last executing test programs: 4.643999007s ago: executing program 2 (id=2683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000400"/19, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r5}) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) close(r6) mq_timedsend(r3, 0x0, 0x0, 0xab, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r9, 0x0, 0x8}, 0x18) 3.784127231s ago: executing program 2 (id=2698): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzszzFKA1EQBuB/TYJRVLAWxEWwFO2scotcQDyCjY0JpvMYgk3wAN7AI5lGnoQsuhtbBZXva2bm393Z98KvcP/aNFfd/OWmO+829fnyaT/JUZ23UkqGSfprKxclOTvPYHu4kZ0k11//Op5/3w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/Zroe9LrjY1MPMrsd5aKsTO56qZon9Wmy9/nBoiRb7Q3L98bzHzg6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDflVLKsladtJ/+KqySaSt/OM5sdFhlmNQn7S2Tj3YzGbyzP4c2AAAgEAMTdmT/PVAIJPrd3QJNX2Wu0hU4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//TWYnqQ==") r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = gettid() capget(&(0x7f0000000380)={0x0, r6}, &(0x7f0000000480)={0xfffffff9, 0x200, 0x363, 0x9d1c, 0x8, 0x8}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, r8, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20004004) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}}, 0x4000000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="30002f800c0002000202aaaaaaaaaaaa200003800800000014000380060001"], 0x4c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4880) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)="485c73d05af0c3fec8e4e71aed00e59c1c7914bc99472844afa6c400de358c29cd06c3e8ebdfa9a62084eac002c83a8b01d71ced433117950e6f875df423e9fbda809f0be2962852f1ce768eb657909b6b94512118ee1593e1b6becf68aadf4fe934e970da3e61907d8cff0e4f7e5ee868fbb6a8206585c0905860154a918f16d43714f2fcb0c843bae46b278494f2094b44b99c9d45010233a41abb9ee2cfe80a268af3dd51548ea8a17197f3037bb64428a085021fc6ce5dbf4862df7d788d08aabe19e6b0fbcb92b3d31d00c412efb5c5", 0xd2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='sys_enter\x00', r11, 0x0, 0x3}, 0x18) getcwd(&(0x7f0000000500)=""/135, 0x87) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r9, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x40001) 3.475675075s ago: executing program 4 (id=2704): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4092}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x800, 0x1, 0x11cb}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$kcm(0x10, 0x3, 0x10) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) 3.164239811s ago: executing program 2 (id=2705): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88001000001400f81881dd86c066896e6576650000040002800a000100aaaaaaaaaa00000008000400e1ff0000"], 0x48}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x80010000}, 0x18) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000a40)={0x0, 0x64, &(0x7f0000000880)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, 0x9}, @in6={0xa, 0x4e23, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2f2}, @in6={0xa, 0x4e24, 0x3, @remote}]}, &(0x7f0000000a80)=0x10) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0xc05c5340, &(0x7f0000000040)) tkill(r4, 0x7) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) ppoll(&(0x7f0000000100)=[{r6, 0x113d}, {r6, 0x104c}], 0x2, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x2a, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @exit, @ringbuf_query, @generic={0x1, 0x8, 0x6, 0x4, 0x1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7682, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x7a, &(0x7f0000000180)=""/122, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)=[{0x3, 0x3, 0xe, 0x2}, {0x1, 0x1, 0xc, 0x5}, {0x5, 0x3, 0x2, 0x6}, {0x4, 0x1, 0x6, 0xc}], 0x10, 0x4}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="b11e4bf4f259ca36f3e81794eb63adc7f9dac8a91911f8ddebf4df522a687d67cc477b4141af9ba7d818e8df73739d00cfe421c94b0373c1dd594df3278c1ba534f563a2b7cc0b9a7d8f185f4500294e3d6c8f68458e0e24bd7dec00204b584f0caf629b9aa8b81218627918a09901f030c9cc83cec7d9b1147a9dc0853b6c2bc4e6b7bed3a4848c765c1fc81b83f333397f49"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee2, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r10, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c8}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 2.998528743s ago: executing program 2 (id=2706): socket(0x11, 0xa, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) pread64(r0, &(0x7f00000002c0)=""/181, 0xb5, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gre0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000140)={[{@dioread_lock}, {@noquota}, {@grpid}]}, 0x1, 0x4db, &(0x7f0000001480)="$eJzs3c9rHFUcAPA3u0mapNH+UKStYAsV6g+azQ+kiQriST0UxIIXhRqTbazZZEN2U5tQMNVbDx5EURAP3v0LvNiTRRDPehcPUtEaQYXCyMzutmmaTbclyaaZzwe2fTOzM9/3snwfb97O7AQgs44k/0Qh9IUQfgwh7Kkt3vqGI7X/lq9dGE9eUYjjU39E6fuS5cZbG/vtDiEshRC6QwivvRTC29HtcSsLi1NjpVJxrr5cqE7PFioLi8fPTo9NFieLM4MjJ0ZHRwaGh0bDGrvfk0sfvXvp5DevdH39z4dXr3z83bfJcfvq21a2YyPV6t4Z9q1Y1xFCeH4zgrVBvt6ennZXhHuSfH4PhRCOpvm/J+TTTxPIgjiO4+vxrmabl2Jgx8qlY+Ao1x9CqJVzuf7+2hj+4dCbK5Ur1afPlOdnJmpj5b2hM3fmbKk4UD9X2Bs6o2R5MC3fXB5atTwcQjoG/iTfky73j5dLE1vb1QGr7F6V/3/na/kPZIRTfsgu+Q/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9kl/yGTXj15MnnFjfvfJ84tzE+Vzx2fKFam+qfnx/vHy3Oz/ZPl8mR6z870nY5XKpdnB58J8+cL1WKlWqgsLJ6eLs/PVE+n9/WfLnZuSauAVuw7fPnnKISw9GxP+kp01bfJVdjZ4jgK7b4HGWiPfLs7IKBtTP1BdjnHB6L67/80rB4XdDfbcfbmfCFwf8m1uwJA2xw76Ps/yCrz/5Bd5v8hu4zxgTs9Y2+9+f8WXI/j+G6rBGwy8/+QbWs9/+uBFc/uGgghPBhC+CnfuavxrC9gJ8j9FtXH/8f2PN63emtX9G/6FUFXCOG9L059dn6sWp0bTNb/eWN99fP6+qEVOzY9YQDapZGnjTwGALJr+dqF8cZrK+P+/mLtIoTb43fU5ya70+8oe5ejW65ViDbo2oWliyGEA2vFj+rPO6+dyPQu52/Ge78Wf3+9HlHtEGl9O9Lnpm9y/HrMgyviP7Yi/qEN+LtAFlxO+p+BtfIvl+Z0uJF/t/Y/fRt07UTz/i93o//LN+n/DrcY450vP/i1afyLIRxaM34jXncaa3X8pG7HWox/9c3XH2m2Lf6qdpy14jckpUJ1erZQWVg8nv6O3GRxZnDkxOjoyMDw0GghnaMuNGaqb/fcgR+urNf+3ibx12t/su7JFtv/36Pfv3FknfhPHF3789+/TvyeEMJTLcb/a+iXt5ptS+JPNGl/bp34ybrhFuNXPn15V4tvBQC2QGVhcWqsIxTn0kKppLC9ClF9GLxd6rOykN8e1bjvCxe3RzVWFdrdMwGbrbKQnJonSX+3e76wORUCAAAAAAAAAAAA7mgrLidudxsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHaC/wMAAP//UOPU2w==") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 2.343303124s ago: executing program 2 (id=2711): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x512, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xc1, 0x6}, 0x0, 0x10000, 0xfffffffd, 0x8, 0x24, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xff7f}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@deltfilter={0x30, 0x2d, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffff, 0x8}, {0x0, 0xfff1}, {0xe, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x394eba404c5f8734) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 2.251073755s ago: executing program 4 (id=2713): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") open(&(0x7f0000000240)='.\x00', 0x0, 0x1be) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r8 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00') readlinkat(r9, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000010980)=""/204, 0xcc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c61737400"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6e81a000) 2.112377257s ago: executing program 2 (id=2714): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x30000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) uname(&(0x7f0000000740)=""/97) syz_clone(0x44209400, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080)={[{@dioread_lock}, {@nobh}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nodiscard}]}, 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") 1.852224681s ago: executing program 3 (id=2718): r0 = gettid() r1 = getpgid(r0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x240000, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000080)={0x3, 0x1, 0x3, 0x3, 0x5, 0x81, 0x6, 0x152, 0x1}) fdatasync(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='bcache_btree_gc_coalesce\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff7}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xfe}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r2) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)={0x4cc, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xb07, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb8}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x803}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "fa9c8e398df9d86cf1a4fa202fdadf6e089444b8de"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x260}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x669}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xda, @private1, 0xa}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7ab, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x417}}}}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x164, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3fb9eedd13f21be6f1c8b39306b62ca27b5c1711516c9d9bcb0f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "2c4999526f7cbf9ac8bc9e0fba242b50bf056aec98f6f7ce58fea1a9bd3be8ac94c7a3de9cef2f1fba7bd3ef1d130b15619bcc059a3fea7c2ed8af79d202b7c361cb0f67209f81d677c8d426b967a216a015286ea1d678ea7f287f4460d24c5ea8da147c6bb772b37868926f74fc334bde9f47499a229c7e71f83a1ee72cb7175a1904c7144f9c52786831e4c4677e50de94f28a4967c63f83f537251189d6d91951671da602810d19c6c96f3a41b9fdfc0e71b6010ff7fc44c2c808eaf24fbcf394440ae2c4d9f3f69a9d2bb32ea8c0b4b0159ab38966f332558d10ee9c256af320abdc74c25dd1bdda34daf34f17d1a3aab936dfed9ba66556"}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4e65}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000895) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @dev}, &(0x7f0000000140)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote, @initdev}, &(0x7f00000001c0)=0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11, 0x0, 0x4000}, 0x18) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r14 = socket(0x10, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r13, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000fadb9f2500000000", @ANYRES32=0x0, @ANYBLOB="100a050033c205002400128009000100626f6e64000000001400028005001600010000000600180003000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x7c, r4, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) sched_rr_get_interval(r1, &(0x7f0000000300)) 1.753899562s ago: executing program 3 (id=2719): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400"], 0x18}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x80, 0x4) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000380)="17000000020001000003be8c5ee176889600330002956019fd6ee17e03000a0002000037c0274f5233e4aa37f5e02bdba67e06000000e28900000200df0181c8d0bae99dfde06a0755045f3973a803005f1efcd5e6236b8a02000000fc0607bdff599255100ac45761547a681f009cee4a5acb3da400081fb700674f00c88ebbf9315033bf79ac2dfc06ea1d003901000000001000ea0000000000000000000000000000000000000000000000f4a2a3b5eb7fda857d61ab", 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) fallocate(r4, 0x10, 0xfffffffffffff351, 0x20000000000000) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./bus\x00', r2, 0x4000, r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000300)={[{@mb_optimize_scan}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@journal_async_commit}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}, 0x3, 0x473, &(0x7f0000000640)="$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") 1.711667783s ago: executing program 3 (id=2720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) semget$private(0x0, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r2, &(0x7f0000000680)="3b27a4", 0x3) sendfile(r2, r4, 0x0, 0xe065) 1.622438385s ago: executing program 0 (id=2722): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000006000000003000000002000008000000000000000300000000050000000300000000000000000000000000000d000000000000000000000009020000000000"], 0x0, 0x4a, 0x0, 0x1}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001240)={0x0, 0x1, 0x0, [0x5, 0x0, 0x9, 0x400, 0x8], [0x7, 0x3, 0xe, 0x4b, 0x9, 0x5, 0x1, 0x9, 0x5, 0x3, 0x89a, 0x5, 0x6fa4, 0xfffffffffffff38b, 0xe, 0x7ea, 0x5, 0x2, 0xc, 0x9c6, 0xffffffff00000001, 0x3, 0x8, 0x9, 0xa875, 0x6, 0xa03, 0xd, 0x10, 0xa85, 0x9, 0x80000000000, 0xc, 0x8, 0x278, 0x7, 0x9, 0x0, 0x56, 0xff, 0x1, 0x4a, 0xf, 0x6, 0x0, 0xd7, 0x5, 0x2b, 0x2, 0x200, 0xffff, 0x2, 0x2, 0x200, 0x80000001, 0x7, 0x2, 0x5, 0xffffffff, 0x3, 0x1, 0x18, 0x0, 0x80, 0x5, 0x96, 0xd, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffff9, 0x7fff, 0x9, 0x100000000, 0xffffffffffffffff, 0xfe00000000000000, 0x9, 0x7f, 0x9, 0xffffffff, 0x2b, 0x4, 0xf, 0x2, 0x6, 0xffffffff, 0x8000, 0x101, 0x10001, 0x9, 0x8, 0x4be9, 0x29b, 0x8000000000000001, 0x9d, 0x44fb, 0x2, 0x80000000, 0x7, 0xbc, 0x6, 0x9, 0x7fff, 0x8000, 0x1, 0xd, 0x990e, 0x80, 0x2, 0x6, 0x5, 0x871, 0x2, 0xf, 0x4, 0x4, 0xfe50, 0x7fff, 0x0, 0x6800, 0xfffffffffffffff9]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001900)={0x0, 0x7, 0x1, [0x180000000000, 0x860, 0x1, 0x1000, 0x7], [0x2, 0x4, 0x23, 0x800, 0xffffffff, 0x1, 0x10, 0x4, 0x80000000, 0x3ff, 0x4, 0x788c, 0x1ff, 0xfe, 0x1000000, 0x7, 0x4, 0x7, 0x9, 0x400, 0x1000, 0x5, 0xfffffffffffff357, 0x4, 0xc, 0x4, 0xcd8c, 0x9, 0x7, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x6, 0x5f44, 0x2, 0x5, 0x1, 0x7, 0x9, 0x5, 0x8, 0x0, 0x7f, 0x157, 0x2000000000000000, 0x0, 0xa, 0xea, 0x7, 0x0, 0x7fffffff, 0x2, 0x6d5e, 0x73, 0xb53, 0x401, 0xffffffffffffffff, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xfffffffffffffff8, 0x8, 0x1, 0x3, 0x2, 0x7, 0x0, 0x9, 0x9, 0xa, 0x8, 0x1, 0x2, 0x8, 0x8, 0x101, 0x2, 0x5, 0x9, 0xc8, 0x8, 0x8, 0xa72, 0x1, 0xd, 0x6, 0x8, 0x0, 0x46, 0x9, 0x8, 0x9, 0xb22, 0xd, 0xffffffff, 0xfffffffffffff83e, 0x2, 0x6, 0x8, 0x6, 0x3, 0x3198, 0x1, 0x7, 0x8, 0x7ff, 0x7, 0xbe0c, 0x8, 0x100, 0x5, 0xac4, 0x7, 0x1, 0x5]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001d40)={0x8, 0x4, {0x4, @struct={0xdd2d}, 0x0, 0xc6f8, 0x15, 0x7, 0x8, 0xffff, 0x20, @struct={0x6, 0x9}, 0x8, 0x9, [0x400, 0x7, 0x679c, 0x2, 0x6, 0x4]}, {0x0, @struct={0x7ff, 0x7ff}, r2, 0x40e, 0x99f7, 0x6, 0x8, 0x1, 0x20, @struct={0x80, 0xdf}, 0x7, 0xffffffff, [0x81, 0xf4, 0x707dd914, 0x0, 0x7, 0xfffffffffffffffc]}, {0x4, @struct={0x2, 0x5}, r3, 0x1, 0xffffffffffffffff, 0x7, 0xffffffffffffff57, 0x7fff, 0x80, @usage=0x2, 0x4, 0x0, [0x7f, 0x200, 0x5, 0x6, 0x883, 0xa]}, {0x8, 0x8000000000000000}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_vif\x00') pread64(r5, &(0x7f0000000100)=""/199, 0xc7, 0x5) lseek(r5, 0xd2, 0x1) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0xfa, 0x40, 0x7, 0x2, 0xf00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x3, 0x0, 0x5, 0x800000007, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) syz_clone3(&(0x7f0000001880)={0x1008c0600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 1.534628766s ago: executing program 0 (id=2723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "560ebaafa30c3b16d9f032f4eb9720f0f377ca8225d7fe6287b9c3299eceae63cb57d4098ec125033b16a5d39cb75ac473f3ea8fa647d63eb1631511ee585981", 0x30}, 0x48, 0xfffffffffffffffc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000e3375900f1102f00000000009500000000000000876455"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_read_part_table(0x5dc, &(0x7f0000000000)="$eJzs3L9rJFUcAPDvm5md3YAasbZYSCMKRrATF7VQkk780VnYKFhEJBZilSwKgj/+gBQ2ooWxCLG2UJAQDFhcdRyEO7g/4q648I6Zndm95FLdhoODz6eY997M9/u++3hvy5ngyZZXI3KKOGlHv5RtUxUbZff8kxTluYRB16aI+HD/7Xc2x++m4fxec3c3ZinDRVLdtVWMu95fVfy0/+l3RR+x017/v93HRVS5yUux9/CPXmlj0pJLZ3nV37ndrKjjWvwZEVupbA7BMGIav0U8G6M2bj3iuTLn3G7zbruDZdTzc/HIDiZH0zei+iD6U1H3R3Qldr5P+ZUubhDFhcwy4vnX17cvm7TNn6buHLZyzoOn1rpBsXiwdVb33VePb+3EdDSfPXJXsj+nX5y+93IzefN3a+YYLLt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu3AtfvvhP0Q/ebK9pft34PYpF6G7EvbZTRYxHV1T/YHK0+s2320V8Pfns+uepn78znPc+njWHP5yLKJeuv3VW1H/8+u/KhXLN8v9bu3E3567EaXf/q9ceSJ4US9cHAAAAAAAAAAAAAAAAAACAxmFsjt8vRvHWzyk+isXr/jlGESn1w1FEzjnfya3+5f9675mud3IzUpMUuU85rmcfFFh9OiIPf3yp/aDALDHnXLUl0mNcKJe6HwAA//+8u1lf") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0)=0x0) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x2, 0x5, 0x80, 0x1, 0x0, 0x44dcc956, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x5, 0xd}, 0x100000, 0xfffffffffffffff4, 0xb1, 0x7, 0xe3, 0xfffffffb, 0x7, 0x0, 0x5, 0x0, 0x9}, r3, 0xa, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r7) 1.152964812s ago: executing program 0 (id=2724): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzszzFKA1EQBuB/TYJRVLAWxEWwFO2scotcQDyCjY0JpvMYgk3wAN7AI5lGnoQsuhtbBZXva2bm393Z98KvcP/aNFfd/OWmO+829fnyaT/JUZ23UkqGSfprKxclOTvPYHu4kZ0k11//Op5/3w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/Zroe9LrjY1MPMrsd5aKsTO56qZon9Wmy9/nBoiRb7Q3L98bzHzg6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDflVLKsladtJ/+KqySaSt/OM5sdFhlmNQn7S2Tj3YzGbyzP4c2AAAgEAMTdmT/PVAIJPrd3QJNX2Wu0hU4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//TWYnqQ==") r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r5}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = gettid() capget(&(0x7f0000000380)={0x0, r6}, &(0x7f0000000480)={0xfffffff9, 0x200, 0x363, 0x9d1c, 0x8, 0x8}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, r8, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20004004) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}}, 0x4000000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="30002f800c0002000202aaaaaaaaaaaa200003800800000014000380060001"], 0x4c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4880) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)="485c73d05af0c3fec8e4e71aed00e59c1c7914bc99472844afa6c400de358c29cd06c3e8ebdfa9a62084eac002c83a8b01d71ced433117950e6f875df423e9fbda809f0be2962852f1ce768eb657909b6b94512118ee1593e1b6becf68aadf4fe934e970da3e61907d8cff0e4f7e5ee868fbb6a8206585c0905860154a918f16d43714f2fcb0c843bae46b278494f2094b44b99c9d45010233a41abb9ee2cfe80a268af3dd51548ea8a17197f3037bb64428a085021fc6ce5dbf4862df7d788d08aabe19e6b0fbcb92b3d31d00c412efb5c5", 0xd2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='sys_enter\x00', r11, 0x0, 0x3}, 0x18) getcwd(&(0x7f0000000500)=""/135, 0x87) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r9, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x40001) 1.092246183s ago: executing program 4 (id=2725): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x1, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 1.072833123s ago: executing program 4 (id=2726): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x1a, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="796104000000000001007e190000"], 0x14}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 944.390515ms ago: executing program 1 (id=2728): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x48900, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000340)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x24}}, 0x4000000) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x88801) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 914.944266ms ago: executing program 3 (id=2729): openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232", 0x75, 0x0, 0x0, 0x0) 909.568246ms ago: executing program 1 (id=2730): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004944) creat(0x0, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESHEX=r4, @ANYBLOB=',wfdno', @ANYBLOB]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 888.963116ms ago: executing program 4 (id=2731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000400"/19, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r5}) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) close(r6) mq_timedsend(r3, 0x0, 0x0, 0xab, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r9}, 0x0, &(0x7f00000001c0)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r10, 0x0, 0x8}, 0x18) 888.437126ms ago: executing program 3 (id=2732): setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f, 0x404}}, 0x20}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000008500000023000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 857.050097ms ago: executing program 1 (id=2733): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000006000000003000000002000008000000000000000300000000050000000300000000000000000000000000000d000000000000000000000009020000000000"], 0x0, 0x4a, 0x0, 0x1}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001240)={0x0, 0x1, 0x0, [0x5, 0x0, 0x9, 0x400, 0x8], [0x7, 0x3, 0xe, 0x4b, 0x9, 0x5, 0x1, 0x9, 0x5, 0x3, 0x89a, 0x5, 0x6fa4, 0xfffffffffffff38b, 0xe, 0x7ea, 0x5, 0x2, 0xc, 0x9c6, 0xffffffff00000001, 0x3, 0x8, 0x9, 0xa875, 0x6, 0xa03, 0xd, 0x10, 0xa85, 0x9, 0x80000000000, 0xc, 0x8, 0x278, 0x7, 0x9, 0x0, 0x56, 0xff, 0x1, 0x4a, 0xf, 0x6, 0x0, 0xd7, 0x5, 0x2b, 0x2, 0x200, 0xffff, 0x2, 0x2, 0x200, 0x80000001, 0x7, 0x2, 0x5, 0xffffffff, 0x3, 0x1, 0x18, 0x0, 0x80, 0x5, 0x96, 0xd, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffff9, 0x7fff, 0x9, 0x100000000, 0xffffffffffffffff, 0xfe00000000000000, 0x9, 0x7f, 0x9, 0xffffffff, 0x2b, 0x4, 0xf, 0x2, 0x6, 0xffffffff, 0x8000, 0x101, 0x10001, 0x9, 0x8, 0x4be9, 0x29b, 0x8000000000000001, 0x9d, 0x44fb, 0x2, 0x80000000, 0x7, 0xbc, 0x6, 0x9, 0x7fff, 0x8000, 0x1, 0xd, 0x990e, 0x80, 0x2, 0x6, 0x5, 0x871, 0x2, 0xf, 0x4, 0x4, 0xfe50, 0x7fff, 0x0, 0x6800, 0xfffffffffffffff9]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001900)={0x0, 0x7, 0x1, [0x180000000000, 0x860, 0x1, 0x1000, 0x7], [0x2, 0x4, 0x23, 0x800, 0xffffffff, 0x1, 0x10, 0x4, 0x80000000, 0x3ff, 0x4, 0x788c, 0x1ff, 0xfe, 0x1000000, 0x7, 0x4, 0x7, 0x9, 0x400, 0x1000, 0x5, 0xfffffffffffff357, 0x4, 0xc, 0x4, 0xcd8c, 0x9, 0x7, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x6, 0x5f44, 0x2, 0x5, 0x1, 0x7, 0x9, 0x5, 0x8, 0x0, 0x7f, 0x157, 0x2000000000000000, 0x0, 0xa, 0xea, 0x7, 0x0, 0x7fffffff, 0x2, 0x6d5e, 0x73, 0xb53, 0x401, 0xffffffffffffffff, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xfffffffffffffff8, 0x8, 0x1, 0x3, 0x2, 0x7, 0x0, 0x9, 0x9, 0xa, 0x8, 0x1, 0x2, 0x8, 0x8, 0x101, 0x2, 0x5, 0x9, 0xc8, 0x8, 0x8, 0xa72, 0x1, 0xd, 0x6, 0x8, 0x0, 0x46, 0x9, 0x8, 0x9, 0xb22, 0xd, 0xffffffff, 0xfffffffffffff83e, 0x2, 0x6, 0x8, 0x6, 0x3, 0x3198, 0x1, 0x7, 0x8, 0x7ff, 0x7, 0xbe0c, 0x8, 0x100, 0x5, 0xac4, 0x7, 0x1, 0x5]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001d40)={0x8, 0x4, {0x4, @struct={0xdd2d}, 0x0, 0xc6f8, 0x15, 0x7, 0x8, 0xffff, 0x20, @struct={0x6, 0x9}, 0x8, 0x9, [0x400, 0x7, 0x679c, 0x2, 0x6, 0x4]}, {0x0, @struct={0x7ff, 0x7ff}, r2, 0x40e, 0x99f7, 0x6, 0x8, 0x1, 0x20, @struct={0x80, 0xdf}, 0x7, 0xffffffff, [0x81, 0xf4, 0x707dd914, 0x0, 0x7, 0xfffffffffffffffc]}, {0x4, @struct={0x2, 0x5}, r3, 0x1, 0xffffffffffffffff, 0x7, 0xffffffffffffff57, 0x7fff, 0x80, @usage=0x2, 0x4, 0x0, [0x7f, 0x200, 0x5, 0x6, 0x883, 0xa]}, {0x8, 0x8000000000000000}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_vif\x00') pread64(r5, &(0x7f0000000100)=""/199, 0xc7, 0x5) lseek(r5, 0xd2, 0x1) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0xfa, 0x40, 0x7, 0x2, 0xf00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x3, 0x0, 0x5, 0x800000007, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) syz_clone3(&(0x7f0000001880)={0x1008c0600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 824.667257ms ago: executing program 3 (id=2734): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r0, 0x0, 0x5}, 0x18) creat(0x0, 0x48) pipe2$9p(0x0, 0x0) syz_usbip_server_init(0x5) socketpair(0x2c, 0x1, 0xfffff800, &(0x7f0000000180)) perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0x36, 0xf, 0x0, 0x0, 0x0, 0x7, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x1419d, 0xffff, 0xe1, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x1, 0x0, 0x8000000000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffeffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 755.884078ms ago: executing program 1 (id=2735): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x1, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 677.788229ms ago: executing program 1 (id=2736): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f, 0x404}}, 0x20}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) (fail_nth: 3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000008500000023000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 356.307745ms ago: executing program 1 (id=2737): socket(0x11, 0xa, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) pread64(r0, &(0x7f00000002c0)=""/181, 0xb5, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gre0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000140)={[{@dioread_lock}, {@noquota}, {@grpid}]}, 0x1, 0x4db, &(0x7f0000001480)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 262.810376ms ago: executing program 0 (id=2738): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x4092}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x800, 0x1, 0x11cb}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a0000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) 87.444359ms ago: executing program 0 (id=2739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0xc, 0x1c, 0x153, &(0x7f00000002c0)="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"}) r6 = dup(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file1\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r8}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r9, 0x4c09, 0x3) r13 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64=r9, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=r8, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB="0200", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r12, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664", @ANYRESDEC=r10, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=r13, @ANYBLOB="1000040000000000"], 0x94, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=@newpolicy={0x578, 0x13, 0x800, 0x70bd27, 0x25dfdbfd, {{@in=@empty, @in6=@mcast1, 0x4e24, 0xb640, 0x4e22, 0x0, 0xa, 0x80, 0x0, 0x29, 0x0, r10}, {0xfffffffffffffffe, 0x1, 0x52b1, 0x8, 0x3, 0x1, 0x1, 0x5}, {0x1, 0x3, 0x9, 0x8000000000000001}, 0x80000001, 0x6e6bb8, 0x0, 0x0, 0x4, 0x2}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @srcaddr={0x14, 0xd, @in=@loopback}, @algo_auth={0x126, 0x1, {{'blake2s-160-x86\x00'}, 0x6f0, "c1186f89e801c4cb4b15b184985bb111158309a025248258cc09619dea4186d5a4feaac2b81a79b8b6d5b32b19e93ee526b7d9892feb551fcb4d794382eeaef7a1f446209c1847cccd8cc70808cd7d4d9dba44e13a572fe4af56aebf70b05cd456213423145114148ae954b0d12d0a8a5fc59fbac94b8dda777cf4960050ae142b7023341bc8179ac783cecb068830d5b4f66e41052f096bfb0431ef5ee4d881dd8945832d4b46378d3514656ce78dd18bbb513da3a33d596f6a8e37f3d7c4d1b4b08d5ef181782c2ffb27695c6673a98c2a9099c6ae48d0e5ea85140856"}}, @srcaddr={0x14, 0xd, @in=@private=0xa010100}, @algo_auth_trunc={0x94, 0x14, {{'sha1-ni\x00'}, 0x240, 0x60, "8232f746280a9821416d346bcdb1e69c6ee6d9a19f83af5b33e770634a0d73adee3383b9c2bd1621d7a53d873f41943e323f5dff6c42558044d84031589f348ff06e94da9d0c7f2a"}}, @migrate={0x1cc, 0x11, [{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x3500, 0x2, 0x2}, {@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x2d}, @in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in=@broadcast, 0x3c, 0x3, 0x0, 0x3507, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x7b, 0x0, 0x0, 0x3502, 0xa, 0x2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x32, 0x4, 0x0, 0x3507, 0x2, 0xa}, {@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, @in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x33, 0x0, 0x0, 0x3500, 0x2, 0xa}]}, @replay_thresh={0x8}, @migrate={0xe8, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3c, 0x5, 0x0, 0x3501, 0xa, 0x2}, {@in=@multicast1, @in6=@remote, @in=@empty, @in=@loopback, 0x2b, 0x6, 0x0, 0x0, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3c, 0x0, 0x0, 0x0, 0x2, 0x8}]}, @mark={0xc, 0x15, {0x35075b, 0x9}}]}, 0x578}, 0x1, 0x0, 0x0, 0x20004040}, 0xc040810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e20, 0x5, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x89, r7, r10}, {0x40, 0x8, 0x401, 0xbc, 0x0, 0x24, 0x8, 0x9}, {0x6, 0x81, 0x9, 0x7fffffff}, 0x9, 0x6e6bbd, 0xee3985dc951321e4, 0x1, 0x1, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x32}, 0x2, @in=@private=0xa010101, 0x3505, 0x1, 0x1, 0x5, 0x3ff800, 0x8, 0x1}}, 0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 505.55µs ago: executing program 0 (id=2740): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x48900, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000340)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x24}}, 0x4000000) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x88801) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 0s ago: executing program 4 (id=2741): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') kernel console output (not intermixed with test programs): onnection closed [ 128.459025][ T3631] vhci_hcd: stop threads [ 128.468182][ T3631] vhci_hcd: release socket [ 128.472681][ T3631] vhci_hcd: disconnect device [ 128.928900][ T7555] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.031068][ T7565] netlink: 'syz.2.1514': attribute type 10 has an invalid length. [ 129.039139][ T7565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1514'. [ 129.087260][ T7555] lo speed is unknown, defaulting to 1000 [ 130.169699][ T7619] FAULT_INJECTION: forcing a failure. [ 130.169699][ T7619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.182875][ T7619] CPU: 0 UID: 0 PID: 7619 Comm: syz.3.1539 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 130.182902][ T7619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.182918][ T7619] Call Trace: [ 130.182926][ T7619] [ 130.182935][ T7619] __dump_stack+0x1d/0x30 [ 130.183008][ T7619] dump_stack_lvl+0xe8/0x140 [ 130.183028][ T7619] dump_stack+0x15/0x1b [ 130.183113][ T7619] should_fail_ex+0x265/0x280 [ 130.183208][ T7619] should_fail+0xb/0x20 [ 130.183241][ T7619] should_fail_usercopy+0x1a/0x20 [ 130.183280][ T7619] _copy_to_user+0x20/0xa0 [ 130.183300][ T7619] simple_read_from_buffer+0xb5/0x130 [ 130.183393][ T7619] proc_fail_nth_read+0x100/0x140 [ 130.183425][ T7619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.183460][ T7619] vfs_read+0x19d/0x6f0 [ 130.183505][ T7619] ? __rcu_read_unlock+0x4f/0x70 [ 130.183528][ T7619] ? __fget_files+0x184/0x1c0 [ 130.183547][ T7619] ksys_read+0xda/0x1a0 [ 130.183637][ T7619] __x64_sys_read+0x40/0x50 [ 130.183668][ T7619] x64_sys_call+0x2d77/0x2fb0 [ 130.183693][ T7619] do_syscall_64+0xd2/0x200 [ 130.183722][ T7619] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.183752][ T7619] ? clear_bhb_loop+0x40/0x90 [ 130.183772][ T7619] ? clear_bhb_loop+0x40/0x90 [ 130.183863][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.183955][ T7619] RIP: 0033:0x7fd7dfbad3bc [ 130.183973][ T7619] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 130.184000][ T7619] RSP: 002b:00007fd7de20f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.184021][ T7619] RAX: ffffffffffffffda RBX: 00007fd7dfdd5fa0 RCX: 00007fd7dfbad3bc [ 130.184051][ T7619] RDX: 000000000000000f RSI: 00007fd7de20f0a0 RDI: 0000000000000003 [ 130.184065][ T7619] RBP: 00007fd7de20f090 R08: 0000000000000000 R09: 0000000000000000 [ 130.184079][ T7619] R10: 0000000000000707 R11: 0000000000000246 R12: 0000000000000001 [ 130.184093][ T7619] R13: 0000000000000001 R14: 00007fd7dfdd5fa0 R15: 00007ffc7208ede8 [ 130.184114][ T7619] [ 130.762182][ T7644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1549'. [ 131.133504][ T7680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1561'. [ 131.217023][ T29] kauditd_printk_skb: 894 callbacks suppressed [ 131.217040][ T29] audit: type=1400 audit(1753110649.851:7393): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.247715][ T29] audit: type=1400 audit(1753110649.861:7394): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.322270][ T3303] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.323920][ T29] audit: type=1400 audit(1753110649.871:7395): avc: denied { bpf } for pid=7691 comm="syz.4.1568" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 131.328864][ T3303] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 131.349332][ T29] audit: type=1400 audit(1753110649.871:7396): avc: denied { create } for pid=7691 comm="syz.4.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 131.357005][ T3303] audit: backlog limit exceeded [ 131.377203][ T29] audit: type=1400 audit(1753110649.871:7397): avc: denied { open } for pid=7691 comm="syz.4.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 131.401369][ T29] audit: type=1400 audit(1753110649.871:7398): avc: denied { prog_load } for pid=7691 comm="syz.4.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 131.420628][ T29] audit: type=1400 audit(1753110649.871:7399): avc: denied { write } for pid=7691 comm="syz.4.1568" name="ip6_mr_vif" dev="proc" ino=4026532812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 131.648158][ T7718] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.1577'. [ 131.657469][ T7718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1577'. [ 131.828585][ T7724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1581'. [ 132.071664][ T7732] lo speed is unknown, defaulting to 1000 [ 133.874035][ T7788] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 133.909135][ T7788] netlink: 'syz.2.1607': attribute type 10 has an invalid length. [ 133.917023][ T7788] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1607'. [ 134.476068][ T7806] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 135.408532][ T7847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 135.415186][ T7847] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 135.423017][ T7847] vhci_hcd vhci_hcd.0: Device attached [ 135.485944][ T7848] vhci_hcd: connection closed [ 135.487148][ T386] vhci_hcd: stop threads [ 135.496194][ T386] vhci_hcd: release socket [ 135.500633][ T386] vhci_hcd: disconnect device [ 135.561377][ T7863] FAULT_INJECTION: forcing a failure. [ 135.561377][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 135.574128][ T7863] CPU: 1 UID: 0 PID: 7863 Comm: syz.1.1636 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 135.574161][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.574253][ T7863] Call Trace: [ 135.574261][ T7863] [ 135.574320][ T7863] __dump_stack+0x1d/0x30 [ 135.574341][ T7863] dump_stack_lvl+0xe8/0x140 [ 135.574371][ T7863] dump_stack+0x15/0x1b [ 135.574392][ T7863] should_fail_ex+0x265/0x280 [ 135.574517][ T7863] should_failslab+0x8c/0xb0 [ 135.574544][ T7863] kmem_cache_alloc_node_noprof+0x57/0x320 [ 135.574631][ T7863] ? dup_task_struct+0x70/0x6a0 [ 135.574662][ T7863] dup_task_struct+0x70/0x6a0 [ 135.574744][ T7863] ? _parse_integer+0x27/0x40 [ 135.574780][ T7863] copy_process+0x399/0x1f90 [ 135.574866][ T7863] ? kstrtouint+0x76/0xc0 [ 135.574892][ T7863] ? kstrtouint_from_user+0x9f/0xf0 [ 135.574967][ T7863] ? __rcu_read_unlock+0x4f/0x70 [ 135.574990][ T7863] kernel_clone+0x16c/0x5b0 [ 135.575016][ T7863] ? vfs_write+0x75e/0x8e0 [ 135.575116][ T7863] __x64_sys_clone+0xe6/0x120 [ 135.575155][ T7863] x64_sys_call+0x2c59/0x2fb0 [ 135.575175][ T7863] do_syscall_64+0xd2/0x200 [ 135.575194][ T7863] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.575225][ T7863] ? clear_bhb_loop+0x40/0x90 [ 135.575321][ T7863] ? clear_bhb_loop+0x40/0x90 [ 135.575343][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.575418][ T7863] RIP: 0033:0x7fc4fa54e9a9 [ 135.575434][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.575451][ T7863] RSP: 002b:00007fc4f8baefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 135.575469][ T7863] RAX: ffffffffffffffda RBX: 00007fc4fa775fa0 RCX: 00007fc4fa54e9a9 [ 135.575519][ T7863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 135.575531][ T7863] RBP: 00007fc4f8baf090 R08: 0000000000000000 R09: 0000000000000000 [ 135.575543][ T7863] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 135.575554][ T7863] R13: 0000000000000000 R14: 00007fc4fa775fa0 R15: 00007ffc6b375678 [ 135.575571][ T7863] [ 136.095175][ T7879] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 136.116901][ T7879] lo speed is unknown, defaulting to 1000 [ 136.156674][ T7879] netlink: 'syz.2.1643': attribute type 10 has an invalid length. [ 136.164647][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1643'. [ 136.231245][ T29] kauditd_printk_skb: 784 callbacks suppressed [ 136.231263][ T29] audit: type=1400 audit(1753110654.871:8184): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.284804][ T29] audit: type=1400 audit(1753110654.911:8185): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.309194][ T29] audit: type=1400 audit(1753110654.911:8186): avc: denied { map_create } for pid=7881 comm="syz.0.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 136.328473][ T29] audit: type=1400 audit(1753110654.911:8187): avc: denied { prog_load } for pid=7881 comm="syz.0.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 136.357954][ T29] audit: type=1400 audit(1753110655.001:8188): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.446670][ T29] audit: type=1400 audit(1753110655.091:8189): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.531745][ T29] audit: type=1400 audit(1753110655.141:8190): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.588249][ T29] audit: type=1400 audit(1753110655.231:8191): avc: denied { map_create } for pid=7895 comm="syz.2.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 136.625828][ T29] audit: type=1400 audit(1753110655.261:8192): avc: denied { prog_load } for pid=7895 comm="syz.2.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 136.645044][ T29] audit: type=1400 audit(1753110655.261:8193): avc: denied { create } for pid=7895 comm="syz.2.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 136.697276][ T7896] lo speed is unknown, defaulting to 1000 [ 136.828384][ T7910] ip6gre1: entered allmulticast mode [ 137.004172][ T7914] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 137.010829][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 137.018595][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 137.040428][ T7918] vhci_hcd: connection closed [ 137.040703][ T295] vhci_hcd: stop threads [ 137.049843][ T295] vhci_hcd: release socket [ 137.054297][ T295] vhci_hcd: disconnect device [ 137.259286][ T7942] FAULT_INJECTION: forcing a failure. [ 137.259286][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.272509][ T7942] CPU: 0 UID: 0 PID: 7942 Comm: syz.0.1667 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 137.272543][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.272557][ T7942] Call Trace: [ 137.272563][ T7942] [ 137.272570][ T7942] __dump_stack+0x1d/0x30 [ 137.272590][ T7942] dump_stack_lvl+0xe8/0x140 [ 137.272674][ T7942] dump_stack+0x15/0x1b [ 137.272691][ T7942] should_fail_ex+0x265/0x280 [ 137.272722][ T7942] should_fail+0xb/0x20 [ 137.272830][ T7942] should_fail_usercopy+0x1a/0x20 [ 137.272941][ T7942] _copy_from_user+0x1c/0xb0 [ 137.272966][ T7942] io_submit_one+0x52/0x11d0 [ 137.272998][ T7942] __se_sys_io_submit+0xfb/0x280 [ 137.273109][ T7942] __x64_sys_io_submit+0x43/0x50 [ 137.273138][ T7942] x64_sys_call+0xfc4/0x2fb0 [ 137.273160][ T7942] do_syscall_64+0xd2/0x200 [ 137.273183][ T7942] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 137.273285][ T7942] ? clear_bhb_loop+0x40/0x90 [ 137.273311][ T7942] ? clear_bhb_loop+0x40/0x90 [ 137.273332][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.273353][ T7942] RIP: 0033:0x7fcb0487e9a9 [ 137.273368][ T7942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.273436][ T7942] RSP: 002b:00007fcb02ee7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 137.273458][ T7942] RAX: ffffffffffffffda RBX: 00007fcb04aa5fa0 RCX: 00007fcb0487e9a9 [ 137.273475][ T7942] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fcb02ea3000 [ 137.273499][ T7942] RBP: 00007fcb02ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 137.273515][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.273530][ T7942] R13: 0000000000000000 R14: 00007fcb04aa5fa0 R15: 00007ffc144ccd18 [ 137.273584][ T7942] [ 138.439052][ T7991] FAULT_INJECTION: forcing a failure. [ 138.439052][ T7991] name failslab, interval 1, probability 0, space 0, times 0 [ 138.451804][ T7991] CPU: 0 UID: 0 PID: 7991 Comm: syz.2.1687 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 138.451834][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.451897][ T7991] Call Trace: [ 138.451904][ T7991] [ 138.451933][ T7991] __dump_stack+0x1d/0x30 [ 138.451953][ T7991] dump_stack_lvl+0xe8/0x140 [ 138.451971][ T7991] dump_stack+0x15/0x1b [ 138.451986][ T7991] should_fail_ex+0x265/0x280 [ 138.452071][ T7991] should_failslab+0x8c/0xb0 [ 138.452102][ T7991] kmem_cache_alloc_node_noprof+0x57/0x320 [ 138.452213][ T7991] ? __alloc_skb+0x101/0x320 [ 138.452279][ T7991] __alloc_skb+0x101/0x320 [ 138.452319][ T7991] ? audit_log_start+0x365/0x6c0 [ 138.452359][ T7991] audit_log_start+0x380/0x6c0 [ 138.452411][ T7991] audit_seccomp+0x48/0x100 [ 138.452466][ T7991] ? __seccomp_filter+0x68c/0x10d0 [ 138.452570][ T7991] __seccomp_filter+0x69d/0x10d0 [ 138.452600][ T7991] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 138.452647][ T7991] ? vfs_write+0x75e/0x8e0 [ 138.452695][ T7991] __secure_computing+0x82/0x150 [ 138.452790][ T7991] syscall_trace_enter+0xcf/0x1e0 [ 138.452824][ T7991] do_syscall_64+0xac/0x200 [ 138.452850][ T7991] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.452913][ T7991] ? clear_bhb_loop+0x40/0x90 [ 138.452978][ T7991] ? clear_bhb_loop+0x40/0x90 [ 138.453014][ T7991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.453043][ T7991] RIP: 0033:0x7f9f64eae9a9 [ 138.453063][ T7991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.453088][ T7991] RSP: 002b:00007f9f6350f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.453114][ T7991] RAX: ffffffffffffffda RBX: 00007f9f650d5fa0 RCX: 00007f9f64eae9a9 [ 138.453203][ T7991] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffffff [ 138.453220][ T7991] RBP: 00007f9f6350f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.453238][ T7991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.453254][ T7991] R13: 0000000000000000 R14: 00007f9f650d5fa0 R15: 00007ffe2cad5b28 [ 138.453340][ T7991] [ 139.479804][ T8048] FAULT_INJECTION: forcing a failure. [ 139.479804][ T8048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.487426][ T8050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 139.492966][ T8048] CPU: 1 UID: 0 PID: 8048 Comm: syz.4.1706 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 139.493094][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.493112][ T8048] Call Trace: [ 139.493120][ T8048] [ 139.493129][ T8048] __dump_stack+0x1d/0x30 [ 139.493217][ T8048] dump_stack_lvl+0xe8/0x140 [ 139.493244][ T8048] dump_stack+0x15/0x1b [ 139.493266][ T8048] should_fail_ex+0x265/0x280 [ 139.493348][ T8048] should_fail+0xb/0x20 [ 139.493385][ T8048] should_fail_usercopy+0x1a/0x20 [ 139.493508][ T8048] _copy_from_user+0x1c/0xb0 [ 139.493537][ T8048] kstrtouint_from_user+0x69/0xf0 [ 139.493577][ T8048] ? 0xffffffff81000000 [ 139.493595][ T8048] ? selinux_file_permission+0x1e4/0x320 [ 139.493680][ T8048] proc_fail_nth_write+0x50/0x160 [ 139.493726][ T8048] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 139.493837][ T8048] vfs_write+0x269/0x8e0 [ 139.493878][ T8048] ? vfs_read+0x47f/0x6f0 [ 139.493948][ T8048] ? __rcu_read_unlock+0x4f/0x70 [ 139.494040][ T8048] ? __fget_files+0x184/0x1c0 [ 139.494068][ T8048] ksys_write+0xda/0x1a0 [ 139.494111][ T8048] __x64_sys_write+0x40/0x50 [ 139.494154][ T8048] x64_sys_call+0x2cdd/0x2fb0 [ 139.494183][ T8048] do_syscall_64+0xd2/0x200 [ 139.494219][ T8048] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 139.494255][ T8048] ? clear_bhb_loop+0x40/0x90 [ 139.494284][ T8048] ? clear_bhb_loop+0x40/0x90 [ 139.494314][ T8048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.494353][ T8048] RIP: 0033:0x7f060272d45f [ 139.494373][ T8048] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 139.494408][ T8048] RSP: 002b:00007f0600d97030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 139.494434][ T8048] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f060272d45f [ 139.494524][ T8048] RDX: 0000000000000001 RSI: 00007f0600d970a0 RDI: 0000000000000003 [ 139.494541][ T8048] RBP: 00007f0600d97090 R08: 0000000000000000 R09: 0000000000000000 [ 139.494556][ T8048] R10: 0000200000000000 R11: 0000000000000293 R12: 0000000000000001 [ 139.494572][ T8048] R13: 0000000000000000 R14: 00007f0602955fa0 R15: 00007ffdad6eb7a8 [ 139.494596][ T8048] [ 139.716397][ T8050] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 139.724343][ T8050] vhci_hcd vhci_hcd.0: Device attached [ 139.748558][ T8050] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 139.759562][ T8051] vhci_hcd: connection closed [ 139.762005][ T295] vhci_hcd: stop threads [ 139.771108][ T295] vhci_hcd: release socket [ 139.775591][ T295] vhci_hcd: disconnect device [ 140.117721][ T8081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8081 comm=syz.1.1719 [ 140.337827][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1727'. [ 140.424672][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'. [ 140.940843][ T8121] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 140.980933][ T8121] lo speed is unknown, defaulting to 1000 [ 141.036609][ T8128] netlink: 'syz.0.1734': attribute type 10 has an invalid length. [ 141.044622][ T8128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1734'. [ 141.137462][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1739'. [ 141.205520][ T8145] FAULT_INJECTION: forcing a failure. [ 141.205520][ T8145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.218632][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.2.1744 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 141.218664][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.218680][ T8145] Call Trace: [ 141.218685][ T8145] [ 141.218736][ T8145] __dump_stack+0x1d/0x30 [ 141.218757][ T8145] dump_stack_lvl+0xe8/0x140 [ 141.218781][ T8145] dump_stack+0x15/0x1b [ 141.218801][ T8145] should_fail_ex+0x265/0x280 [ 141.218838][ T8145] should_fail+0xb/0x20 [ 141.218960][ T8145] should_fail_usercopy+0x1a/0x20 [ 141.218999][ T8145] _copy_to_user+0x20/0xa0 [ 141.219023][ T8145] simple_read_from_buffer+0xb5/0x130 [ 141.219073][ T8145] proc_fail_nth_read+0x100/0x140 [ 141.219184][ T8145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.219218][ T8145] vfs_read+0x19d/0x6f0 [ 141.219319][ T8145] ? __rcu_read_unlock+0x4f/0x70 [ 141.219346][ T8145] ? __fget_files+0x184/0x1c0 [ 141.219368][ T8145] ? ldsem_up_read+0x8a/0xd0 [ 141.219395][ T8145] ksys_read+0xda/0x1a0 [ 141.219427][ T8145] __x64_sys_read+0x40/0x50 [ 141.219544][ T8145] x64_sys_call+0x2d77/0x2fb0 [ 141.219571][ T8145] do_syscall_64+0xd2/0x200 [ 141.219594][ T8145] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 141.219642][ T8145] ? clear_bhb_loop+0x40/0x90 [ 141.219664][ T8145] ? clear_bhb_loop+0x40/0x90 [ 141.219690][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.219711][ T8145] RIP: 0033:0x7f9f64ead3bc [ 141.219769][ T8145] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.219792][ T8145] RSP: 002b:00007f9f6350f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.219815][ T8145] RAX: ffffffffffffffda RBX: 00007f9f650d5fa0 RCX: 00007f9f64ead3bc [ 141.219831][ T8145] RDX: 000000000000000f RSI: 00007f9f6350f0a0 RDI: 0000000000000004 [ 141.219863][ T8145] RBP: 00007f9f6350f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.219875][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.219890][ T8145] R13: 0000000000000000 R14: 00007f9f650d5fa0 R15: 00007ffe2cad5b28 [ 141.219913][ T8145] [ 141.324129][ T29] kauditd_printk_skb: 1322 callbacks suppressed [ 141.324158][ T29] audit: type=1400 audit(1753110659.871:9512): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 141.462302][ T29] audit: type=1326 audit(1753110659.871:9513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.4.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f060272d45f code=0x7ffc0000 [ 141.485653][ T29] audit: type=1326 audit(1753110659.921:9514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.4.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f060272ea37 code=0x7ffc0000 [ 141.509130][ T29] audit: type=1326 audit(1753110659.921:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.4.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f060272d310 code=0x7ffc0000 [ 141.532972][ T29] audit: type=1400 audit(1753110659.921:9516): avc: denied { read write } for pid=8124 comm="syz.4.1736" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 141.557081][ T29] audit: type=1326 audit(1753110659.921:9517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8124 comm="syz.4.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f060272d60a code=0x7ffc0000 [ 141.580482][ T29] audit: type=1400 audit(1753110659.921:9518): avc: denied { map_create } for pid=8146 comm="syz.3.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.599698][ T29] audit: type=1400 audit(1753110659.921:9519): avc: denied { prog_load } for pid=8146 comm="syz.3.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.618772][ T29] audit: type=1400 audit(1753110659.921:9520): avc: denied { prog_load } for pid=8146 comm="syz.3.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.637875][ T29] audit: type=1400 audit(1753110659.921:9521): avc: denied { bpf } for pid=8146 comm="syz.3.1745" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 142.155880][ T8177] FAULT_INJECTION: forcing a failure. [ 142.155880][ T8177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.169077][ T8177] CPU: 0 UID: 0 PID: 8177 Comm: syz.3.1756 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 142.169144][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.169159][ T8177] Call Trace: [ 142.169168][ T8177] [ 142.169175][ T8177] __dump_stack+0x1d/0x30 [ 142.169200][ T8177] dump_stack_lvl+0xe8/0x140 [ 142.169217][ T8177] dump_stack+0x15/0x1b [ 142.169293][ T8177] should_fail_ex+0x265/0x280 [ 142.169330][ T8177] should_fail+0xb/0x20 [ 142.169357][ T8177] should_fail_usercopy+0x1a/0x20 [ 142.169416][ T8177] _copy_from_user+0x1c/0xb0 [ 142.169436][ T8177] __sys_bpf+0x178/0x790 [ 142.169470][ T8177] __x64_sys_bpf+0x41/0x50 [ 142.169569][ T8177] x64_sys_call+0x2478/0x2fb0 [ 142.169636][ T8177] do_syscall_64+0xd2/0x200 [ 142.169653][ T8177] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.169684][ T8177] ? clear_bhb_loop+0x40/0x90 [ 142.169726][ T8177] ? clear_bhb_loop+0x40/0x90 [ 142.169834][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.169892][ T8177] RIP: 0033:0x7fd7dfbae9a9 [ 142.169910][ T8177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.169932][ T8177] RSP: 002b:00007fd7de20f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.170014][ T8177] RAX: ffffffffffffffda RBX: 00007fd7dfdd5fa0 RCX: 00007fd7dfbae9a9 [ 142.170026][ T8177] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 142.170038][ T8177] RBP: 00007fd7de20f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.170103][ T8177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.170119][ T8177] R13: 0000000000000000 R14: 00007fd7dfdd5fa0 R15: 00007ffc7208ede8 [ 142.170141][ T8177] [ 142.461910][ T8180] lo speed is unknown, defaulting to 1000 [ 143.803484][ T8242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1781'. [ 144.906634][ T8281] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 144.913205][ T8281] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 144.921055][ T8281] vhci_hcd vhci_hcd.0: Device attached [ 144.994195][ T8289] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 145.050073][ T8282] vhci_hcd: connection closed [ 145.070240][ T386] vhci_hcd: stop threads [ 145.079238][ T386] vhci_hcd: release socket [ 145.083683][ T386] vhci_hcd: disconnect device [ 145.599860][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 145.783332][ T8318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8318 comm=syz.2.1811 [ 146.221484][ T8332] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 146.228212][ T8332] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 146.236180][ T8332] vhci_hcd vhci_hcd.0: Device attached [ 146.273750][ T8332] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 146.284886][ T8333] vhci_hcd: connection closed [ 146.286195][ T31] vhci_hcd: stop threads [ 146.295242][ T31] vhci_hcd: release socket [ 146.299815][ T31] vhci_hcd: disconnect device [ 146.345922][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 146.345940][ T29] audit: type=1400 audit(1753110664.991:10129): avc: denied { read write } for pid=8324 comm="syz.1.1814" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.443921][ T29] audit: type=1400 audit(1753110665.041:10130): avc: denied { map_create } for pid=8327 comm="syz.4.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.463364][ T29] audit: type=1400 audit(1753110665.041:10131): avc: denied { prog_load } for pid=8327 comm="syz.4.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.482630][ T29] audit: type=1400 audit(1753110665.041:10132): avc: denied { read } for pid=8327 comm="syz.4.1815" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 146.503887][ T29] audit: type=1400 audit(1753110665.041:10133): avc: denied { create } for pid=8327 comm="syz.4.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 146.524482][ T29] audit: type=1400 audit(1753110665.041:10134): avc: denied { create } for pid=8327 comm="syz.4.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 146.545167][ T29] audit: type=1400 audit(1753110665.041:10135): avc: denied { map_create } for pid=8327 comm="syz.4.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.564520][ T29] audit: type=1400 audit(1753110665.041:10136): avc: denied { prog_load } for pid=8327 comm="syz.4.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 146.687175][ T29] audit: type=1400 audit(1753110665.151:10137): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.711533][ T29] audit: type=1400 audit(1753110665.251:10138): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.844186][ T8350] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 146.959734][ T8350] lo speed is unknown, defaulting to 1000 [ 147.004431][ T8362] netlink: 'syz.2.1822': attribute type 10 has an invalid length. [ 147.012294][ T8362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1822'. [ 147.119074][ T8368] lo speed is unknown, defaulting to 1000 [ 147.250526][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1836'. [ 147.283927][ T8387] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 147.290495][ T8387] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 147.298304][ T8387] vhci_hcd vhci_hcd.0: Device attached [ 147.365687][ T8390] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 147.393871][ T8388] vhci_hcd: connection closed [ 147.395028][ T31] vhci_hcd: stop threads [ 147.404180][ T31] vhci_hcd: release socket [ 147.408661][ T31] vhci_hcd: disconnect device [ 147.549231][ T8397] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 147.571486][ T8397] lo speed is unknown, defaulting to 1000 [ 147.629736][ T8401] netlink: 'syz.2.1840': attribute type 10 has an invalid length. [ 147.637637][ T8401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1840'. [ 148.748723][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 148.769144][ T8432] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 148.911072][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1855'. [ 148.954887][ T8433] lo speed is unknown, defaulting to 1000 [ 148.963955][ T8432] netlink: 'syz.2.1852': attribute type 10 has an invalid length. [ 148.971810][ T8432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1852'. [ 149.350787][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'. [ 149.359814][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1866'. [ 149.547424][ T8479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1871'. [ 149.793870][ T8490] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 149.800439][ T8490] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 149.808487][ T8490] vhci_hcd vhci_hcd.0: Device attached [ 149.850476][ T8490] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 149.892368][ T8491] vhci_hcd: connection closed [ 149.892576][ T295] vhci_hcd: stop threads [ 149.901595][ T295] vhci_hcd: release socket [ 149.906076][ T295] vhci_hcd: disconnect device [ 150.088886][ T8506] FAULT_INJECTION: forcing a failure. [ 150.088886][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 150.101633][ T8506] CPU: 0 UID: 0 PID: 8506 Comm: syz.1.1882 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 150.101675][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.101691][ T8506] Call Trace: [ 150.101698][ T8506] [ 150.101707][ T8506] __dump_stack+0x1d/0x30 [ 150.101750][ T8506] dump_stack_lvl+0xe8/0x140 [ 150.101775][ T8506] dump_stack+0x15/0x1b [ 150.101793][ T8506] should_fail_ex+0x265/0x280 [ 150.101830][ T8506] should_failslab+0x8c/0xb0 [ 150.101920][ T8506] kmem_cache_alloc_noprof+0x50/0x310 [ 150.101965][ T8506] ? getname_flags+0x80/0x3b0 [ 150.102064][ T8506] getname_flags+0x80/0x3b0 [ 150.102083][ T8506] __x64_sys_lgetxattr+0xfd/0x140 [ 150.102116][ T8506] x64_sys_call+0x1b0e/0x2fb0 [ 150.102200][ T8506] do_syscall_64+0xd2/0x200 [ 150.102223][ T8506] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.102253][ T8506] ? clear_bhb_loop+0x40/0x90 [ 150.102278][ T8506] ? clear_bhb_loop+0x40/0x90 [ 150.102304][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.102354][ T8506] RIP: 0033:0x7fc4fa54e9a9 [ 150.102372][ T8506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.102394][ T8506] RSP: 002b:00007fc4f8baf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 150.102413][ T8506] RAX: ffffffffffffffda RBX: 00007fc4fa775fa0 RCX: 00007fc4fa54e9a9 [ 150.102499][ T8506] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000 [ 150.102515][ T8506] RBP: 00007fc4f8baf090 R08: 0000000000000000 R09: 0000000000000000 [ 150.102550][ T8506] R10: fffffffffffffe5f R11: 0000000000000246 R12: 0000000000000001 [ 150.102565][ T8506] R13: 0000000000000000 R14: 00007fc4fa775fa0 R15: 00007ffc6b375678 [ 150.102584][ T8506] [ 150.403907][ T8516] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 150.410544][ T8516] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 150.418286][ T8516] vhci_hcd vhci_hcd.0: Device attached [ 150.434396][ T8517] vhci_hcd: connection closed [ 150.434749][ T31] vhci_hcd: stop threads [ 150.443723][ T31] vhci_hcd: release socket [ 150.448197][ T31] vhci_hcd: disconnect device [ 150.683727][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1893'. [ 151.384961][ T29] kauditd_printk_skb: 1017 callbacks suppressed [ 151.384978][ T29] audit: type=1400 audit(1753110670.031:11156): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.474951][ T29] audit: type=1400 audit(1753110670.101:11157): avc: denied { map_create } for pid=8563 comm="syz.3.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.494267][ T29] audit: type=1400 audit(1753110670.101:11158): avc: denied { prog_load } for pid=8563 comm="syz.3.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.513444][ T29] audit: type=1400 audit(1753110670.101:11159): avc: denied { read write } for pid=8563 comm="syz.3.1904" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 151.538054][ T29] audit: type=1400 audit(1753110670.111:11160): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.666313][ T29] audit: type=1400 audit(1753110670.161:11161): avc: denied { bpf } for pid=8565 comm="syz.3.1905" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 151.687049][ T29] audit: type=1400 audit(1753110670.161:11162): avc: denied { create } for pid=8565 comm="syz.3.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 151.707531][ T29] audit: type=1400 audit(1753110670.161:11163): avc: denied { open } for pid=8565 comm="syz.3.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 151.726992][ T29] audit: type=1400 audit(1753110670.161:11164): avc: denied { prog_load } for pid=8565 comm="syz.3.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 151.746257][ T29] audit: type=1400 audit(1753110670.161:11165): avc: denied { write } for pid=8565 comm="syz.3.1905" name="ip6_mr_vif" dev="proc" ino=4026532629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 152.922722][ T8608] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 152.929351][ T8608] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.937171][ T8608] vhci_hcd vhci_hcd.0: Device attached [ 152.998531][ T8611] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 153.023928][ T8609] vhci_hcd: connection closed [ 153.026565][ T31] vhci_hcd: stop threads [ 153.035602][ T31] vhci_hcd: release socket [ 153.040047][ T31] vhci_hcd: disconnect device [ 153.798257][ T8640] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 153.854092][ T8637] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 153.860700][ T8637] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 153.868427][ T8637] vhci_hcd vhci_hcd.0: Device attached [ 153.904799][ T8638] vhci_hcd: connection closed [ 153.905203][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1933'. [ 153.921354][ T31] vhci_hcd: stop threads [ 153.925788][ T31] vhci_hcd: release socket [ 153.930398][ T31] vhci_hcd: disconnect device [ 154.520624][ T8671] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 154.648606][ T8671] lo speed is unknown, defaulting to 1000 [ 154.659295][ T8681] netlink: 'syz.0.1944': attribute type 10 has an invalid length. [ 154.667200][ T8681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1944'. [ 154.835299][ T8687] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 154.841970][ T8687] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 154.849717][ T8687] vhci_hcd vhci_hcd.0: Device attached [ 154.938278][ T8687] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 154.946233][ T8688] vhci_hcd: connection closed [ 154.946365][ T295] vhci_hcd: stop threads [ 154.955406][ T295] vhci_hcd: release socket [ 154.959837][ T295] vhci_hcd: disconnect device [ 155.386233][ T8727] lo speed is unknown, defaulting to 1000 [ 155.474455][ T8730] netlink: 'syz.1.1964': attribute type 10 has an invalid length. [ 155.482315][ T8730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1964'. [ 155.791857][ T8744] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 155.798478][ T8744] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 155.806261][ T8744] vhci_hcd vhci_hcd.0: Device attached [ 155.966691][ T8745] vhci_hcd: connection closed [ 155.972694][ T31] vhci_hcd: stop threads [ 155.981959][ T31] vhci_hcd: release socket [ 155.986415][ T31] vhci_hcd: disconnect device [ 156.264390][ T8769] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 156.271039][ T8769] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 156.278900][ T8769] vhci_hcd vhci_hcd.0: Device attached [ 156.360995][ T8773] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 156.396318][ T8770] vhci_hcd: connection closed [ 156.396702][ T31] vhci_hcd: stop threads [ 156.405844][ T31] vhci_hcd: release socket [ 156.410276][ T31] vhci_hcd: disconnect device [ 156.423925][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 156.423940][ T29] audit: type=1400 audit(1753110675.061:11713): avc: denied { prog_load } for pid=8772 comm="syz.3.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.449345][ T29] audit: type=1400 audit(1753110675.061:11714): avc: denied { read } for pid=8772 comm="syz.3.1979" dev="nsfs" ino=4026532552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 156.470603][ T29] audit: type=1400 audit(1753110675.061:11715): avc: denied { create } for pid=8772 comm="syz.3.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 156.522647][ T29] audit: type=1400 audit(1753110675.141:11716): avc: denied { map_create } for pid=8760 comm="syz.4.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.542072][ T29] audit: type=1400 audit(1753110675.151:11717): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.566491][ T29] audit: type=1400 audit(1753110675.161:11718): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.590891][ T29] audit: type=1400 audit(1753110675.161:11719): avc: denied { prog_load } for pid=8760 comm="syz.4.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.610161][ T29] audit: type=1400 audit(1753110675.161:11720): avc: denied { read } for pid=8760 comm="syz.4.1976" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 156.631415][ T29] audit: type=1400 audit(1753110675.161:11721): avc: denied { create } for pid=8760 comm="syz.4.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 156.652012][ T29] audit: type=1400 audit(1753110675.161:11722): avc: denied { create } for pid=8760 comm="syz.4.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 156.713478][ T8780] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 156.904339][ T8780] lo speed is unknown, defaulting to 1000 [ 156.992710][ T8783] netlink: 'syz.3.1981': attribute type 10 has an invalid length. [ 157.000641][ T8783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1981'. [ 158.049800][ T8824] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 158.056382][ T8824] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 158.064191][ T8824] vhci_hcd vhci_hcd.0: Device attached [ 158.104684][ T8831] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 158.179716][ T8824] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 158.224557][ T8825] vhci_hcd: connection closed [ 158.224707][ T31] vhci_hcd: stop threads [ 158.233800][ T31] vhci_hcd: release socket [ 158.238330][ T31] vhci_hcd: disconnect device [ 158.252287][ T8831] lo speed is unknown, defaulting to 1000 [ 158.259050][ T8839] netlink: 'syz.1.1999': attribute type 10 has an invalid length. [ 158.266991][ T8839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1999'. [ 159.157090][ T8872] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 159.371615][ T8872] netlink: 'syz.0.2014': attribute type 10 has an invalid length. [ 159.379533][ T8872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2014'. [ 159.393212][ T8873] lo speed is unknown, defaulting to 1000 [ 160.025584][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2022'. [ 161.463158][ T29] kauditd_printk_skb: 708 callbacks suppressed [ 161.463172][ T29] audit: type=1400 audit(1753110680.101:12431): avc: denied { map_create } for pid=8950 comm="syz.4.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.533911][ T29] audit: type=1400 audit(1753110680.131:12432): avc: denied { prog_load } for pid=8950 comm="syz.4.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.553206][ T29] audit: type=1400 audit(1753110680.131:12433): avc: denied { create } for pid=8950 comm="syz.4.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 161.573532][ T29] audit: type=1400 audit(1753110680.131:12434): avc: denied { mounton } for pid=8950 comm="syz.4.2045" path="/394/file0" dev="tmpfs" ino=2155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 161.596493][ T29] audit: type=1400 audit(1753110680.171:12435): avc: denied { map_create } for pid=8941 comm="syz.0.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.615763][ T29] audit: type=1400 audit(1753110680.171:12436): avc: denied { prog_load } for pid=8941 comm="syz.0.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.634929][ T29] audit: type=1400 audit(1753110680.171:12437): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 161.768433][ T3304] audit: audit_backlog=65 > audit_backlog_limit=64 [ 161.775077][ T3304] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 161.782729][ T3304] audit: backlog limit exceeded [ 161.908693][ T8966] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 162.023440][ T8966] lo speed is unknown, defaulting to 1000 [ 162.071911][ T8971] netlink: 'syz.0.2050': attribute type 10 has an invalid length. [ 162.079874][ T8971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2050'. [ 162.838628][ T8991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2059'. [ 162.944326][ T8993] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 162.950919][ T8993] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 162.958749][ T8993] vhci_hcd vhci_hcd.0: Device attached [ 162.985509][ T8993] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 163.026643][ T8994] vhci_hcd: connection closed [ 163.026766][ T3631] vhci_hcd: stop threads [ 163.035799][ T3631] vhci_hcd: release socket [ 163.040227][ T3631] vhci_hcd: disconnect device [ 163.350800][ T9003] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 163.405922][ T9003] lo speed is unknown, defaulting to 1000 [ 163.452489][ T9006] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 163.460477][ T9006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2063'. [ 163.776679][ T9025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2071'. [ 164.076526][ T9038] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 164.148694][ T9038] lo speed is unknown, defaulting to 1000 [ 164.179261][ T9043] netlink: 'syz.3.2076': attribute type 10 has an invalid length. [ 164.187237][ T9043] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2076'. [ 164.203871][ T9042] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 164.210476][ T9042] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 164.218215][ T9042] vhci_hcd vhci_hcd.0: Device attached [ 164.243622][ T9044] vhci_hcd: connection closed [ 164.243964][ T386] vhci_hcd: stop threads [ 164.252990][ T386] vhci_hcd: release socket [ 164.257523][ T386] vhci_hcd: disconnect device [ 164.347383][ T9057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2083'. [ 164.764207][ T9080] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 164.817052][ T9080] lo speed is unknown, defaulting to 1000 [ 164.861857][ T9081] netlink: 'syz.2.2092': attribute type 10 has an invalid length. [ 164.869765][ T9081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2092'. [ 165.151693][ T9101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2099'. [ 165.283395][ T9107] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 165.290154][ T9107] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 165.298049][ T9107] vhci_hcd vhci_hcd.0: Device attached [ 165.307031][ T9107] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 165.314735][ T9108] vhci_hcd: connection closed [ 165.323205][ T386] vhci_hcd: stop threads [ 165.332240][ T386] vhci_hcd: release socket [ 165.336743][ T386] vhci_hcd: disconnect device [ 165.358763][ T9113] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 165.427876][ T9113] lo speed is unknown, defaulting to 1000 [ 165.465554][ T9116] netlink: 'syz.0.2104': attribute type 10 has an invalid length. [ 165.473422][ T9116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2104'. [ 165.860774][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2112'. [ 165.969251][ T9142] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 166.037728][ T9147] lo speed is unknown, defaulting to 1000 [ 166.139840][ T9142] netlink: 'syz.4.2117': attribute type 10 has an invalid length. [ 166.147767][ T9142] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2117'. [ 166.278578][ T9159] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 166.285172][ T9159] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 166.293074][ T9159] vhci_hcd vhci_hcd.0: Device attached [ 166.335004][ T9166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2124'. [ 166.339481][ T9159] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 166.374681][ T9161] vhci_hcd: connection closed [ 166.374824][ T295] vhci_hcd: stop threads [ 166.383854][ T295] vhci_hcd: release socket [ 166.388355][ T295] vhci_hcd: disconnect device [ 166.463913][ T29] kauditd_printk_skb: 1125 callbacks suppressed [ 166.463930][ T29] audit: type=1326 audit(1753110685.101:13563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9171 comm="syz.1.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fa54e9a9 code=0x7ffc0000 [ 166.514961][ T29] audit: type=1400 audit(1753110685.151:13564): avc: denied { create } for pid=9175 comm="syz.4.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 166.564024][ T29] audit: type=1400 audit(1753110685.161:13565): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 166.588347][ T29] audit: type=1400 audit(1753110685.191:13566): avc: denied { bpf } for pid=9177 comm="syz.1.2129" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 166.693553][ T29] audit: type=1400 audit(1753110685.211:13567): avc: denied { create } for pid=9177 comm="syz.1.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 166.714062][ T29] audit: type=1400 audit(1753110685.241:13568): avc: denied { open } for pid=9177 comm="syz.1.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 166.733404][ T29] audit: type=1400 audit(1753110685.241:13569): avc: denied { prog_load } for pid=9177 comm="syz.1.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 166.752784][ T29] audit: type=1400 audit(1753110685.241:13570): avc: denied { write } for pid=9177 comm="syz.1.2129" name="ip6_mr_vif" dev="proc" ino=4026532737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 166.776050][ T29] audit: type=1400 audit(1753110685.241:13571): avc: denied { prog_load } for pid=9177 comm="syz.1.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 166.795202][ T29] audit: type=1400 audit(1753110685.281:13572): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 166.856969][ T9188] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 166.978413][ T9188] lo speed is unknown, defaulting to 1000 [ 167.014539][ T9192] netlink: 'syz.2.2133': attribute type 10 has an invalid length. [ 167.022548][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2133'. [ 167.202889][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2136'. [ 167.564841][ T9226] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 167.587954][ T9226] lo speed is unknown, defaulting to 1000 [ 167.656794][ T9226] netlink: 'syz.0.2147': attribute type 10 has an invalid length. [ 167.664703][ T9226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2147'. [ 167.837218][ T9239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2153'. [ 168.195572][ T9267] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 168.217731][ T9267] lo speed is unknown, defaulting to 1000 [ 168.294689][ T9269] netlink: 'syz.3.2165': attribute type 10 has an invalid length. [ 168.302628][ T9269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2165'. [ 169.361072][ T9304] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 169.492552][ T9305] lo speed is unknown, defaulting to 1000 [ 169.509283][ T9309] netlink: 'syz.2.2177': attribute type 10 has an invalid length. [ 170.834225][ T9343] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 170.840845][ T9343] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.848703][ T9343] vhci_hcd vhci_hcd.0: Device attached [ 170.906346][ T9347] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 170.914691][ T9345] vhci_hcd: connection closed [ 170.925453][ T3631] vhci_hcd: stop threads [ 170.934561][ T3631] vhci_hcd: release socket [ 170.938994][ T3631] vhci_hcd: disconnect device [ 171.533985][ T29] kauditd_printk_skb: 740 callbacks suppressed [ 171.534005][ T29] audit: type=1400 audit(1753110690.011:14313): avc: denied { map_create } for pid=9356 comm="syz.2.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.559598][ T29] audit: type=1400 audit(1753110690.011:14314): avc: denied { prog_load } for pid=9356 comm="syz.2.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.578774][ T29] audit: type=1400 audit(1753110690.021:14315): avc: denied { read write } for pid=9356 comm="syz.2.2194" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 171.603129][ T29] audit: type=1400 audit(1753110690.021:14316): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.627474][ T29] audit: type=1400 audit(1753110690.111:14317): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.777489][ T9369] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 171.784042][ T9369] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 171.791801][ T9369] vhci_hcd vhci_hcd.0: Device attached [ 171.804592][ T29] audit: type=1400 audit(1753110690.271:14318): avc: denied { map_create } for pid=9359 comm="syz.1.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.824023][ T29] audit: type=1400 audit(1753110690.301:14319): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.848403][ T29] audit: type=1400 audit(1753110690.331:14320): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.872893][ T29] audit: type=1400 audit(1753110690.331:14321): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.897437][ T29] audit: type=1400 audit(1753110690.371:14322): avc: denied { map_create } for pid=9362 comm="syz.3.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 171.907270][ T9374] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 171.982973][ T9376] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 171.989531][ T9376] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 171.997311][ T9376] vhci_hcd vhci_hcd.0: Device attached [ 172.022706][ T9380] __nla_validate_parse: 1 callbacks suppressed [ 172.022723][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2201'. [ 172.116086][ T9370] vhci_hcd: connection closed [ 172.116345][ T3631] vhci_hcd: stop threads [ 172.125500][ T3631] vhci_hcd: release socket [ 172.129939][ T3631] vhci_hcd: disconnect device [ 172.229781][ T9377] vhci_hcd: connection closed [ 172.229988][ T3631] vhci_hcd: stop threads [ 172.239016][ T3631] vhci_hcd: release socket [ 172.243449][ T3631] vhci_hcd: disconnect device [ 172.285759][ T3383] usb 6-1: enqueue for inactive port 0 [ 172.508363][ T3383] usb 6-1: enqueue for inactive port 0 [ 173.295088][ T9412] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 173.301655][ T9412] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 173.309386][ T9412] vhci_hcd vhci_hcd.0: Device attached [ 173.373530][ T9419] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 173.428726][ T9413] vhci_hcd: connection closed [ 173.428923][ T386] vhci_hcd: stop threads [ 173.437967][ T386] vhci_hcd: release socket [ 173.442442][ T386] vhci_hcd: disconnect device [ 173.674081][ T3383] usb usb6-port1: attempt power cycle [ 173.935131][ T9437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2225'. [ 174.058444][ T9446] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 174.065059][ T9446] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 174.072768][ T9446] vhci_hcd vhci_hcd.0: Device attached [ 174.126059][ T9453] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 174.144487][ T9447] vhci_hcd: connection closed [ 174.154314][ T386] vhci_hcd: stop threads [ 174.163392][ T386] vhci_hcd: release socket [ 174.167890][ T386] vhci_hcd: disconnect device [ 174.406586][ T9477] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 174.413165][ T9477] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 174.421044][ T9477] vhci_hcd vhci_hcd.0: Device attached [ 174.495001][ T9478] vhci_hcd: connection closed [ 174.503856][ T37] vhci_hcd: stop threads [ 174.512959][ T37] vhci_hcd: release socket [ 174.517516][ T37] vhci_hcd: disconnect device [ 175.271487][ T9515] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 175.278093][ T9515] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 175.286025][ T9515] vhci_hcd vhci_hcd.0: Device attached [ 175.315500][ T9519] netlink: 364 bytes leftover after parsing attributes in process `syz.4.2257'. [ 175.332415][ T9516] vhci_hcd: connection closed [ 175.333444][ T31] vhci_hcd: stop threads [ 175.342487][ T31] vhci_hcd: release socket [ 175.347021][ T31] vhci_hcd: disconnect device [ 175.744127][ T9533] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 175.750731][ T9533] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 175.758556][ T9533] vhci_hcd vhci_hcd.0: Device attached [ 175.825057][ T9533] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 175.832810][ T9534] vhci_hcd: connection closed [ 175.834047][ T295] vhci_hcd: stop threads [ 175.843029][ T295] vhci_hcd: release socket [ 175.847514][ T295] vhci_hcd: disconnect device [ 176.345839][ T9566] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 176.352410][ T9566] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 176.360158][ T9566] vhci_hcd vhci_hcd.0: Device attached [ 176.408458][ T9574] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 176.434299][ T9567] vhci_hcd: connection closed [ 176.434751][ T3631] vhci_hcd: stop threads [ 176.443874][ T3631] vhci_hcd: release socket [ 176.448313][ T3631] vhci_hcd: disconnect device [ 176.645158][ T29] kauditd_printk_skb: 870 callbacks suppressed [ 176.645172][ T29] audit: type=1400 audit(1753110695.291:15193): avc: denied { map_create } for pid=9569 comm="syz.2.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.701221][ T29] audit: type=1400 audit(1753110695.321:15194): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.725595][ T29] audit: type=1400 audit(1753110695.331:15195): avc: denied { prog_load } for pid=9569 comm="syz.2.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.744901][ T29] audit: type=1400 audit(1753110695.331:15196): avc: denied { read } for pid=9569 comm="syz.2.2280" dev="nsfs" ino=4026532861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 176.766275][ T29] audit: type=1400 audit(1753110695.331:15197): avc: denied { create } for pid=9569 comm="syz.2.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 176.786903][ T29] audit: type=1400 audit(1753110695.331:15198): avc: denied { create } for pid=9569 comm="syz.2.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 176.807473][ T29] audit: type=1400 audit(1753110695.331:15199): avc: denied { map_create } for pid=9569 comm="syz.2.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.826873][ T29] audit: type=1400 audit(1753110695.331:15200): avc: denied { prog_load } for pid=9569 comm="syz.2.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.969903][ T9586] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 176.976098][ T29] audit: type=1400 audit(1753110695.431:15201): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.004600][ T29] audit: type=1400 audit(1753110695.431:15202): avc: denied { bpf } for pid=9578 comm="syz.0.2283" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 177.042802][ T9589] lo speed is unknown, defaulting to 1000 [ 177.096487][ T9589] netlink: 'syz.2.2286': attribute type 10 has an invalid length. [ 177.104403][ T9589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2286'. [ 177.701162][ T9639] FAULT_INJECTION: forcing a failure. [ 177.701162][ T9639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.714372][ T9639] CPU: 1 UID: 0 PID: 9639 Comm: syz.4.2306 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 177.714475][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.714488][ T9639] Call Trace: [ 177.714494][ T9639] [ 177.714501][ T9639] __dump_stack+0x1d/0x30 [ 177.714520][ T9639] dump_stack_lvl+0xe8/0x140 [ 177.714543][ T9639] dump_stack+0x15/0x1b [ 177.714564][ T9639] should_fail_ex+0x265/0x280 [ 177.714599][ T9639] should_fail+0xb/0x20 [ 177.714681][ T9639] should_fail_usercopy+0x1a/0x20 [ 177.714720][ T9639] _copy_to_user+0x20/0xa0 [ 177.714745][ T9639] simple_read_from_buffer+0xb5/0x130 [ 177.714794][ T9639] proc_fail_nth_read+0x100/0x140 [ 177.714836][ T9639] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.714908][ T9639] vfs_read+0x19d/0x6f0 [ 177.714989][ T9639] ? __rcu_read_unlock+0x4f/0x70 [ 177.715010][ T9639] ? __fget_files+0x184/0x1c0 [ 177.715034][ T9639] ksys_read+0xda/0x1a0 [ 177.715071][ T9639] __x64_sys_read+0x40/0x50 [ 177.715134][ T9639] x64_sys_call+0x2d77/0x2fb0 [ 177.715164][ T9639] do_syscall_64+0xd2/0x200 [ 177.715221][ T9639] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 177.715247][ T9639] ? clear_bhb_loop+0x40/0x90 [ 177.715269][ T9639] ? clear_bhb_loop+0x40/0x90 [ 177.715362][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.715382][ T9639] RIP: 0033:0x7f060272d3bc [ 177.715421][ T9639] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 177.715443][ T9639] RSP: 002b:00007f0600d97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.715464][ T9639] RAX: ffffffffffffffda RBX: 00007f0602955fa0 RCX: 00007f060272d3bc [ 177.715477][ T9639] RDX: 000000000000000f RSI: 00007f0600d970a0 RDI: 0000000000000003 [ 177.715489][ T9639] RBP: 00007f0600d97090 R08: 0000000000000000 R09: 0000000000000000 [ 177.715502][ T9639] R10: 000000000000006e R11: 0000000000000246 R12: 0000000000000001 [ 177.715514][ T9639] R13: 0000000000000000 R14: 00007f0602955fa0 R15: 00007ffdad6eb7a8 [ 177.715532][ T9639] [ 178.405257][ T9675] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 178.411821][ T9675] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 178.419529][ T9675] vhci_hcd vhci_hcd.0: Device attached [ 178.426561][ T9675] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 178.434203][ T9676] vhci_hcd: connection closed [ 178.434473][ T386] vhci_hcd: stop threads [ 178.443487][ T386] vhci_hcd: release socket [ 178.447970][ T386] vhci_hcd: disconnect device [ 178.969110][ T9686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2325'. [ 179.078423][ T9694] netlink: 364 bytes leftover after parsing attributes in process `syz.1.2327'. [ 179.352591][ T9708] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 179.457068][ T9708] lo speed is unknown, defaulting to 1000 [ 179.510977][ T9714] netlink: 'syz.1.2333': attribute type 10 has an invalid length. [ 179.519073][ T9714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2333'. [ 179.767121][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2338'. [ 180.144006][ T9731] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 180.150577][ T9731] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 180.158424][ T9731] vhci_hcd vhci_hcd.0: Device attached [ 180.288667][ T9731] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 180.296423][ T9732] vhci_hcd: connection closed [ 180.303914][ T386] vhci_hcd: stop threads [ 180.312934][ T386] vhci_hcd: release socket [ 180.317397][ T386] vhci_hcd: disconnect device [ 180.323168][ T9745] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 180.368677][ T9745] lo speed is unknown, defaulting to 1000 [ 180.458096][ T9745] netlink: 'syz.3.2347': attribute type 10 has an invalid length. [ 180.466074][ T9745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2347'. [ 180.476419][ T9756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2352'. [ 180.581962][ T9759] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 180.588538][ T9759] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 180.596309][ T9759] vhci_hcd vhci_hcd.0: Device attached [ 180.674121][ T9763] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 180.682988][ T9760] vhci_hcd: connection closed [ 180.683338][ T386] vhci_hcd: stop threads [ 180.692452][ T386] vhci_hcd: release socket [ 180.696969][ T386] vhci_hcd: disconnect device [ 181.122241][ T9778] netlink: 'syz.4.2359': attribute type 13 has an invalid length. [ 181.160951][ T9778] net_ratelimit: 2999 callbacks suppressed [ 181.160963][ T9778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.352264][ T9786] netlink: 'syz.0.2364': attribute type 13 has an invalid length. [ 181.391528][ T9788] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 181.451068][ T9786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.466573][ T3510] lo speed is unknown, defaulting to 1000 [ 181.501204][ T9798] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 181.507769][ T9798] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 181.515804][ T9798] vhci_hcd vhci_hcd.0: Device attached [ 181.548463][ T9798] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 181.558284][ T9799] vhci_hcd: connection closed [ 181.563872][ T3631] vhci_hcd: stop threads [ 181.573033][ T3631] vhci_hcd: release socket [ 181.577593][ T3631] vhci_hcd: disconnect device [ 181.604007][ T9788] lo speed is unknown, defaulting to 1000 [ 181.655838][ T29] kauditd_printk_skb: 1148 callbacks suppressed [ 181.655857][ T29] audit: type=1400 audit(1753110700.301:16333): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.740294][ T29] audit: type=1400 audit(1753110700.341:16334): avc: denied { map_create } for pid=9810 comm="syz.0.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.759623][ T29] audit: type=1400 audit(1753110700.341:16335): avc: denied { prog_load } for pid=9810 comm="syz.0.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.775657][ T9788] netlink: 'syz.1.2363': attribute type 10 has an invalid length. [ 181.778896][ T29] audit: type=1400 audit(1753110700.341:16336): avc: denied { map_create } for pid=9810 comm="syz.0.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.786729][ T9788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2363'. [ 181.815116][ T29] audit: type=1400 audit(1753110700.341:16337): avc: denied { mounton } for pid=9810 comm="syz.0.2372" path="/486/file0" dev="tmpfs" ino=2631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 181.838025][ T29] audit: type=1400 audit(1753110700.361:16338): avc: denied { open } for pid=9784 comm="syz.1.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 181.857376][ T29] audit: type=1400 audit(1753110700.371:16339): avc: denied { create } for pid=9784 comm="syz.1.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 181.877981][ T29] audit: type=1400 audit(1753110700.371:16340): avc: denied { create } for pid=9784 comm="syz.1.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 181.898535][ T29] audit: type=1400 audit(1753110700.371:16341): avc: denied { create } for pid=9784 comm="syz.1.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 181.919136][ T29] audit: type=1400 audit(1753110700.381:16342): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 182.231023][ T9825] dummy0: left allmulticast mode [ 182.248343][ T9825] bridge0: port 3(dummy0) entered disabled state [ 182.273003][ T9825] bridge_slave_0: left allmulticast mode [ 182.278758][ T9825] bridge_slave_0: left promiscuous mode [ 182.284581][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.326148][ T9825] bridge_slave_1: left allmulticast mode [ 182.331875][ T9825] bridge_slave_1: left promiscuous mode [ 182.337583][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.366093][ T9825] bond0: (slave bond_slave_0): Releasing backup interface [ 182.387381][ T9825] bond0: (slave bond_slave_1): Releasing backup interface [ 182.410000][ T9825] team0: Port device team_slave_0 removed [ 182.426730][ T9825] team0: Port device team_slave_1 removed [ 182.434540][ T9825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.442038][ T9825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.777620][ T9825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.785139][ T9825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.978091][ T9852] FAULT_INJECTION: forcing a failure. [ 182.978091][ T9852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.991406][ T9852] CPU: 0 UID: 0 PID: 9852 Comm: syz.1.2386 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 182.991439][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.991455][ T9852] Call Trace: [ 182.991464][ T9852] [ 182.991473][ T9852] __dump_stack+0x1d/0x30 [ 182.991503][ T9852] dump_stack_lvl+0xe8/0x140 [ 182.991593][ T9852] dump_stack+0x15/0x1b [ 182.991644][ T9852] should_fail_ex+0x265/0x280 [ 182.991682][ T9852] should_fail+0xb/0x20 [ 182.991712][ T9852] should_fail_usercopy+0x1a/0x20 [ 182.991789][ T9852] _copy_from_user+0x1c/0xb0 [ 182.991814][ T9852] io_submit_one+0x52/0x11d0 [ 182.991846][ T9852] __se_sys_io_submit+0xfb/0x280 [ 182.991884][ T9852] __x64_sys_io_submit+0x43/0x50 [ 182.991962][ T9852] x64_sys_call+0xfc4/0x2fb0 [ 182.991983][ T9852] do_syscall_64+0xd2/0x200 [ 182.992015][ T9852] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 182.992049][ T9852] ? clear_bhb_loop+0x40/0x90 [ 182.992136][ T9852] ? clear_bhb_loop+0x40/0x90 [ 182.992164][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.992256][ T9852] RIP: 0033:0x7fc4fa54e9a9 [ 182.992281][ T9852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.992301][ T9852] RSP: 002b:00007fc4f8baf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 182.992326][ T9852] RAX: ffffffffffffffda RBX: 00007fc4fa775fa0 RCX: 00007fc4fa54e9a9 [ 182.992404][ T9852] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 00007fc4fb2b1000 [ 182.992419][ T9852] RBP: 00007fc4f8baf090 R08: 0000000000000000 R09: 0000000000000000 [ 182.992442][ T9852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.992456][ T9852] R13: 0000000000000000 R14: 00007fc4fa775fa0 R15: 00007ffc6b375678 [ 182.992478][ T9852] [ 183.202744][ T9851] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 183.209314][ T9851] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.217040][ T9851] vhci_hcd vhci_hcd.0: Device attached [ 183.230987][ T9851] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 183.240152][ T9854] vhci_hcd: connection closed [ 183.240321][ T31] vhci_hcd: stop threads [ 183.249392][ T31] vhci_hcd: release socket [ 183.253872][ T31] vhci_hcd: disconnect device [ 183.365179][ T9867] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 183.371765][ T9867] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.379549][ T9867] vhci_hcd vhci_hcd.0: Device attached [ 183.408372][ T9867] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 183.417408][ T9868] vhci_hcd: connection closed [ 183.417690][ T295] vhci_hcd: stop threads [ 183.426688][ T295] vhci_hcd: release socket [ 183.431139][ T295] vhci_hcd: disconnect device [ 183.636851][ T9878] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 183.711141][ T9878] lo speed is unknown, defaulting to 1000 [ 183.746662][ T9879] netlink: 'syz.1.2395': attribute type 10 has an invalid length. [ 183.754671][ T9879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2395'. [ 183.997756][ T9889] dummy0: left allmulticast mode [ 184.002999][ T9889] bridge0: port 3(dummy0) entered disabled state [ 184.018221][ T9889] bridge_slave_0: left allmulticast mode [ 184.024119][ T9889] bridge_slave_0: left promiscuous mode [ 184.029867][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.041457][ T9889] bridge_slave_1: left allmulticast mode [ 184.047220][ T9889] bridge_slave_1: left promiscuous mode [ 184.052997][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.065028][ T9889] bond0: (slave bond_slave_0): Releasing backup interface [ 184.075846][ T9889] bond0: (slave bond_slave_1): Releasing backup interface [ 184.087912][ T9889] team_slave_0: left promiscuous mode [ 184.095299][ T9889] team0: Port device team_slave_0 removed [ 184.102813][ T9889] team_slave_1: left promiscuous mode [ 184.110263][ T9889] team0: Port device team_slave_1 removed [ 184.118010][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.125625][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.135796][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.143254][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.370127][ T9914] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 184.376792][ T9914] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 184.384520][ T9914] vhci_hcd vhci_hcd.0: Device attached [ 184.411927][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2404'. [ 184.440069][ T9921] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 184.453886][ T9915] vhci_hcd: connection closed [ 184.461401][ T295] vhci_hcd: stop threads [ 184.470419][ T295] vhci_hcd: release socket [ 184.474923][ T295] vhci_hcd: disconnect device [ 184.531493][ T9921] lo speed is unknown, defaulting to 1000 [ 184.578410][ T9925] netlink: 'syz.4.2408': attribute type 10 has an invalid length. [ 184.586355][ T9925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2408'. [ 184.691658][ T9932] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 184.698222][ T9932] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 184.705965][ T9932] vhci_hcd vhci_hcd.0: Device attached [ 184.725348][ T9932] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 184.741620][ T9933] vhci_hcd: connection closed [ 184.741903][ T386] vhci_hcd: stop threads [ 184.751033][ T386] vhci_hcd: release socket [ 184.755545][ T386] vhci_hcd: disconnect device [ 184.990450][ T9952] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2419'. [ 185.026793][ T9952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2419'. [ 185.096466][ T9954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2420'. [ 185.232766][ T9963] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 185.293270][ T9963] lo speed is unknown, defaulting to 1000 [ 185.381746][ T9963] netlink: 'syz.0.2424': attribute type 10 has an invalid length. [ 185.389673][ T9963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2424'. [ 185.847202][ T9984] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 185.853927][ T9984] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 185.861818][ T9984] vhci_hcd vhci_hcd.0: Device attached [ 185.869741][ T9989] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 185.946971][ T9986] vhci_hcd: connection closed [ 185.947200][ T386] vhci_hcd: stop threads [ 185.956249][ T386] vhci_hcd: release socket [ 185.960685][ T386] vhci_hcd: disconnect device [ 186.245170][T10005] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 186.431283][T10005] lo speed is unknown, defaulting to 1000 [ 186.460644][T10013] netlink: 'syz.4.2437': attribute type 10 has an invalid length. [ 186.468644][T10013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2437'. [ 186.544001][T10021] FAULT_INJECTION: forcing a failure. [ 186.544001][T10021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.557159][T10021] CPU: 0 UID: 0 PID: 10021 Comm: syz.1.2444 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 186.557221][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.557312][T10021] Call Trace: [ 186.557319][T10021] [ 186.557326][T10021] __dump_stack+0x1d/0x30 [ 186.557350][T10021] dump_stack_lvl+0xe8/0x140 [ 186.557374][T10021] dump_stack+0x15/0x1b [ 186.557389][T10021] should_fail_ex+0x265/0x280 [ 186.557418][T10021] should_fail+0xb/0x20 [ 186.557474][T10021] should_fail_usercopy+0x1a/0x20 [ 186.557585][T10021] _copy_from_user+0x1c/0xb0 [ 186.557609][T10021] kstrtouint_from_user+0x69/0xf0 [ 186.557696][T10021] ? 0xffffffff81000000 [ 186.557712][T10021] ? selinux_file_permission+0x1e4/0x320 [ 186.557793][T10021] proc_fail_nth_write+0x50/0x160 [ 186.557832][T10021] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 186.557871][T10021] vfs_write+0x269/0x8e0 [ 186.557909][T10021] ? vfs_read+0x47f/0x6f0 [ 186.558024][T10021] ? __rcu_read_unlock+0x4f/0x70 [ 186.558048][T10021] ? __fget_files+0x184/0x1c0 [ 186.558072][T10021] ksys_write+0xda/0x1a0 [ 186.558109][T10021] __x64_sys_write+0x40/0x50 [ 186.558210][T10021] x64_sys_call+0x2cdd/0x2fb0 [ 186.558236][T10021] do_syscall_64+0xd2/0x200 [ 186.558260][T10021] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 186.558335][T10021] ? clear_bhb_loop+0x40/0x90 [ 186.558361][T10021] ? clear_bhb_loop+0x40/0x90 [ 186.558460][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.558485][T10021] RIP: 0033:0x7fc4fa54d45f [ 186.558503][T10021] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 186.558550][T10021] RSP: 002b:00007fc4f8baf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 186.558567][T10021] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4fa54d45f [ 186.558651][T10021] RDX: 0000000000000001 RSI: 00007fc4f8baf0a0 RDI: 0000000000000003 [ 186.558666][T10021] RBP: 00007fc4f8baf090 R08: 0000000000000000 R09: 0000000000000000 [ 186.558684][T10021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 186.558766][T10021] R13: 0000000000000000 R14: 00007fc4fa775fa0 R15: 00007ffc6b375678 [ 186.558788][T10021] [ 186.790927][ T29] kauditd_printk_skb: 809 callbacks suppressed [ 186.790941][ T29] audit: type=1400 audit(1753110705.431:17152): avc: denied { map_create } for pid=10018 comm="syz.3.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 186.843656][ T29] audit: type=1400 audit(1753110705.461:17153): avc: denied { prog_load } for pid=10018 comm="syz.3.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 186.863127][ T29] audit: type=1400 audit(1753110705.461:17154): avc: denied { prog_load } for pid=10018 comm="syz.3.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 186.882444][ T29] audit: type=1400 audit(1753110705.461:17155): avc: denied { bpf } for pid=10018 comm="syz.3.2443" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 186.903313][ T29] audit: type=1400 audit(1753110705.461:17156): avc: denied { prog_load } for pid=10018 comm="syz.3.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 186.922624][ T29] audit: type=1400 audit(1753110705.461:17157): avc: denied { append } for pid=10018 comm="syz.3.2443" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 186.945805][ T29] audit: type=1400 audit(1753110705.481:17158): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 187.191404][ T29] audit: type=1400 audit(1753110705.511:17159): avc: denied { map_create } for pid=10024 comm="syz.1.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 187.210795][ T29] audit: type=1400 audit(1753110705.531:17160): avc: denied { allowed } for pid=10018 comm="syz.3.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 187.230364][ T29] audit: type=1400 audit(1753110705.531:17161): avc: denied { create } for pid=10018 comm="syz.3.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 187.769512][T10063] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 187.899611][T10065] lo speed is unknown, defaulting to 1000 [ 187.989407][T10063] netlink: 'syz.1.2460': attribute type 10 has an invalid length. [ 187.997307][T10063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2460'. [ 188.073111][T10072] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 188.116649][T10073] FAULT_INJECTION: forcing a failure. [ 188.116649][T10073] name failslab, interval 1, probability 0, space 0, times 0 [ 188.128837][T10063] bridge0: port 1(dummy0) entered blocking state [ 188.129474][T10073] CPU: 1 UID: 0 PID: 10073 Comm: syz.4.2458 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 188.129514][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.129532][T10073] Call Trace: [ 188.129540][T10073] [ 188.129552][T10073] __dump_stack+0x1d/0x30 [ 188.129581][T10073] dump_stack_lvl+0xe8/0x140 [ 188.129608][T10073] dump_stack+0x15/0x1b [ 188.129695][T10073] should_fail_ex+0x265/0x280 [ 188.129736][T10073] should_failslab+0x8c/0xb0 [ 188.129765][T10073] kmem_cache_alloc_noprof+0x50/0x310 [ 188.129825][T10073] ? getname_flags+0x80/0x3b0 [ 188.129899][T10073] getname_flags+0x80/0x3b0 [ 188.129928][T10073] __x64_sys_symlink+0x33/0x60 [ 188.129978][T10073] x64_sys_call+0x2d8d/0x2fb0 [ 188.130079][T10073] do_syscall_64+0xd2/0x200 [ 188.130105][T10073] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.130142][T10073] ? clear_bhb_loop+0x40/0x90 [ 188.130171][T10073] ? clear_bhb_loop+0x40/0x90 [ 188.130200][T10073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.130267][T10073] RIP: 0033:0x7f060272e9a9 [ 188.130289][T10073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.130312][T10073] RSP: 002b:00007f0600d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 188.130339][T10073] RAX: ffffffffffffffda RBX: 00007f0602955fa0 RCX: 00007f060272e9a9 [ 188.130426][T10073] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000200000000340 [ 188.130444][T10073] RBP: 00007f0600d97090 R08: 0000000000000000 R09: 0000000000000000 [ 188.130461][T10073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.130478][T10073] R13: 0000000000000000 R14: 00007f0602955fa0 R15: 00007ffdad6eb7a8 [ 188.130501][T10073] [ 188.311747][T10063] bridge0: port 1(dummy0) entered disabled state [ 188.341636][T10063] dummy0: entered allmulticast mode [ 188.358739][T10063] bridge0: port 1(dummy0) entered blocking state [ 188.365303][T10063] bridge0: port 1(dummy0) entered forwarding state [ 188.475906][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'. [ 188.662679][T10097] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 188.669261][T10097] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 188.677136][T10097] vhci_hcd vhci_hcd.0: Device attached [ 188.779228][T10101] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 188.803857][T10098] vhci_hcd: connection closed [ 188.814788][ T295] vhci_hcd: stop threads [ 188.823857][ T295] vhci_hcd: release socket [ 188.828347][ T295] vhci_hcd: disconnect device [ 189.447280][T10121] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 189.620126][T10122] lo speed is unknown, defaulting to 1000 [ 189.639589][T10121] netlink: 'syz.0.2478': attribute type 10 has an invalid length. [ 189.647522][T10121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2478'. [ 189.988428][T10136] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 189.994988][T10136] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 190.002720][T10136] vhci_hcd vhci_hcd.0: Device attached [ 190.053114][T10142] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 190.097395][T10138] vhci_hcd: connection closed [ 190.103890][ T295] vhci_hcd: stop threads [ 190.112887][ T295] vhci_hcd: release socket [ 190.117364][ T295] vhci_hcd: disconnect device [ 190.170684][T10148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2486'. [ 191.508314][T10196] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 191.514873][T10196] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 191.522626][T10196] vhci_hcd vhci_hcd.0: Device attached [ 191.536123][T10199] vhci_hcd: connection closed [ 191.536460][ T31] vhci_hcd: stop threads [ 191.545861][ T31] vhci_hcd: release socket [ 191.550283][ T31] vhci_hcd: disconnect device [ 191.774463][T10202] lo speed is unknown, defaulting to 1000 [ 191.860623][ T29] kauditd_printk_skb: 780 callbacks suppressed [ 191.860641][ T29] audit: type=1400 audit(1753110710.501:17942): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.891661][ T29] audit: type=1400 audit(1753110710.511:17943): avc: denied { map_create } for pid=10205 comm="syz.3.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 191.911111][ T29] audit: type=1400 audit(1753110710.511:17944): avc: denied { prog_load } for pid=10205 comm="syz.3.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 191.930697][ T29] audit: type=1400 audit(1753110710.511:17945): avc: denied { read write } for pid=10205 comm="syz.3.2507" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.955218][ T29] audit: type=1400 audit(1753110710.521:17946): avc: denied { allowed } for pid=10205 comm="syz.3.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 191.975081][ T29] audit: type=1400 audit(1753110710.531:17947): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 192.008279][ T29] audit: type=1400 audit(1753110710.541:17948): avc: denied { prog_load } for pid=10207 comm="syz.3.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 192.027608][ T29] audit: type=1400 audit(1753110710.541:17949): avc: denied { map_create } for pid=10207 comm="syz.3.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 192.046982][ T29] audit: type=1400 audit(1753110710.551:17950): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 192.071340][ T29] audit: type=1400 audit(1753110710.561:17951): avc: denied { prog_load } for pid=10209 comm="syz.3.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 193.063378][T10249] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 193.069961][T10249] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 193.077744][T10249] vhci_hcd vhci_hcd.0: Device attached [ 193.095190][T10249] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 193.102929][T10250] vhci_hcd: connection closed [ 193.104106][ T31] vhci_hcd: stop threads [ 193.113123][ T31] vhci_hcd: release socket [ 193.117628][ T31] vhci_hcd: disconnect device [ 193.413744][T10264] Cannot find add_set index 0 as target [ 193.661449][T10278] xt_SECMARK: invalid mode: 2 [ 193.715716][T10284] FAULT_INJECTION: forcing a failure. [ 193.715716][T10284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.728925][T10284] CPU: 0 UID: 0 PID: 10284 Comm: syz.1.2537 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 193.728951][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.729060][T10284] Call Trace: [ 193.729066][T10284] [ 193.729073][T10284] __dump_stack+0x1d/0x30 [ 193.729097][T10284] dump_stack_lvl+0xe8/0x140 [ 193.729121][T10284] dump_stack+0x15/0x1b [ 193.729140][T10284] should_fail_ex+0x265/0x280 [ 193.729170][T10284] should_fail+0xb/0x20 [ 193.729240][T10284] should_fail_usercopy+0x1a/0x20 [ 193.729292][T10284] _copy_from_user+0x1c/0xb0 [ 193.729311][T10284] __se_sys_shmctl+0x106/0x420 [ 193.729383][T10284] ? __fget_files+0x184/0x1c0 [ 193.729405][T10284] __x64_sys_shmctl+0x43/0x50 [ 193.729514][T10284] x64_sys_call+0x157e/0x2fb0 [ 193.729539][T10284] do_syscall_64+0xd2/0x200 [ 193.729558][T10284] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 193.729596][T10284] ? clear_bhb_loop+0x40/0x90 [ 193.729675][T10284] ? clear_bhb_loop+0x40/0x90 [ 193.729749][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.729774][T10284] RIP: 0033:0x7fc4fa54e9a9 [ 193.729792][T10284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.729871][T10284] RSP: 002b:00007fc4f8baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 193.729906][T10284] RAX: ffffffffffffffda RBX: 00007fc4fa775fa0 RCX: 00007fc4fa54e9a9 [ 193.729920][T10284] RDX: 0000200000001000 RSI: 0000000000000001 RDI: 0000000000000000 [ 193.729935][T10284] RBP: 00007fc4f8baf090 R08: 0000000000000000 R09: 0000000000000000 [ 193.729949][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.729968][T10284] R13: 0000000000000001 R14: 00007fc4fa775fa0 R15: 00007ffc6b375678 [ 193.729992][T10284] [ 194.358072][T10306] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 194.364628][T10306] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 194.372403][T10306] vhci_hcd vhci_hcd.0: Device attached [ 194.386093][T10306] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 194.399781][T10307] vhci_hcd: connection closed [ 194.401868][ T3631] vhci_hcd: stop threads [ 194.410889][ T3631] vhci_hcd: release socket [ 194.415358][ T3631] vhci_hcd: disconnect device [ 194.946047][T10318] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 195.063175][T10318] lo speed is unknown, defaulting to 1000 [ 195.070110][T10332] netlink: 'syz.4.2549': attribute type 10 has an invalid length. [ 195.078162][T10332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2549'. [ 195.240572][T10346] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 195.247209][T10346] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 195.255016][T10346] vhci_hcd vhci_hcd.0: Device attached [ 195.284456][T10346] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 195.306477][T10347] vhci_hcd: connection closed [ 195.306697][ T31] vhci_hcd: stop threads [ 195.315767][ T31] vhci_hcd: release socket [ 195.320259][ T31] vhci_hcd: disconnect device [ 195.454628][T10352] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 195.540491][T10352] lo speed is unknown, defaulting to 1000 [ 195.610330][T10354] netlink: 'syz.0.2561': attribute type 10 has an invalid length. [ 195.618282][T10354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2561'. [ 196.187801][T10374] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 196.351483][T10378] lo speed is unknown, defaulting to 1000 [ 196.357684][T10374] netlink: 'syz.3.2568': attribute type 10 has an invalid length. [ 196.365606][T10374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2568'. [ 196.461724][T10374] bridge0: port 1(dummy0) entered blocking state [ 196.468351][T10374] bridge0: port 1(dummy0) entered disabled state [ 196.557549][T10374] dummy0: entered allmulticast mode [ 196.844989][T10374] bridge0: port 1(dummy0) entered blocking state [ 196.851481][T10374] bridge0: port 1(dummy0) entered forwarding state [ 196.863847][ T29] kauditd_printk_skb: 815 callbacks suppressed [ 196.863863][ T29] audit: type=1326 audit(1753110715.501:18767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060272e9a9 code=0x7ffc0000 [ 196.893878][ T29] audit: type=1326 audit(1753110715.501:18768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060272e9a9 code=0x7ffc0000 [ 196.917519][ T29] audit: type=1326 audit(1753110715.501:18769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f060272e9a9 code=0x7ffc0000 [ 196.941148][ T29] audit: type=1400 audit(1753110715.501:18770): avc: denied { prog_load } for pid=10395 comm="syz.4.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 196.960425][ T29] audit: type=1326 audit(1753110715.501:18771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060272e9a9 code=0x7ffc0000 [ 196.984104][ T29] audit: type=1326 audit(1753110715.501:18772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060272e9a9 code=0x7ffc0000 [ 197.007734][ T29] audit: type=1326 audit(1753110715.501:18773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f060272e9a9 code=0x7ffc0000 [ 197.031380][ T29] audit: type=1400 audit(1753110715.501:18774): avc: denied { prog_load } for pid=10395 comm="syz.4.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 197.050725][ T29] audit: type=1326 audit(1753110715.501:18775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060272e9a9 code=0x7ffc0000 [ 197.307139][ T29] audit: type=1326 audit(1753110715.501:18776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.4.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f060272e9a9 code=0x7ffc0000 [ 197.538353][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2579'. [ 197.675487][T10413] ip6t_rpfilter: unknown options [ 198.787092][T10456] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 199.820950][T10487] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 199.885640][T10487] lo speed is unknown, defaulting to 1000 [ 199.931406][T10490] netlink: 'syz.2.2607': attribute type 10 has an invalid length. [ 199.939312][T10490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2607'. [ 200.062313][T10496] FAULT_INJECTION: forcing a failure. [ 200.062313][T10496] name failslab, interval 1, probability 0, space 0, times 0 [ 200.075126][T10496] CPU: 0 UID: 0 PID: 10496 Comm: syz.0.2610 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 200.075154][T10496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.075169][T10496] Call Trace: [ 200.075176][T10496] [ 200.075185][T10496] __dump_stack+0x1d/0x30 [ 200.075211][T10496] dump_stack_lvl+0xe8/0x140 [ 200.075244][T10496] dump_stack+0x15/0x1b [ 200.075264][T10496] should_fail_ex+0x265/0x280 [ 200.075309][T10496] should_failslab+0x8c/0xb0 [ 200.075336][T10496] kmem_cache_alloc_node_noprof+0x57/0x320 [ 200.075369][T10496] ? dup_task_struct+0x70/0x6a0 [ 200.075427][T10496] dup_task_struct+0x70/0x6a0 [ 200.075449][T10496] ? _parse_integer+0x27/0x40 [ 200.075482][T10496] copy_process+0x399/0x1f90 [ 200.075653][T10496] ? kstrtouint+0x76/0xc0 [ 200.075683][T10496] ? kstrtouint_from_user+0x9f/0xf0 [ 200.075717][T10496] ? __rcu_read_unlock+0x4f/0x70 [ 200.075745][T10496] ? 0xffffffffff600000 [ 200.075821][T10496] kernel_clone+0x16c/0x5b0 [ 200.075850][T10496] ? vfs_write+0x75e/0x8e0 [ 200.075911][T10496] ? 0xffffffffff600000 [ 200.075926][T10496] __x64_sys_clone+0xe6/0x120 [ 200.076032][T10496] ? 0xffffffffff600000 [ 200.076050][T10496] x64_sys_call+0x2c59/0x2fb0 [ 200.076119][T10496] do_syscall_64+0xd2/0x200 [ 200.076141][T10496] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.076168][T10496] ? clear_bhb_loop+0x40/0x90 [ 200.076280][T10496] ? clear_bhb_loop+0x40/0x90 [ 200.076308][T10496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.076328][T10496] RIP: 0033:0x7fcb0487e9a9 [ 200.076344][T10496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.076368][T10496] RSP: 002b:00007fcb02ee6fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 200.076390][T10496] RAX: ffffffffffffffda RBX: 00007fcb04aa5fa0 RCX: 00007fcb0487e9a9 [ 200.076435][T10496] RDX: 0000000000000000 RSI: 0000000000000500 RDI: 000000002c9a4080 [ 200.076447][T10496] RBP: 00007fcb02ee7090 R08: ffffffffff600000 R09: ffffffffff600000 [ 200.076458][T10496] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 200.076469][T10496] R13: 0000000000000000 R14: 00007fcb04aa5fa0 R15: 00007ffc144ccd18 [ 200.076511][T10496] ? 0xffffffffff600000 [ 200.076522][T10496] ? 0xffffffffff600000 [ 200.076536][T10496] [ 200.434208][T10504] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2614'. [ 200.444334][T10503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10503 comm=syz.3.2614 [ 200.548532][T10514] bridge: RTM_NEWNEIGH with invalid ether address [ 200.715699][T10518] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 200.722371][T10518] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 200.730221][T10518] vhci_hcd vhci_hcd.0: Device attached [ 200.782061][T10518] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 200.826840][T10520] vhci_hcd: connection closed [ 200.826980][ T295] vhci_hcd: stop threads [ 200.836037][ T295] vhci_hcd: release socket [ 200.840498][ T295] vhci_hcd: disconnect device [ 200.960393][T10532] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 200.998658][T10532] lo speed is unknown, defaulting to 1000 [ 201.044394][T10540] netlink: 'syz.0.2623': attribute type 10 has an invalid length. [ 201.052245][T10540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2623'. [ 201.227310][T10555] bridge: RTM_NEWNEIGH with invalid ether address [ 201.286550][T10552] bond2: entered promiscuous mode [ 201.291690][T10552] bond2: entered allmulticast mode [ 201.375291][T10552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.405932][T10552] bond2 (unregistering): Released all slaves [ 201.565874][T10578] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 201.626002][T10578] lo speed is unknown, defaulting to 1000 [ 201.633900][T10574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.702436][T10579] netlink: 'syz.4.2640': attribute type 10 has an invalid length. [ 201.710348][T10579] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2640'. [ 201.907529][ T29] kauditd_printk_skb: 766 callbacks suppressed [ 201.907555][ T29] audit: type=1400 audit(1753110720.551:19543): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.081828][ T29] audit: type=1400 audit(1753110720.721:19544): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.186566][ T29] audit: type=1400 audit(1753110720.801:19545): avc: denied { read write } for pid=10587 comm="syz.4.2644" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.210926][ T29] audit: type=1400 audit(1753110720.801:19546): avc: denied { read write } for pid=10568 comm="syz.3.2637" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 202.235661][ T29] audit: type=1400 audit(1753110720.811:19547): avc: denied { name_bind } for pid=10587 comm="syz.4.2644" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 202.257625][ T29] audit: type=1400 audit(1753110720.821:19548): avc: denied { map_create } for pid=10589 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 202.277146][ T29] audit: type=1400 audit(1753110720.821:19549): avc: denied { prog_load } for pid=10589 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 202.296482][ T29] audit: type=1400 audit(1753110720.821:19550): avc: denied { allowed } for pid=10589 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 202.316049][ T29] audit: type=1400 audit(1753110720.821:19551): avc: denied { prog_load } for pid=10589 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 202.335345][ T29] audit: type=1400 audit(1753110720.821:19552): avc: denied { read } for pid=10589 comm="+}[@" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 202.386551][T10598] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 202.393126][T10598] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.401135][T10598] vhci_hcd vhci_hcd.0: Device attached [ 202.458872][T10600] vhci_hcd: connection closed [ 202.459045][ T37] vhci_hcd: stop threads [ 202.468128][ T37] vhci_hcd: release socket [ 202.472560][ T37] vhci_hcd: disconnect device [ 202.474425][T10596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10596 comm=syz.1.2646 [ 202.524507][T10608] FAULT_INJECTION: forcing a failure. [ 202.524507][T10608] name failslab, interval 1, probability 0, space 0, times 0 [ 202.537226][T10608] CPU: 0 UID: 0 PID: 10608 Comm: syz.0.2650 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 202.537291][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.537307][T10608] Call Trace: [ 202.537314][T10608] [ 202.537322][T10608] __dump_stack+0x1d/0x30 [ 202.537342][T10608] dump_stack_lvl+0xe8/0x140 [ 202.537360][T10608] dump_stack+0x15/0x1b [ 202.537471][T10608] should_fail_ex+0x265/0x280 [ 202.537506][T10608] ? __se_sys_memfd_create+0x1cc/0x590 [ 202.537535][T10608] should_failslab+0x8c/0xb0 [ 202.537556][T10608] __kmalloc_cache_noprof+0x4c/0x320 [ 202.537599][T10608] ? fput+0x8f/0xc0 [ 202.537629][T10608] __se_sys_memfd_create+0x1cc/0x590 [ 202.537669][T10608] __x64_sys_memfd_create+0x31/0x40 [ 202.537697][T10608] x64_sys_call+0x122f/0x2fb0 [ 202.537723][T10608] do_syscall_64+0xd2/0x200 [ 202.537784][T10608] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 202.537816][T10608] ? clear_bhb_loop+0x40/0x90 [ 202.537835][T10608] ? clear_bhb_loop+0x40/0x90 [ 202.537924][T10608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.537943][T10608] RIP: 0033:0x7fcb0487e9a9 [ 202.537959][T10608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.538047][T10608] RSP: 002b:00007fcb02ee6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 202.538065][T10608] RAX: ffffffffffffffda RBX: 00000000000005fd RCX: 00007fcb0487e9a9 [ 202.538080][T10608] RDX: 00007fcb02ee6ef0 RSI: 0000000000000000 RDI: 00007fcb049016fc [ 202.538095][T10608] RBP: 0000200000001200 R08: 00007fcb02ee6bb7 R09: 00007fcb02ee6e40 [ 202.538110][T10608] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 202.538125][T10608] R13: 00007fcb02ee6ef0 R14: 00007fcb02ee6eb0 R15: 0000200000000280 [ 202.538147][T10608] [ 202.772630][T10619] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 202.799293][T10619] lo speed is unknown, defaulting to 1000 [ 202.886525][T10619] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 202.894425][T10619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2654'. [ 203.168665][T10646] FAULT_INJECTION: forcing a failure. [ 203.168665][T10646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.181952][T10646] CPU: 0 UID: 0 PID: 10646 Comm: syz.2.2663 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 203.181979][T10646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.181990][T10646] Call Trace: [ 203.181997][T10646] [ 203.182004][T10646] __dump_stack+0x1d/0x30 [ 203.182090][T10646] dump_stack_lvl+0xe8/0x140 [ 203.182109][T10646] dump_stack+0x15/0x1b [ 203.182127][T10646] should_fail_ex+0x265/0x280 [ 203.182218][T10646] should_fail+0xb/0x20 [ 203.182251][T10646] should_fail_usercopy+0x1a/0x20 [ 203.182367][T10646] _copy_to_user+0x20/0xa0 [ 203.182392][T10646] simple_read_from_buffer+0xb5/0x130 [ 203.182428][T10646] proc_fail_nth_read+0x100/0x140 [ 203.182535][T10646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.182573][T10646] vfs_read+0x19d/0x6f0 [ 203.182608][T10646] ? __rcu_read_unlock+0x4f/0x70 [ 203.182643][T10646] ? __fget_files+0x184/0x1c0 [ 203.182680][T10646] ksys_read+0xda/0x1a0 [ 203.182715][T10646] __x64_sys_read+0x40/0x50 [ 203.182829][T10646] x64_sys_call+0x2d77/0x2fb0 [ 203.182855][T10646] do_syscall_64+0xd2/0x200 [ 203.182878][T10646] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.182906][T10646] ? clear_bhb_loop+0x40/0x90 [ 203.182931][T10646] ? clear_bhb_loop+0x40/0x90 [ 203.182960][T10646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.182986][T10646] RIP: 0033:0x7f9f64ead3bc [ 203.183004][T10646] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 203.183026][T10646] RSP: 002b:00007f9f6350f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.183070][T10646] RAX: ffffffffffffffda RBX: 00007f9f650d5fa0 RCX: 00007f9f64ead3bc [ 203.183083][T10646] RDX: 000000000000000f RSI: 00007f9f6350f0a0 RDI: 0000000000000003 [ 203.183099][T10646] RBP: 00007f9f6350f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.183114][T10646] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 203.183125][T10646] R13: 0000000000000000 R14: 00007f9f650d5fa0 R15: 00007ffe2cad5b28 [ 203.183142][T10646] [ 203.671496][T10662] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 203.714336][T10662] lo speed is unknown, defaulting to 1000 [ 203.816544][T10666] netlink: 'syz.3.2669': attribute type 10 has an invalid length. [ 203.824437][T10666] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2669'. [ 204.066687][T10683] FAULT_INJECTION: forcing a failure. [ 204.066687][T10683] name failslab, interval 1, probability 0, space 0, times 0 [ 204.079512][T10683] CPU: 1 UID: 0 PID: 10683 Comm: syz.1.2675 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 204.079578][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.079658][T10683] Call Trace: [ 204.079666][T10683] [ 204.079674][T10683] __dump_stack+0x1d/0x30 [ 204.079761][T10683] dump_stack_lvl+0xe8/0x140 [ 204.079786][T10683] dump_stack+0x15/0x1b [ 204.079807][T10683] should_fail_ex+0x265/0x280 [ 204.079904][T10683] ? __se_sys_memfd_create+0x1cc/0x590 [ 204.079964][T10683] should_failslab+0x8c/0xb0 [ 204.079985][T10683] __kmalloc_cache_noprof+0x4c/0x320 [ 204.080013][T10683] ? fput+0x8f/0xc0 [ 204.080051][T10683] __se_sys_memfd_create+0x1cc/0x590 [ 204.080091][T10683] __x64_sys_memfd_create+0x31/0x40 [ 204.080124][T10683] x64_sys_call+0x122f/0x2fb0 [ 204.080145][T10683] do_syscall_64+0xd2/0x200 [ 204.080186][T10683] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 204.080218][T10683] ? clear_bhb_loop+0x40/0x90 [ 204.080281][T10683] ? clear_bhb_loop+0x40/0x90 [ 204.080375][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.080397][T10683] RIP: 0033:0x7fc4fa54e9a9 [ 204.080412][T10683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.080430][T10683] RSP: 002b:00007fc4f8baee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 204.080486][T10683] RAX: ffffffffffffffda RBX: 0000000000000533 RCX: 00007fc4fa54e9a9 [ 204.080502][T10683] RDX: 00007fc4f8baeef0 RSI: 0000000000000000 RDI: 00007fc4fa5d16fc [ 204.080596][T10683] RBP: 0000200000000e40 R08: 00007fc4f8baebb7 R09: 00007fc4f8baee40 [ 204.080612][T10683] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 204.080627][T10683] R13: 00007fc4f8baeef0 R14: 00007fc4f8baeeb0 R15: 0000200000000000 [ 204.080646][T10683] [ 204.441930][T10691] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 204.448494][T10691] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 204.456324][T10691] vhci_hcd vhci_hcd.0: Device attached [ 204.480270][T10694] Cannot find add_set index 0 as target [ 204.525704][T10692] vhci_hcd: connection closed [ 204.527895][ T295] vhci_hcd: stop threads [ 204.536946][ T295] vhci_hcd: release socket [ 204.541406][ T295] vhci_hcd: disconnect device [ 204.585406][T10697] netlink: 'syz.2.2678': attribute type 39 has an invalid length. [ 206.754410][T10764] FAULT_INJECTION: forcing a failure. [ 206.754410][T10764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.767545][T10764] CPU: 1 UID: 0 PID: 10764 Comm: syz.0.2707 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 206.767648][T10764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.767662][T10764] Call Trace: [ 206.767669][T10764] [ 206.767678][T10764] __dump_stack+0x1d/0x30 [ 206.767768][T10764] dump_stack_lvl+0xe8/0x140 [ 206.767792][T10764] dump_stack+0x15/0x1b [ 206.767807][T10764] should_fail_ex+0x265/0x280 [ 206.767843][T10764] should_fail+0xb/0x20 [ 206.767951][T10764] should_fail_usercopy+0x1a/0x20 [ 206.767984][T10764] _copy_to_user+0x20/0xa0 [ 206.768009][T10764] put_timespec64+0x63/0xb0 [ 206.768033][T10764] __x64_sys_sched_rr_get_interval+0x47/0x70 [ 206.768063][T10764] x64_sys_call+0x18a0/0x2fb0 [ 206.768092][T10764] do_syscall_64+0xd2/0x200 [ 206.768110][T10764] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.768137][T10764] ? clear_bhb_loop+0x40/0x90 [ 206.768170][T10764] ? clear_bhb_loop+0x40/0x90 [ 206.768335][T10764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.768362][T10764] RIP: 0033:0x7fcb0487e9a9 [ 206.768448][T10764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.768470][T10764] RSP: 002b:00007fcb02ee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000094 [ 206.768489][T10764] RAX: ffffffffffffffda RBX: 00007fcb04aa5fa0 RCX: 00007fcb0487e9a9 [ 206.768501][T10764] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000566 [ 206.768513][T10764] RBP: 00007fcb02ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 206.768524][T10764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.768539][T10764] R13: 0000000000000000 R14: 00007fcb04aa5fa0 R15: 00007ffc144ccd18 [ 206.768614][T10764] [ 206.951991][ T29] kauditd_printk_skb: 701 callbacks suppressed [ 206.952007][ T29] audit: type=1400 audit(1753110725.591:20254): avc: denied { map_create } for pid=10765 comm="syz.1.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 207.003848][ T29] audit: type=1400 audit(1753110725.621:20255): avc: denied { prog_load } for pid=10765 comm="syz.1.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 207.023369][ T29] audit: type=1400 audit(1753110725.621:20256): avc: denied { read write } for pid=10765 comm="syz.1.2708" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 207.047700][ T29] audit: type=1400 audit(1753110725.641:20257): avc: denied { allowed } for pid=10765 comm="syz.1.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 207.067379][ T29] audit: type=1326 audit(1753110725.641:20258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.1.2708" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4fa54e9a9 code=0x0 [ 207.090499][ T29] audit: type=1400 audit(1753110725.641:20259): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 207.173699][T10774] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 207.180266][T10774] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 207.188049][T10774] vhci_hcd vhci_hcd.0: Device attached [ 207.231727][T10774] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 207.233849][ T29] audit: type=1400 audit(1753110725.671:20260): avc: denied { map_create } for pid=10767 comm="syz.0.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 207.258377][ T29] audit: type=1400 audit(1753110725.671:20261): avc: denied { create } for pid=10767 comm="syz.0.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 207.258608][T10776] vhci_hcd: connection closed [ 207.279260][ T29] audit: type=1400 audit(1753110725.671:20262): avc: denied { append } for pid=10767 comm="syz.0.2709" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 207.307184][ T29] audit: type=1400 audit(1753110725.671:20263): avc: denied { map_create } for pid=10767 comm="syz.0.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 207.366432][ T31] vhci_hcd: stop threads [ 207.370881][ T31] vhci_hcd: release socket [ 207.375356][ T31] vhci_hcd: disconnect device [ 207.449716][T10786] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 207.460894][T10784] lo speed is unknown, defaulting to 1000 [ 207.489480][T10786] lo speed is unknown, defaulting to 1000 [ 207.517958][T10790] netlink: 'syz.3.2715': attribute type 10 has an invalid length. [ 207.525847][T10790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2715'. [ 207.675745][T10798] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 208.069928][T10809] bridge0: entered promiscuous mode [ 208.085355][T10809] macsec1: entered promiscuous mode [ 208.105855][T10809] bridge0: port 4(macsec1) entered blocking state [ 208.112393][T10809] bridge0: port 4(macsec1) entered disabled state [ 208.136415][T10809] macsec1: entered allmulticast mode [ 208.141824][T10809] bridge0: entered allmulticast mode [ 208.204382][T10809] macsec1: left allmulticast mode [ 208.209462][T10809] bridge0: left allmulticast mode [ 208.253923][T10809] bridge0: left promiscuous mode [ 208.450426][T10817] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 208.487764][T10817] lo speed is unknown, defaulting to 1000 [ 208.534560][T10820] netlink: 'syz.4.2726': attribute type 10 has an invalid length. [ 208.542439][T10820] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2726'. [ 208.700370][T10839] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 208.706929][T10839] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 208.714730][T10839] vhci_hcd vhci_hcd.0: Device attached [ 208.754138][T10839] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 208.770825][T10841] vhci_hcd: connection closed [ 208.771007][ T386] vhci_hcd: stop threads [ 208.780229][ T386] vhci_hcd: release socket [ 208.784769][ T386] vhci_hcd: disconnect device [ 208.841740][T10847] FAULT_INJECTION: forcing a failure. [ 208.841740][T10847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.854885][T10847] CPU: 1 UID: 0 PID: 10847 Comm: syz.1.2736 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 208.854955][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.854970][T10847] Call Trace: [ 208.854976][T10847] [ 208.854983][T10847] __dump_stack+0x1d/0x30 [ 208.855005][T10847] dump_stack_lvl+0xe8/0x140 [ 208.855070][T10847] dump_stack+0x15/0x1b [ 208.855125][T10847] should_fail_ex+0x265/0x280 [ 208.855163][T10847] should_fail+0xb/0x20 [ 208.855236][T10847] should_fail_usercopy+0x1a/0x20 [ 208.855336][T10847] _copy_from_user+0x1c/0xb0 [ 208.855361][T10847] kstrtouint_from_user+0x69/0xf0 [ 208.855391][T10847] ? 0xffffffff81000000 [ 208.855403][T10847] ? selinux_file_permission+0x1e4/0x320 [ 208.855433][T10847] proc_fail_nth_write+0x50/0x160 [ 208.855472][T10847] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 208.855513][T10847] vfs_write+0x269/0x8e0 [ 208.855610][T10847] ? vfs_read+0x47f/0x6f0 [ 208.855643][T10847] ? __rcu_read_unlock+0x4f/0x70 [ 208.855664][T10847] ? __fget_files+0x184/0x1c0 [ 208.855683][T10847] ksys_write+0xda/0x1a0 [ 208.855779][T10847] __x64_sys_write+0x40/0x50 [ 208.855814][T10847] x64_sys_call+0x2cdd/0x2fb0 [ 208.855841][T10847] do_syscall_64+0xd2/0x200 [ 208.855861][T10847] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.855943][T10847] ? clear_bhb_loop+0x40/0x90 [ 208.856029][T10847] ? clear_bhb_loop+0x40/0x90 [ 208.856057][T10847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.856119][T10847] RIP: 0033:0x7fc4fa54d45f [ 208.856133][T10847] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 208.856150][T10847] RSP: 002b:00007fc4f8baf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 208.856167][T10847] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc4fa54d45f [ 208.856179][T10847] RDX: 0000000000000001 RSI: 00007fc4f8baf0a0 RDI: 0000000000000003 [ 208.856220][T10847] RBP: 00007fc4f8baf090 R08: 0000000000000000 R09: 0000000000000000 [ 208.856235][T10847] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 208.856250][T10847] R13: 0000000000000000 R14: 00007fc4fa775fa0 R15: 00007ffc6b375678 [ 208.856351][T10847] [ 209.594578][ T3304] ================================================================== [ 209.602797][ T3304] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 209.610286][ T3304] [ 209.612629][ T3304] read-write to 0xffff888140dc7748 of 8 bytes by task 10868 on cpu 0: [ 209.620799][ T3304] shmem_recalc_inode+0x36/0x1c0 [ 209.625771][ T3304] shmem_get_folio_gfp+0x7a3/0xd60 [ 209.630921][ T3304] shmem_write_begin+0xa8/0x190 [ 209.635805][ T3304] generic_perform_write+0x181/0x490 [ 209.641121][ T3304] shmem_file_write_iter+0xc5/0xf0 [ 209.645348][T10869] FAULT_INJECTION: forcing a failure. [ 209.645348][T10869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.646237][ T3304] __kernel_write_iter+0x253/0x4c0 [ 209.659292][T10869] CPU: 0 UID: 0 PID: 10869 Comm: syz.0.2744 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 209.659328][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.659345][T10869] Call Trace: [ 209.659356][T10869] [ 209.659366][T10869] __dump_stack+0x1d/0x30 [ 209.659457][T10869] dump_stack_lvl+0xe8/0x140 [ 209.659495][T10869] dump_stack+0x15/0x1b [ 209.659545][T10869] should_fail_ex+0x265/0x280 [ 209.659653][T10869] should_fail+0xb/0x20 [ 209.659690][T10869] should_fail_usercopy+0x1a/0x20 [ 209.659734][T10869] _copy_from_user+0x1c/0xb0 [ 209.659761][T10869] io_submit_one+0x52/0x11d0 [ 209.659796][T10869] __se_sys_io_submit+0xfb/0x280 [ 209.659879][T10869] __x64_sys_io_submit+0x43/0x50 [ 209.659919][T10869] x64_sys_call+0xfc4/0x2fb0 [ 209.659950][T10869] do_syscall_64+0xd2/0x200 [ 209.659975][T10869] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 209.660026][T10869] ? clear_bhb_loop+0x40/0x90 [ 209.660054][T10869] ? clear_bhb_loop+0x40/0x90 [ 209.660100][T10869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.660129][T10869] RIP: 0033:0x7fcb0487e9a9 [ 209.660149][T10869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.660245][T10869] RSP: 002b:00007fcb02ee7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 209.660271][T10869] RAX: ffffffffffffffda RBX: 00007fcb04aa5fa0 RCX: 00007fcb0487e9a9 [ 209.660288][T10869] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fcb02ea3000 [ 209.660305][T10869] RBP: 00007fcb02ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 209.660322][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.660338][T10869] R13: 0000000000000000 R14: 00007fcb04aa5fa0 R15: 00007ffc144ccd18 [ 209.660363][T10869] [ 209.843153][ T3304] dump_user_range+0x407/0x8c0 [ 209.847962][ T3304] elf_core_dump+0x1dc2/0x1f80 [ 209.852756][ T3304] do_coredump+0x1dfa/0x27b0 [ 209.857376][ T3304] get_signal+0xd85/0xf70 [ 209.861754][ T3304] arch_do_signal_or_restart+0x96/0x480 [ 209.867328][ T3304] irqentry_exit_to_user_mode+0x5e/0xa0 [ 209.872916][ T3304] irqentry_exit+0x12/0x50 [ 209.877358][ T3304] asm_exc_page_fault+0x26/0x30 [ 209.882243][ T3304] [ 209.884598][ T3304] read to 0xffff888140dc7748 of 8 bytes by task 3304 on cpu 1: [ 209.892165][ T3304] shmem_getattr+0x41/0x200 [ 209.896782][ T3304] vfs_getattr_nosec+0x146/0x1e0 [ 209.901744][ T3304] vfs_statx+0x113/0x390 [ 209.906008][ T3304] vfs_fstatat+0x115/0x170 [ 209.910453][ T3304] __se_sys_newfstatat+0x55/0x260 [ 209.915512][ T3304] __x64_sys_newfstatat+0x55/0x70 [ 209.920554][ T3304] x64_sys_call+0x2c22/0x2fb0 [ 209.925243][ T3304] do_syscall_64+0xd2/0x200 [ 209.929766][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.935675][ T3304] [ 209.938012][ T3304] value changed: 0x00000000000001b9 -> 0x00000000000001ba [ 209.945137][ T3304] [ 209.947488][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 209.953652][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 209.964511][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.974572][ T3304] ================================================================== [ 210.515877][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.606558][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.688331][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.756916][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.889788][ T31] dummy0: left allmulticast mode [ 210.915916][ T31] bridge0: port 3(dummy0) entered disabled state [ 210.924657][ T31] bridge_slave_1: left allmulticast mode [ 210.930437][ T31] bridge_slave_1: left promiscuous mode [ 210.936285][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.955371][ T31] bridge_slave_0: left allmulticast mode [ 210.961097][ T31] bridge_slave_0: left promiscuous mode [ 210.966796][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.087281][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.097386][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.106996][ T31] bond0 (unregistering): Released all slaves [ 211.115682][ T31] bond1 (unregistering): Released all slaves [ 211.155586][ T31] tipc: Disabling bearer [ 211.160871][ T31] tipc: Left network mode [ 211.167860][ T31] hsr_slave_0: left promiscuous mode [ 211.173513][ T31] hsr_slave_1: left promiscuous mode [ 211.179190][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.186625][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.195835][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.203241][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.213726][ T31] veth1_macvtap: left promiscuous mode [ 211.219312][ T31] veth0_macvtap: left promiscuous mode [ 211.224855][ T31] veth1_vlan: left promiscuous mode [ 211.230222][ T31] veth0_vlan: left promiscuous mode [ 211.297132][ T31] team0 (unregistering): Port device team_slave_1 removed [ 211.307410][ T31] team0 (unregistering): Port device team_slave_0 removed [ 211.679981][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.716837][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.756758][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.826771][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.897898][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.908226][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 211.918513][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 211.966445][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.976935][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 211.987194][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 212.027140][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.037451][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 212.047664][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 212.086497][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.096926][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 212.107267][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 212.178722][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.216240][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.256354][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.336789][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.418858][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.456716][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.516800][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.556618][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.626522][ T31] dummy0: left allmulticast mode [ 212.631552][ T31] bridge0: port 3(dummy0) entered disabled state [ 212.638620][ T31] bridge_slave_1: left allmulticast mode [ 212.644322][ T31] bridge_slave_1: left promiscuous mode [ 212.650125][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.657940][ T31] bridge_slave_0: left promiscuous mode [ 212.663567][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.671906][ T31] dummy0: left allmulticast mode [ 212.677069][ T31] bridge0: port 1(dummy0) entered disabled state [ 212.684768][ T31] bridge0: port 3(dummy0) entered disabled state [ 212.691837][ T31] bridge_slave_1: left allmulticast mode [ 212.697557][ T31] bridge_slave_1: left promiscuous mode [ 212.703230][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.711001][ T31] bridge_slave_0: left allmulticast mode [ 212.716765][ T31] bridge_slave_0: left promiscuous mode [ 212.722439][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.730654][ T31] dummy0: left allmulticast mode [ 212.735731][ T31] bridge0: port 1(dummy0) entered disabled state [ 212.885722][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.895667][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.905342][ T31] bond0 (unregistering): Released all slaves [ 212.976429][ T31] bond0 (unregistering): Released all slaves [ 213.016697][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.026710][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.036144][ T31] bond0 (unregistering): Released all slaves [ 213.086481][ T31] bond0 (unregistering): Released all slaves [ 213.142257][ T31] hsr_slave_0: left promiscuous mode [ 213.147987][ T31] hsr_slave_1: left promiscuous mode [ 213.153597][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.161025][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.168619][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.176240][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.185160][ T31] hsr_slave_0: left promiscuous mode [ 213.190753][ T31] hsr_slave_1: left promiscuous mode [ 213.197411][ T31] hsr_slave_0: left promiscuous mode [ 213.202979][ T31] hsr_slave_1: left promiscuous mode [ 213.208673][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.216187][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.223651][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.231089][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.240297][ T31] hsr_slave_0: left promiscuous mode [ 213.246003][ T31] hsr_slave_1: left promiscuous mode [ 213.261427][ T31] veth1_macvtap: left promiscuous mode [ 213.266995][ T31] veth0_macvtap: left promiscuous mode [ 213.272650][ T31] veth1_vlan: left promiscuous mode [ 213.277902][ T31] veth0_vlan: left promiscuous mode [ 213.283565][ T31] veth1_vlan: left promiscuous mode [ 213.288919][ T31] veth0_vlan: left promiscuous mode [ 213.294740][ T31] veth1_macvtap: left promiscuous mode [ 213.300228][ T31] veth0_macvtap: left promiscuous mode [ 213.306218][ T31] veth1_macvtap: left promiscuous mode [ 213.311710][ T31] veth0_macvtap: left promiscuous mode [ 213.317292][ T31] veth1_vlan: left promiscuous mode [ 213.322536][ T31] veth0_vlan: left promiscuous mode [ 213.479956][ T31] team0 (unregistering): Port device team_slave_1 removed [ 213.489573][ T31] team0 (unregistering): Port device team_slave_0 removed [ 213.573738][ T31] team0 (unregistering): Port device team_slave_1 removed [ 213.653133][ T3368] lo speed is unknown, defaulting to 1000 [ 213.658934][ T3368] infiniband syz0: ib_query_port failed (-19) [ 214.582355][ T31] IPVS: stop unused estimator thread 0...