcd.0: Device attached [ 644.898903][ T1697] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 644.916103][ T1697] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(14) [ 644.922823][ T1697] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 644.930509][ T1697] vhci_hcd vhci_hcd.0: Device attached [ 644.960241][ T1697] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(16) [ 644.966895][ T1697] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 644.974430][ T1697] vhci_hcd vhci_hcd.0: Device attached [ 644.983003][ T1716] vhci_hcd: connection closed [ 644.983159][ T1711] vhci_hcd: connection closed [ 644.988846][ T1707] vhci_hcd: connection closed [ 644.988913][ T154] vhci_hcd: stop threads [ 644.993627][ T1702] vhci_hcd: connection closed [ 644.998310][ T154] vhci_hcd: release socket [ 644.998328][ T154] vhci_hcd: disconnect device [ 645.017054][ T1698] vhci_hcd: connection closed [ 645.020146][ T154] vhci_hcd: stop threads [ 645.029313][ T154] vhci_hcd: release socket [ 645.033791][ T154] vhci_hcd: disconnect device [ 645.089331][ T154] vhci_hcd: stop threads [ 645.093704][ T154] vhci_hcd: release socket [ 645.098315][ T154] vhci_hcd: disconnect device [ 645.105145][ T154] vhci_hcd: stop threads [ 645.109488][ T154] vhci_hcd: release socket [ 645.114023][ T154] vhci_hcd: disconnect device [ 645.141952][ T154] vhci_hcd: stop threads [ 645.146275][ T154] vhci_hcd: release socket [ 645.150736][ T154] vhci_hcd: disconnect device [ 645.291932][ T1722] netlink: 88 bytes leftover after parsing attributes in process `syz.9.11452'. [ 645.302789][ T1722] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 645.614650][ T1726] netlink: 'syz.1.11454': attribute type 4 has an invalid length. [ 645.622572][ T1726] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11454'. [ 645.686384][ T1726] .`: renamed from bond0 (while UP) [ 646.255724][ T1736] Set syz1 is full, maxelem 65536 reached [ 646.275413][ T1753] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 646.281988][ T1753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 646.289672][ T1753] vhci_hcd vhci_hcd.0: Device attached [ 646.310849][ T1753] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 646.317528][ T1753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 646.325155][ T1753] vhci_hcd vhci_hcd.0: Device attached [ 646.335678][ T1753] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 646.342228][ T1753] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 646.349753][ T1753] vhci_hcd vhci_hcd.0: Device attached [ 646.440364][ T1771] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 646.459670][ T1771] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(14) [ 646.466323][ T1771] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 646.474117][ T1771] vhci_hcd vhci_hcd.0: Device attached [ 646.552163][ T1778] FAULT_INJECTION: forcing a failure. [ 646.552163][ T1778] name failslab, interval 1, probability 0, space 0, times 0 [ 646.564932][ T1778] CPU: 1 UID: 0 PID: 1778 Comm: syz.6.11468 Not tainted syzkaller #0 PREEMPT(voluntary) [ 646.564962][ T1778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 646.564976][ T1778] Call Trace: [ 646.564984][ T1778] [ 646.564992][ T1778] __dump_stack+0x1d/0x30 [ 646.565013][ T1778] dump_stack_lvl+0xe8/0x140 [ 646.565031][ T1778] dump_stack+0x15/0x1b [ 646.565050][ T1778] should_fail_ex+0x265/0x280 [ 646.565136][ T1778] should_failslab+0x8c/0xb0 [ 646.565159][ T1778] kmem_cache_alloc_noprof+0x50/0x310 [ 646.565183][ T1778] ? security_inode_alloc+0x37/0x100 [ 646.565213][ T1778] security_inode_alloc+0x37/0x100 [ 646.565321][ T1778] inode_init_always_gfp+0x4b7/0x500 [ 646.565346][ T1778] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 646.565365][ T1778] alloc_inode+0x58/0x170 [ 646.565424][ T1778] new_inode+0x1d/0xe0 [ 646.565452][ T1778] shmem_get_inode+0x244/0x750 [ 646.565562][ T1778] shmem_mknod+0x46/0x180 [ 646.565636][ T1778] shmem_create+0x34/0x50 [ 646.565657][ T1778] ? __pfx_shmem_create+0x10/0x10 [ 646.565677][ T1778] path_openat+0x1102/0x2170 [ 646.565702][ T1778] do_filp_open+0x109/0x230 [ 646.565776][ T1778] do_sys_openat2+0xa6/0x110 [ 646.565806][ T1778] __x64_sys_openat+0xf2/0x120 [ 646.565892][ T1778] x64_sys_call+0x2e9c/0x2ff0 [ 646.565917][ T1778] do_syscall_64+0xd2/0x200 [ 646.565953][ T1778] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 646.565981][ T1778] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 646.566133][ T1778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.566223][ T1778] RIP: 0033:0x7fa910c9ebe9 [ 646.566241][ T1778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.566259][ T1778] RSP: 002b:00007fa90f6bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 646.566282][ T1778] RAX: ffffffffffffffda RBX: 00007fa910ed6180 RCX: 00007fa910c9ebe9 [ 646.566298][ T1778] RDX: 00000000000026e1 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 646.566313][ T1778] RBP: 00007fa90f6bd090 R08: 0000000000000000 R09: 0000000000000000 [ 646.566328][ T1778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.566392][ T1778] R13: 00007fa910ed6218 R14: 00007fa910ed6180 R15: 00007ffde269bb38 [ 646.566409][ T1778] [ 646.930082][ T1771] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(16) [ 646.936739][ T1771] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 646.944229][ T1771] vhci_hcd vhci_hcd.0: Device attached [ 646.950336][ T2961] usb 3-1: new low-speed USB device number 10 using vhci_hcd [ 646.960378][ T1781] vhci_hcd: connection closed [ 646.960521][ T1763] vhci_hcd: connection closed [ 646.960543][ T1775] vhci_hcd: connection closed [ 646.960739][ T154] vhci_hcd: stop threads [ 646.965312][ T1759] vhci_hcd: connection closed [ 646.970203][ T154] vhci_hcd: release socket [ 646.975063][ T1754] vhci_hcd: connection reset by peer [ 646.979175][ T154] vhci_hcd: disconnect device [ 646.987916][ T154] vhci_hcd: stop threads [ 647.002657][ T154] vhci_hcd: release socket [ 647.007100][ T154] vhci_hcd: disconnect device [ 647.013388][ T154] vhci_hcd: stop threads [ 647.017674][ T154] vhci_hcd: release socket [ 647.022146][ T154] vhci_hcd: disconnect device [ 647.028357][ T154] vhci_hcd: stop threads [ 647.032644][ T154] vhci_hcd: release socket [ 647.037099][ T154] vhci_hcd: disconnect device [ 647.042288][ T154] vhci_hcd: stop threads [ 647.046535][ T154] vhci_hcd: release socket [ 647.051277][ T154] vhci_hcd: disconnect device [ 647.238912][ T1786] netlink: 168 bytes leftover after parsing attributes in process `syz.6.11473'. [ 647.487593][ T1792] ================================================================== [ 647.495740][ T1792] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 647.503146][ T1792] [ 647.505477][ T1792] write to 0xffff888124858000 of 4096 bytes by task 1791 on cpu 0: [ 647.513373][ T1792] _copy_from_iter+0x133/0xe80 [ 647.518165][ T1792] copy_page_from_iter+0x178/0x2a0 [ 647.523397][ T1792] process_vm_rw+0x659/0x960 [ 647.527995][ T1792] __x64_sys_process_vm_writev+0x78/0x90 [ 647.533635][ T1792] x64_sys_call+0x2a7c/0x2ff0 [ 647.538314][ T1792] do_syscall_64+0xd2/0x200 [ 647.542831][ T1792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.548730][ T1792] [ 647.551053][ T1792] write to 0xffff888124858000 of 4096 bytes by task 1792 on cpu 1: [ 647.558944][ T1792] _copy_from_iter+0x133/0xe80 [ 647.563713][ T1792] copy_page_from_iter+0x178/0x2a0 [ 647.568842][ T1792] process_vm_rw+0x659/0x960 [ 647.573437][ T1792] __x64_sys_process_vm_writev+0x78/0x90 [ 647.579074][ T1792] x64_sys_call+0x2a7c/0x2ff0 [ 647.583752][ T1792] do_syscall_64+0xd2/0x200 [ 647.588271][ T1792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.594167][ T1792] [ 647.596493][ T1792] Reported by Kernel Concurrency Sanitizer on: [ 647.602677][ T1792] CPU: 1 UID: 0 PID: 1792 Comm: syz.7.11475 Not tainted syzkaller #0 PREEMPT(voluntary) [ 647.612484][ T1792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.622625][ T1792] ================================================================== [ 647.698233][ T1795] lo speed is unknown, defaulting to 1000 [ 647.704531][ T1795] lo speed is unknown, defaulting to 1000 [ 648.114418][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 648.114474][ T29] audit: type=1326 audit(3738.109:136225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1785 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 648.147010][ T29] audit: type=1400 audit(3738.119:136226): avc: denied { read append } for pid=1790 comm="syz.7.11475" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 648.170966][ T29] audit: type=1400 audit(3738.119:136227): avc: denied { open } for pid=1790 comm="syz.7.11475" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 648.194834][ T29] audit: type=1326 audit(3738.139:136228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1785 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 648.218521][ T29] audit: type=1326 audit(3738.139:136229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1785 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 648.256407][ T29] audit: type=1326 audit(3738.139:136230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1785 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa910c9d550 code=0x7ffc0000 [ 648.279835][ T29] audit: type=1326 audit(3738.139:136231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1785 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa910ca0417 code=0x7ffc0000 [ 648.303036][ T29] audit: type=1326 audit(3738.139:136232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1785 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa910c9ebe9 code=0x7ffc0000 [ 648.326357][ T29] audit: type=1326 audit(3738.139:136233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1785 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa910ca0417 code=0x7ffc0000 [ 648.349538][ T29] audit: type=1326 audit(3738.139:136234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1785 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa910c9d84a code=0x7ffc0000 [ 648.677959][ T5043] usb 17-1: enqueue for inactive port 0 [ 648.683652][ T5043] usb 17-1: enqueue for inactive port 0 [ 648.758080][ T5043] vhci_hcd: vhci_device speed not set [ 652.037979][ T2961] usb 3-1: enqueue for inactive port 0 [ 652.043490][ T2961] usb 3-1: enqueue for inactive port 0 [ 652.117914][ T2961] vhci_hcd: vhci_device speed not set