last executing test programs: 17m31.699069936s ago: executing program 32 (id=1159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x62) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) (rerun: 64) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x4, 0x0, 0x40) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4090) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x8, &(0x7f0000001580)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095", @ANYBLOB="fabebc4262568c0f3cdce8bf00f4bf71e9841bee8d76203df5ec4acbc7414648cdb137fb4f8649230fde5987d39a8c0df933a0bf2a0d5a03d64a5569845bfe16c6145f06168b6a38b1fe296841b4bd8db1246b971001f40ff6860bc9b68184a6c26c5242ff59aef441a9c31d76ab441c1a664762c3863749d381bd59a4b637fd7a93b5afe7e082bd6f895e5274d9ca20d71a981767bca430e99e27428772e33541d4519898636b508e098b0e4c61345ea6ed5cf9cf3168c7c0865e700debd257700738bde2cffce2b04e80c59d03"], &(0x7f0000000240)='GPL\x00', 0x6, 0x102, &(0x7f0000003b00)=""/258, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffa4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000001c0)={0x803, 0x8, 0x9, 0xfffffffffffffffe, 0x3}) (async) socket$key(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) 13m0.639603499s ago: executing program 33 (id=6381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x2000000000209}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 12m59.246495797s ago: executing program 34 (id=6414): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x3}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 12m56.287775276s ago: executing program 35 (id=6478): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, r2, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m53.846232272s ago: executing program 36 (id=6584): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400001}, [@call={0x85, 0x0, 0x0, 0x24}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m52.121200753s ago: executing program 8 (id=6665): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000), 0x8) 12m52.120961443s ago: executing program 8 (id=6666): r0 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4066, &(0x7f0000008100)="$eJzszzFKw3AUBvAvrcEogSLoJIjFwU3i5pRbdJeewclBxdzEUTyA9/AOjl4hDpJIrYNLQeX3m97Hx3vJP/wR1TgVSZ6XT3tJjufpmuaj3Br6nc+l5jzlbjVJneRq/ebicfP/DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FKTlXSbpHu5Ph1yNTbLw3Q3bS7qpDqYJffTlO1Rkf1kfvbN3WnymqRI8pZkMdvsMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/+JyJW1/rethuFtffThJ15Zj2/d9/+PPVsk7u3MsAAAAgACMMskoY+jfCJa+VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbgoAAP//SIAVRg==") fchdir(r1) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/mnt\x00') 12m51.987444354s ago: executing program 37 (id=6668): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) connect$unix(r1, 0x0, 0x0) 12m51.906323095s ago: executing program 8 (id=6671): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880), &(0x7f0000000d00), 0xf755, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r3}, 0xc) 12m51.340481829s ago: executing program 8 (id=6678): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000011c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2909091, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) unshare(0x22020600) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 12m51.332206229s ago: executing program 8 (id=6680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x5, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x8000) sendmsg$sock(r1, 0x0, 0x4000004) 12m50.101523976s ago: executing program 8 (id=6698): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) writev(r1, &(0x7f0000000040), 0x0) 12m50.101167296s ago: executing program 38 (id=6698): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) writev(r1, &(0x7f0000000040), 0x0) 12m49.47155405s ago: executing program 6 (id=6717): r0 = socket$inet(0x2, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, 0x0) syz_read_part_table(0x405b, &(0x7f0000004080)="$eJzszjFKA1EUBdCbxMGvDARBK0EM9jJ2VrOL6SVrsFZxdmIZXIArsnQLIyhGEkW0CKicU73P5b1/wx9RltMoycP8fi/J8Sx907yGW2/5zvtSc5Zqt4xTJ7n8eLNbbL43AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwS41XXtdraVlO88P0V23O66QcTJPbSar2aJT9ZHb6yd1J8phklOQpSTfdUH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J+5WHltr8f1F6t3J+nb6mW8STIMw/Dtb0vSLX7SE57ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKMCAAD//wx/Es8=") close_range(r0, 0xffffffffffffffff, 0x0) 12m49.249851132s ago: executing program 6 (id=6722): io_uring_setup(0x1881, &(0x7f0000000400)={0x0, 0xd2f5, 0x400, 0x1, 0x108}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, 0x0, 0x0) close(0x3) 12m49.132644443s ago: executing program 6 (id=6724): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 12m49.132213083s ago: executing program 6 (id=6726): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000011c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2909091, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) unshare(0x22020600) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 12m49.096515013s ago: executing program 6 (id=6728): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 12m48.982008253s ago: executing program 3 (id=6734): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="11", 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x3, r3, 0x1, 0x4, 0x6, @local}, 0x14) 12m48.689115985s ago: executing program 3 (id=6735): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x2}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r1, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7d, &(0x7f0000000000)=r5, 0x8) 12m48.662544016s ago: executing program 3 (id=6736): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m48.635914985s ago: executing program 3 (id=6737): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000011c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2909091, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) unshare(0x22020600) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 12m48.592933026s ago: executing program 3 (id=6738): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xc}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0xfffd}, 0x8) 12m48.305002128s ago: executing program 3 (id=6739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 12m48.304948688s ago: executing program 39 (id=6739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 12m48.304880328s ago: executing program 6 (id=6740): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x5, r1, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000800) 12m48.304821238s ago: executing program 40 (id=6740): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x5, r1, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000800) 4m56.255700981s ago: executing program 0 (id=10160): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 4m56.071610912s ago: executing program 0 (id=10163): mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=']) 4m55.864731123s ago: executing program 0 (id=10167): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x122) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, 0x0) 4m55.528231085s ago: executing program 0 (id=10169): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m54.049129784s ago: executing program 0 (id=10174): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m53.656479996s ago: executing program 0 (id=10175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 4m39.031952363s ago: executing program 41 (id=10175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 45.758940486s ago: executing program 2 (id=11732): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) 44.824832392s ago: executing program 2 (id=11741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/44}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 44.775627062s ago: executing program 2 (id=11743): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 44.774948032s ago: executing program 2 (id=11745): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x2080, 0x0) 44.748384503s ago: executing program 2 (id=11746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xa0028b64}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, r6) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)) 44.685910063s ago: executing program 2 (id=11747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) iopl(0x3) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@ipv6_delroute={0x1c, 0x19, 0xe8a7ab5761a135c1, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x0, 0xa, 0xfc, 0x3, 0xfe, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 44.645234953s ago: executing program 42 (id=11747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) iopl(0x3) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@ipv6_delroute={0x1c, 0x19, 0xe8a7ab5761a135c1, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x0, 0xa, 0xfc, 0x3, 0xfe, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 6.072250094s ago: executing program 4 (id=12202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) preadv2(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b3, 0x3109, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x81, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xa}}}}}]}}]}}, 0x0) 4.422732404s ago: executing program 9 (id=12233): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080004"], 0x44}}, 0x0) 3.961807136s ago: executing program 5 (id=12238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), 0x0}, 0x20) 3.866673767s ago: executing program 5 (id=12239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1e3f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@multicast, @empty, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @multicast1}}}}}}, 0x26) 3.749151158s ago: executing program 5 (id=12240): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@orangefs={0x14, 0x1, {"1ee510d621000000ff00", 0x8}}, 0x400000) umount2(0x0, 0x9) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 3.620270928s ago: executing program 9 (id=12241): syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x27, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000200)) 3.563612179s ago: executing program 5 (id=12243): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x82) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r2, 0x200004) 3.537436099s ago: executing program 5 (id=12244): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 3.485897409s ago: executing program 5 (id=12245): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0x1, 0x1}) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002040), 0x400000000000377, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) fcntl$lock(r5, 0x5, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x1}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x28, r6, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x0) 3.33105874s ago: executing program 1 (id=12247): syz_emit_ethernet(0x125c, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6744763e12262f00fe8000000000000000000000000000bbff020000000000000000000000000001160a"], 0x0) 3.2754147s ago: executing program 1 (id=12248): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x3e}, 0x28) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r5}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x20, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0xf}, [@FRA_DST={0x8, 0x1, @private=0xa010101}]}, 0x24}}, 0x42094) 3.076361872s ago: executing program 4 (id=12249): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000ac0)=ANY=[@ANYRES8=r0], 0xdd12}], 0x2, 0x0, 0x0, 0x24000880}, 0x20040051) 3.028271122s ago: executing program 4 (id=12250): syz_emit_ethernet(0x27, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) clock_gettime(0xffffffc3, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x3) 2.715008844s ago: executing program 9 (id=12253): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) 2.612755995s ago: executing program 7 (id=12254): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000008000000811014000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) 2.599462914s ago: executing program 7 (id=12255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 2.543552615s ago: executing program 7 (id=12256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x10000101}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) ioctl$TCXONC(r3, 0x5608, 0x0) 2.472626895s ago: executing program 1 (id=12257): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_setup(0x3ff, &(0x7f0000000500)) 2.125759837s ago: executing program 4 (id=12258): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) r5 = syz_open_procfs(0x0, 0x0) fchdir(r5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x20) 1.63707483s ago: executing program 7 (id=12259): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x100, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x7}, 0x8) 1.282249012s ago: executing program 4 (id=12260): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getgroups(0x0, 0x0) shutdown(0xffffffffffffffff, 0x2000000) syz_open_dev$loop(&(0x7f0000000000), 0x13a8120a, 0x149501) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0xf2a82df3d0405355) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}}}}}}, 0x0) 1.246769062s ago: executing program 1 (id=12261): set_mempolicy(0x4005, 0x0, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 1.132254243s ago: executing program 4 (id=12262): syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f01000000000000009ba624dc1a00000008241c00401707000905810340000000000904010000020d000009040101"], 0x0) pipe(&(0x7f0000000300)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb705000008000000b7030000030000008500000023000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) read$msr(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000001040)='inode_foreign_history\x00'}, 0x18) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.037246544s ago: executing program 1 (id=12263): syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x27, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000200)) 818.247605ms ago: executing program 7 (id=12264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) 527.711177ms ago: executing program 9 (id=12265): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e224e0004fcff", 0x58}], 0x1) 527.506227ms ago: executing program 9 (id=12266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 527.118967ms ago: executing program 9 (id=12267): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x3e}, 0x28) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r5}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x20, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0xf}, [@FRA_DST={0x8, 0x1, @private=0xa010101}]}, 0x24}}, 0x42094) 151.458619ms ago: executing program 1 (id=12268): syz_emit_ethernet(0x27, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) clock_gettime(0xffffffc3, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x3) 0s ago: executing program 7 (id=12269): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x2, 0x4, 0x831e, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x800204}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) kernel console output (not intermixed with test programs): : Released all slaves [ 848.183649][ T8067] tipc: Left network mode [ 848.191864][ T8067] hsr_slave_0: left promiscuous mode [ 848.202128][ T8067] hsr_slave_1: left promiscuous mode [ 848.209309][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.246663][ T29] audit: type=1400 audit(1761751299.000:27186): avc: denied { mounton } for pid=32126 comm="syz.9.9807" path="/22/file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 848.272832][T32127] FAT-fs (loop19): unable to read boot sector [ 848.333193][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.466274][ T8067] team0 (unregistering): Port device team_slave_1 removed [ 848.475964][ T8067] team0 (unregistering): Port device team_slave_0 removed [ 848.573581][T32137] bridge0: entered promiscuous mode [ 848.578928][T32137] macsec1: entered promiscuous mode [ 848.585170][T32137] bridge0: port 3(macsec1) entered blocking state [ 848.591605][T32137] bridge0: port 3(macsec1) entered disabled state [ 848.598278][T32137] macsec1: entered allmulticast mode [ 848.603564][T32137] bridge0: entered allmulticast mode [ 848.609262][T32137] macsec1: left allmulticast mode [ 848.614425][T32137] bridge0: left allmulticast mode [ 848.632667][T32137] bridge0: left promiscuous mode [ 848.931993][T32089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 848.983094][T32089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 849.014692][T32089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 849.047718][T32089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 849.290566][T32089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.375344][T32089] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.472276][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.479457][ T8067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.573073][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.580244][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.662077][T32089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 849.672527][T32089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 849.804889][T32089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.926593][ T8067] Bluetooth: hci0: Frame reassembly failed (-84) [ 850.218855][T32089] veth0_vlan: entered promiscuous mode [ 850.244604][T32089] veth1_vlan: entered promiscuous mode [ 850.279113][T32089] veth0_macvtap: entered promiscuous mode [ 850.290355][T32089] veth1_macvtap: entered promiscuous mode [ 850.311406][T32089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.332096][T32089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.347407][ T2638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.362469][ T2638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.379291][ T2638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.409238][ T2638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.582981][T32198] bridge0: entered promiscuous mode [ 850.588456][T32198] macsec1: entered promiscuous mode [ 850.594519][T32198] bridge0: port 3(macsec1) entered blocking state [ 850.600997][T32198] bridge0: port 3(macsec1) entered disabled state [ 850.607559][T32198] macsec1: entered allmulticast mode [ 850.612898][T32198] bridge0: entered allmulticast mode [ 850.618530][T32198] macsec1: left allmulticast mode [ 850.623608][T32198] bridge0: left allmulticast mode [ 850.642834][T32198] bridge0: left promiscuous mode [ 850.644910][ T8067] Bluetooth: hci1: Frame reassembly failed (-84) [ 850.862133][T32207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9823'. [ 850.871722][T32207] bridge_slave_1: left allmulticast mode [ 850.877395][T32207] bridge_slave_1: left promiscuous mode [ 850.883159][T32207] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.891255][T32207] bridge_slave_0: left allmulticast mode [ 850.896988][T32207] bridge_slave_0: left promiscuous mode [ 850.902885][T32207] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.028369][T32211] tipc: Enabling of bearer rejected, failed to enable media [ 851.873076][ T3596] Bluetooth: hci0: command 0x1003 tx timeout [ 851.899898][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 852.602559][T25565] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 853.217555][T32251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9834'. [ 854.374051][T32254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9835'. [ 854.677486][T32267] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 854.694217][T32262] bridge0: entered promiscuous mode [ 854.699546][T32262] macsec1: entered promiscuous mode [ 854.705491][T32262] bridge0: port 3(macsec1) entered blocking state [ 854.711940][T32262] bridge0: port 3(macsec1) entered disabled state [ 854.718532][T32262] macsec1: entered allmulticast mode [ 854.723839][T32262] bridge0: entered allmulticast mode [ 854.729701][T32262] macsec1: left allmulticast mode [ 854.734730][T32262] bridge0: left allmulticast mode [ 854.740262][T32262] bridge0: left promiscuous mode [ 855.165205][T21646] usb usb8-port1: attempt power cycle [ 855.211593][T30212] Bluetooth: hci0: Frame reassembly failed (-84) [ 855.549501][T32279] bridge0: entered promiscuous mode [ 855.554878][T32279] macsec1: entered promiscuous mode [ 855.561367][T32279] bridge0: port 3(macsec1) entered blocking state [ 855.567927][T32279] bridge0: port 3(macsec1) entered disabled state [ 855.580723][T32279] macsec1: entered allmulticast mode [ 855.586100][T32279] bridge0: entered allmulticast mode [ 855.592098][T32279] macsec1: left allmulticast mode [ 855.597246][T32279] bridge0: left allmulticast mode [ 855.607274][T32279] bridge0: left promiscuous mode [ 857.176527][T25565] Bluetooth: hci0: command 0x1003 tx timeout [ 857.182919][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 857.203544][T21646] usb usb8-port1: unable to enumerate USB device [ 857.444251][T32312] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 858.860963][T32352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.869447][T32352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.366227][T32375] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9872'. [ 860.375338][T32375] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9872'. [ 860.873229][T32392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9876'. [ 861.375868][T21647] usb usb8-port1: attempt power cycle [ 862.655604][T32413] bridge0: entered promiscuous mode [ 862.667035][T32413] macsec1: entered promiscuous mode [ 862.679421][T32413] bridge0: port 3(macsec1) entered blocking state [ 862.686112][T32413] bridge0: port 3(macsec1) entered disabled state [ 862.773235][T32413] macsec1: entered allmulticast mode [ 862.778604][T32413] bridge0: entered allmulticast mode [ 862.796535][T32413] macsec1: left allmulticast mode [ 862.801584][T32413] bridge0: left allmulticast mode [ 862.807285][T32413] bridge0: left promiscuous mode [ 863.063788][T32419] bridge0: entered promiscuous mode [ 863.069072][T32419] macsec1: entered promiscuous mode [ 863.075117][T32419] bridge0: port 3(macsec1) entered blocking state [ 863.081614][T32419] bridge0: port 3(macsec1) entered disabled state [ 863.088140][T32419] macsec1: entered allmulticast mode [ 863.093478][T32419] bridge0: entered allmulticast mode [ 863.101108][T32419] macsec1: left allmulticast mode [ 863.106157][T32419] bridge0: left allmulticast mode [ 863.124509][T32419] bridge0: left promiscuous mode [ 863.764763][T32431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.773415][T32431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.817870][T32436] tipc: Enabling of bearer rejected, failed to enable media [ 864.214876][T21647] usb usb8-port1: unable to enumerate USB device [ 864.676880][T32457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9892'. [ 864.801689][T32457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9892'. [ 864.844101][T32465] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9896'. [ 864.895657][T32465] bridge_slave_1: left allmulticast mode [ 864.901427][T32465] bridge_slave_1: left promiscuous mode [ 864.907126][T32465] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.928758][T32465] bridge_slave_0: left allmulticast mode [ 864.934489][T32465] bridge_slave_0: left promiscuous mode [ 864.940231][T32465] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.244245][ T29] audit: type=1400 audit(1761751318.925:27187): avc: denied { bind } for pid=32502 comm="syz.1.9906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 867.263952][ T29] audit: type=1400 audit(1761751318.925:27188): avc: denied { setopt } for pid=32502 comm="syz.1.9906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 867.535660][ T385] Bluetooth: hci0: Frame reassembly failed (-84) [ 867.891232][T32525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9912'. [ 867.979088][T32525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9912'. [ 868.682237][T21647] usb usb8-port1: attempt power cycle [ 869.414706][T32565] tipc: Started in network mode [ 869.419725][T32565] tipc: Node identity 8e6f20e27ce8, cluster identity 4711 [ 869.426968][T32565] tipc: Enabled bearer , priority 0 [ 869.434221][T32565] syzkaller0: entered promiscuous mode [ 869.439884][T32565] syzkaller0: entered allmulticast mode [ 869.445590][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 869.459771][T32567] tmpfs: Unknown parameter '9' [ 869.460114][T32565] tipc: Resetting bearer [ 869.852917][T32581] bridge0: entered promiscuous mode [ 869.858233][T32581] macsec1: entered promiscuous mode [ 869.864494][T32581] bridge0: port 3(macsec1) entered blocking state [ 869.870928][T32581] bridge0: port 3(macsec1) entered disabled state [ 869.877489][T32581] macsec1: entered allmulticast mode [ 869.882797][T32581] bridge0: entered allmulticast mode [ 869.891407][T32581] macsec1: left allmulticast mode [ 869.896508][T32581] bridge0: left allmulticast mode [ 869.902735][T32581] bridge0: left promiscuous mode [ 870.239347][T32593] bridge0: entered promiscuous mode [ 870.246398][T32593] macsec1: entered promiscuous mode [ 870.252745][T32593] bridge0: port 3(macsec1) entered blocking state [ 870.259281][T32593] bridge0: port 3(macsec1) entered disabled state [ 870.266152][T32593] macsec1: entered allmulticast mode [ 870.271448][T32593] bridge0: entered allmulticast mode [ 870.277202][T32593] macsec1: left allmulticast mode [ 870.282251][T32593] bridge0: left allmulticast mode [ 870.321804][T32593] bridge0: left promiscuous mode [ 870.425318][T21593] tipc: Node number set to 4068942050 [ 870.799493][T32602] tipc: Enabling of bearer rejected, already enabled [ 871.231566][ T409] Bluetooth: hci0: Frame reassembly failed (-84) [ 871.861621][T32617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9943'. [ 871.870918][T32617] bridge_slave_1: left allmulticast mode [ 871.876665][T32617] bridge_slave_1: left promiscuous mode [ 871.882339][T32617] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.890572][T32617] bridge_slave_0: left allmulticast mode [ 871.896358][T32617] bridge_slave_0: left promiscuous mode [ 871.902393][T32617] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.031367][T21647] usb usb8-port1: unable to enumerate USB device [ 872.319266][T32625] bridge0: entered promiscuous mode [ 872.324559][T32625] macsec1: entered promiscuous mode [ 872.331272][T32625] bridge0: port 3(macsec1) entered blocking state [ 872.337780][T32625] bridge0: port 3(macsec1) entered disabled state [ 872.344678][T32625] macsec1: entered allmulticast mode [ 872.350081][T32625] bridge0: entered allmulticast mode [ 872.521008][T32625] macsec1: left allmulticast mode [ 872.526081][T32625] bridge0: left allmulticast mode [ 872.532266][T32625] bridge0: left promiscuous mode [ 872.694418][T32637] tipc: Enabling of bearer rejected, failed to enable media [ 872.950573][T32651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9950'. [ 873.187599][T25565] Bluetooth: hci0: command 0x1003 tx timeout [ 873.193662][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 873.868305][T32668] syzkaller0: MTU too low for tipc bearer [ 873.874163][T32668] tipc: Disabling bearer [ 874.267065][T32674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9957'. [ 874.330358][T32677] tipc: Enabling of bearer rejected, failed to enable media [ 878.680156][ T29] audit: type=1400 audit(1761751330.945:27189): avc: denied { create } for pid=312 comm="syz.1.9988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 879.520564][ T336] bridge0: entered promiscuous mode [ 879.525937][ T336] macsec1: entered promiscuous mode [ 879.532096][ T336] bridge0: port 3(macsec1) entered blocking state [ 879.538555][ T336] bridge0: port 3(macsec1) entered disabled state [ 879.545178][ T336] macsec1: entered allmulticast mode [ 879.550479][ T336] bridge0: entered allmulticast mode [ 880.302969][ T336] macsec1: left allmulticast mode [ 880.308083][ T336] bridge0: left allmulticast mode [ 880.369640][ T336] bridge0: left promiscuous mode [ 880.633583][ T351] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 881.078615][ T2638] Bluetooth: hci0: Frame reassembly failed (-84) [ 882.323880][ T414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10012'. [ 882.340257][ T414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10012'. [ 882.403324][ T417] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 882.771311][ T418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10017'. [ 883.103593][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 883.312010][ T29] audit: type=1400 audit(1761751335.806:27190): avc: denied { read write } for pid=423 comm="syz.0.10020" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 883.336875][ T29] audit: type=1400 audit(1761751335.806:27191): avc: denied { open } for pid=423 comm="syz.0.10020" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 884.011846][ T435] tipc: Enabling of bearer rejected, failed to enable media [ 884.029056][ T433] macsec1: entered promiscuous mode [ 884.034343][ T433] bridge0: entered promiscuous mode [ 884.040705][ T433] bridge0: port 1(macsec1) entered blocking state [ 884.047192][ T433] bridge0: port 1(macsec1) entered disabled state [ 884.053748][ T433] macsec1: entered allmulticast mode [ 884.059074][ T433] bridge0: entered allmulticast mode [ 884.064921][ T433] macsec1: left allmulticast mode [ 884.069992][ T433] bridge0: left allmulticast mode [ 884.086170][ T433] bridge0: left promiscuous mode [ 884.206845][ T29] audit: type=1400 audit(1761751336.751:27192): avc: denied { write } for pid=448 comm="syz.1.10026" path="socket:[122715]" dev="sockfs" ino=122715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 885.437394][ T486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10034'. [ 885.552967][ T486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10034'. [ 885.744150][ T489] macsec1: entered promiscuous mode [ 885.749384][ T489] bridge0: entered promiscuous mode [ 885.755650][ T489] bridge0: port 1(macsec1) entered blocking state [ 885.762104][ T489] bridge0: port 1(macsec1) entered disabled state [ 885.768590][ T489] macsec1: entered allmulticast mode [ 885.773976][ T489] bridge0: entered allmulticast mode [ 885.779630][ T489] macsec1: left allmulticast mode [ 885.784690][ T489] bridge0: left allmulticast mode [ 885.801873][ T489] bridge0: left promiscuous mode [ 887.465701][ T550] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 887.985648][ T558] netlink: 'syz.4.10057': attribute type 4 has an invalid length. [ 891.105773][ T2638] Bluetooth: hci0: Frame reassembly failed (-84) [ 891.184925][ T591] macsec1: entered promiscuous mode [ 891.190171][ T591] bridge0: entered promiscuous mode [ 891.220555][ T591] bridge0: port 1(macsec1) entered blocking state [ 891.227019][ T591] bridge0: port 1(macsec1) entered disabled state [ 891.240513][ T591] macsec1: entered allmulticast mode [ 891.245855][ T591] bridge0: entered allmulticast mode [ 891.277497][ T591] macsec1: left allmulticast mode [ 891.282568][ T591] bridge0: left allmulticast mode [ 891.288057][ T591] bridge0: left promiscuous mode [ 891.587436][ T605] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 892.345338][ T615] tipc: Enabling of bearer rejected, failed to enable media [ 892.974099][ T634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10078'. [ 892.983287][ T634] bridge_slave_1: left allmulticast mode [ 892.988917][ T634] bridge_slave_1: left promiscuous mode [ 892.994765][ T634] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.010138][ T634] bridge_slave_0: left allmulticast mode [ 893.015890][ T634] bridge_slave_0: left promiscuous mode [ 893.021658][ T634] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.134538][T25565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 894.222667][ T658] syzkaller0: MTU too low for tipc bearer [ 894.228524][ T658] tipc: Enabling of bearer rejected, failed to enable media [ 894.357379][ T660] syzkaller0: entered promiscuous mode [ 894.362924][ T660] syzkaller0: entered allmulticast mode [ 894.739928][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10091'. [ 895.091105][ T695] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10090'. [ 895.100327][ T695] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10090'. [ 895.653359][T30817] Bluetooth: hci0: Frame reassembly failed (-84) [ 895.686481][ T702] tipc: Enabling of bearer rejected, failed to enable media [ 896.051742][ T704] macsec1: entered promiscuous mode [ 896.057004][ T704] bridge0: entered promiscuous mode [ 896.103833][ T704] bridge0: port 1(macsec1) entered blocking state [ 896.110348][ T704] bridge0: port 1(macsec1) entered disabled state [ 896.167097][ T704] macsec1: entered allmulticast mode [ 896.172396][ T704] bridge0: entered allmulticast mode [ 896.192655][ T704] macsec1: left allmulticast mode [ 896.197722][ T704] bridge0: left allmulticast mode [ 896.221508][ T704] bridge0: left promiscuous mode [ 896.765237][ T29] audit: type=1326 audit(1761751349.936:27193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=742 comm="syz.9.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea61cefc9 code=0x7ffc0000 [ 896.788838][ T29] audit: type=1326 audit(1761751349.936:27194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=742 comm="syz.9.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea61cefc9 code=0x7ffc0000 [ 896.812364][ T29] audit: type=1326 audit(1761751349.936:27195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=742 comm="syz.9.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fcea61cefc9 code=0x7ffc0000 [ 896.835853][ T29] audit: type=1326 audit(1761751349.936:27196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=742 comm="syz.9.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea61cefc9 code=0x7ffc0000 [ 896.859337][ T29] audit: type=1326 audit(1761751349.936:27197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=742 comm="syz.9.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fcea61cefc9 code=0x7ffc0000 [ 896.882881][ T29] audit: type=1326 audit(1761751349.936:27198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=742 comm="syz.9.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea61cefc9 code=0x7ffc0000 [ 896.906339][ T29] audit: type=1326 audit(1761751349.936:27199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=742 comm="syz.9.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcea61cefc9 code=0x7ffc0000 [ 896.930342][ T29] audit: type=1326 audit(1761751349.936:27200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=742 comm="syz.9.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea61cefc9 code=0x7ffc0000 [ 896.953832][ T29] audit: type=1326 audit(1761751349.936:27201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=742 comm="syz.9.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea61cefc9 code=0x7ffc0000 [ 897.563902][T25565] Bluetooth: hci0: command 0x1003 tx timeout [ 897.569981][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 898.056360][ T775] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 899.415682][ T795] pim6reg1: entered promiscuous mode [ 899.421062][ T795] pim6reg1: entered allmulticast mode [ 902.474463][ T874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10146'. [ 903.174958][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10149'. [ 905.009605][ T409] Bluetooth: hci0: Frame reassembly failed (-84) [ 905.089100][ T924] 9p: Unknown access argument : -22 [ 905.222475][ T928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10164'. [ 905.244491][ T930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.259603][ T930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.962397][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 907.156775][ T957] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 907.491743][ T29] audit: type=1400 audit(1761751361.201:27202): avc: denied { unmount } for pid=31723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 907.814756][ T964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10177'. [ 908.221887][ T976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10181'. [ 908.751800][ T986] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10184'. [ 909.148512][ T993] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10186'. [ 912.230472][ T1024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.238958][ T1024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.003500][ T1035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 914.049111][ T29] audit: type=1400 audit(1761751368.077:27203): avc: denied { read } for pid=1052 comm="syz.4.10204" path="socket:[125314]" dev="sockfs" ino=125314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 915.875309][ T1068] bridge0: entered promiscuous mode [ 915.880615][ T1068] macsec1: entered promiscuous mode [ 915.936375][ T1068] bridge0: port 1(macsec1) entered blocking state [ 915.943053][ T1068] bridge0: port 1(macsec1) entered disabled state [ 915.979927][ T1068] macsec1: entered allmulticast mode [ 915.985264][ T1068] bridge0: entered allmulticast mode [ 916.029899][ T1068] macsec1: left allmulticast mode [ 916.034994][ T1068] bridge0: left allmulticast mode [ 916.044218][ T1068] bridge0: left promiscuous mode [ 920.923002][ T1139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10229'. [ 921.603789][ T1147] macsec1: entered promiscuous mode [ 921.609081][ T1147] bridge0: entered promiscuous mode [ 921.616051][ T1147] bridge0: port 1(macsec1) entered blocking state [ 921.622492][ T1147] bridge0: port 1(macsec1) entered disabled state [ 921.629312][ T1147] macsec1: entered allmulticast mode [ 921.634632][ T1147] bridge0: entered allmulticast mode [ 921.694427][ T1147] macsec1: left allmulticast mode [ 921.699503][ T1147] bridge0: left allmulticast mode [ 921.705260][ T1147] bridge0: left promiscuous mode [ 922.688235][ T2638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.853668][ T2638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.016563][ T2638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.142267][ T2638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.452304][ T1162] chnl_net:caif_netlink_parms(): no params data found [ 924.390006][ T2638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.404696][ T2638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.431076][ T2638] bond0 (unregistering): Released all slaves [ 924.499777][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.506901][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.539346][ T1162] bridge_slave_0: entered allmulticast mode [ 924.555082][ T1162] bridge_slave_0: entered promiscuous mode [ 924.616734][ T2638] hsr_slave_0: left promiscuous mode [ 924.625962][ T2638] hsr_slave_1: left promiscuous mode [ 924.633463][ T2638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.640875][ T2638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.669320][ T2638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.676760][ T2638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.707485][ T2638] veth1_macvtap: left promiscuous mode [ 924.713450][ T2638] veth0_macvtap: left promiscuous mode [ 924.722325][ T2638] veth1_vlan: left promiscuous mode [ 924.735393][ T2638] veth0_vlan: left promiscuous mode [ 924.913829][ T2638] team0 (unregistering): Port device team_slave_1 removed [ 924.924889][ T2638] team0 (unregistering): Port device team_slave_0 removed [ 924.931697][ T1202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10244'. [ 924.985548][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.992779][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.013975][ T1162] bridge_slave_1: entered allmulticast mode [ 925.033129][ T1162] bridge_slave_1: entered promiscuous mode [ 925.065285][ T1205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10245'. [ 925.094562][ T1162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.113881][ T1162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.214161][ T1162] team0: Port device team_slave_0 added [ 925.225817][ T1162] team0: Port device team_slave_1 added [ 925.331362][ T1211] bridge0: entered promiscuous mode [ 925.336616][ T1211] macsec1: entered promiscuous mode [ 925.342630][ T1211] bridge0: port 1(macsec1) entered blocking state [ 925.349135][ T1211] bridge0: port 1(macsec1) entered disabled state [ 925.355669][ T1211] macsec1: entered allmulticast mode [ 925.360973][ T1211] bridge0: entered allmulticast mode [ 925.366846][ T1211] macsec1: left allmulticast mode [ 925.371907][ T1211] bridge0: left allmulticast mode [ 925.378413][ T1211] bridge0: left promiscuous mode [ 925.952995][ T1162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.960054][ T1162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.985954][ T1162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.148468][ T1162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.155962][ T1162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.181988][ T1162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.198149][ T1220] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10248'. [ 926.247260][ T1162] hsr_slave_0: entered promiscuous mode [ 926.254502][ T1162] hsr_slave_1: entered promiscuous mode [ 926.263747][ T1162] debugfs: 'hsr0' already exists in 'hsr' [ 926.269504][ T1162] Cannot create hsr debugfs directory [ 926.550207][ T1162] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 926.566958][ T1162] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 926.576173][ T1162] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 926.585078][ T1162] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 926.640687][ T1162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.655808][ T1162] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.670488][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.677586][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.705402][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.712534][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.790375][ T1162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.802037][ T1239] macsec1: entered promiscuous mode [ 926.807266][ T1239] bridge0: entered promiscuous mode [ 926.813591][ T1239] bridge0: port 1(macsec1) entered blocking state [ 926.820086][ T1239] bridge0: port 1(macsec1) entered disabled state [ 926.826826][ T1239] macsec1: entered allmulticast mode [ 926.832106][ T1239] bridge0: entered allmulticast mode [ 926.844979][ T1239] macsec1: left allmulticast mode [ 926.850180][ T1239] bridge0: left allmulticast mode [ 926.864932][ T1239] bridge0: left promiscuous mode [ 926.975297][ T1162] veth0_vlan: entered promiscuous mode [ 926.983628][ T1162] veth1_vlan: entered promiscuous mode [ 927.000359][ T1162] veth0_macvtap: entered promiscuous mode [ 927.007968][ T1162] veth1_macvtap: entered promiscuous mode [ 927.019563][ T1162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.031713][ T1162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.046814][ T409] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.056802][ T409] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.071288][ T409] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.081735][ T409] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.543696][ T1271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10255'. [ 927.626856][ T1271] bridge_slave_1: left allmulticast mode [ 927.632551][ T1271] bridge_slave_1: left promiscuous mode [ 927.638408][ T1271] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.711700][ T1271] bridge_slave_0: left allmulticast mode [ 927.717469][ T1271] bridge_slave_0: left promiscuous mode [ 927.723135][ T1271] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.765343][ T29] audit: type=1400 audit(1761751382.480:27204): avc: denied { setopt } for pid=1282 comm="syz.1.10258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 928.873793][ T1303] netlink: 'syz.1.10262': attribute type 10 has an invalid length. [ 930.151878][ T1322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10267'. [ 930.966658][ T1331] netlink: 300 bytes leftover after parsing attributes in process `syz.7.10272'. [ 931.898638][ T1350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.951241][ T1350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.109343][ T1355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.189283][ T1355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.946256][ T2638] Bluetooth: hci0: Frame reassembly failed (-84) [ 934.648184][ T1388] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 934.913487][T25565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 935.677203][ T1404] netlink: 'syz.7.10295': attribute type 27 has an invalid length. [ 935.790011][ T1405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 935.907887][ T1404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.923138][ T1404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.957605][ T385] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.967108][ T385] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.981268][ T385] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.997983][ T385] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.534136][ T1426] netlink: 300 bytes leftover after parsing attributes in process `syz.1.10302'. [ 937.472826][ T1447] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 937.492989][ T1447] SELinux: failed to load policy [ 937.542679][ T1450] netlink: 'syz.1.10310': attribute type 27 has an invalid length. [ 937.650292][ T1450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.670535][ T1450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.749808][ T1450] syzkaller0: left promiscuous mode [ 937.755106][ T1450] syzkaller0: left allmulticast mode [ 937.795998][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.836819][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.886024][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.924046][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.048928][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 942.981708][T25565] Bluetooth: hci0: command 0x1003 tx timeout [ 942.987856][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 943.398664][ T1552] bridge0: entered promiscuous mode [ 943.403990][ T1552] macsec1: entered promiscuous mode [ 943.409955][ T1552] bridge0: port 1(macsec1) entered blocking state [ 943.416410][ T1552] bridge0: port 1(macsec1) entered disabled state [ 943.422975][ T1552] macsec1: entered allmulticast mode [ 943.428301][ T1552] bridge0: entered allmulticast mode [ 943.439758][ T1552] macsec1: left allmulticast mode [ 943.444894][ T1552] bridge0: left allmulticast mode [ 943.451852][ T1552] bridge0: left promiscuous mode [ 943.534254][ T409] Bluetooth: hci0: Frame reassembly failed (-84) [ 944.539312][ T1572] netlink: 192 bytes leftover after parsing attributes in process `syz.7.10343'. [ 944.839076][ T1575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10344'. [ 945.420655][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 945.780936][ T1593] bridge0: entered promiscuous mode [ 945.786320][ T1593] macsec1: entered promiscuous mode [ 945.792449][ T1593] bridge0: port 1(macsec1) entered blocking state [ 945.799001][ T1593] bridge0: port 1(macsec1) entered disabled state [ 945.805571][ T1593] macsec1: entered allmulticast mode [ 945.810856][ T1593] bridge0: entered allmulticast mode [ 945.844363][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 945.852009][ T1593] macsec1: left allmulticast mode [ 945.857043][ T1593] bridge0: left allmulticast mode [ 945.862716][ T1593] bridge0: left promiscuous mode [ 945.914729][ T1597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 946.145068][ T1607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.153843][ T1607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.783044][T25565] Bluetooth: hci0: command 0x1003 tx timeout [ 947.783041][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 947.964203][ T29] audit: type=1326 audit(1761751403.676:27205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.4.10361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5efddaefc9 code=0x0 [ 948.160933][ T1635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.169123][ T1635] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.178821][ T1635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 949.188887][ T8067] Bluetooth: hci0: Frame reassembly failed (-84) [ 949.507092][ T1674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.516204][ T1674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.705801][ T1679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10379'. [ 951.135909][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 951.886948][ T29] audit: type=1400 audit(1761751407.738:27206): avc: denied { write } for pid=1720 comm="syz.4.10393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 952.891822][ T1737] netlink: 'syz.1.10399': attribute type 27 has an invalid length. [ 953.178473][ T1744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10396'. [ 953.351453][ T1744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10396'. [ 953.361560][ T2638] Bluetooth: hci0: Frame reassembly failed (-84) [ 953.920725][ T1752] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 955.236472][ T1765] netlink: 300 bytes leftover after parsing attributes in process `syz.2.10406'. [ 955.336512][T25565] Bluetooth: hci0: command 0x1003 tx timeout [ 955.355531][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 956.261761][ T1787] macsec1: entered promiscuous mode [ 956.267023][ T1787] bridge0: entered promiscuous mode [ 956.272763][ T1787] bridge0: port 1(macsec1) entered blocking state [ 956.279215][ T1787] bridge0: port 1(macsec1) entered disabled state [ 956.285753][ T1787] macsec1: entered allmulticast mode [ 956.291040][ T1787] bridge0: entered allmulticast mode [ 956.301242][ T1787] macsec1: left allmulticast mode [ 956.306283][ T1787] bridge0: left allmulticast mode [ 956.311852][ T1787] bridge0: left promiscuous mode [ 956.540813][ T1795] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 957.283585][ T1808] netlink: 300 bytes leftover after parsing attributes in process `syz.9.10420'. [ 957.826291][ T2638] Bluetooth: hci0: Frame reassembly failed (-84) [ 959.756433][T25565] Bluetooth: hci0: command 0x1003 tx timeout [ 959.762849][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 959.781946][ T1858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.834145][ T1858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.037900][ T1862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10440'. [ 960.047066][ T1862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10440'. [ 961.264604][ T2638] Bluetooth: hci0: Frame reassembly failed (-84) [ 963.176527][T25565] Bluetooth: hci0: command 0x1003 tx timeout [ 963.199634][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 963.292708][ T1919] netlink: 'syz.4.10457': attribute type 27 has an invalid length. [ 963.354812][ T1919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.386315][ T1919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.540147][ T8067] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.588061][ T8067] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.657305][ T8067] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.674596][ T8067] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.696014][ T1930] bridge0: entered promiscuous mode [ 963.701474][ T1930] macsec1: entered promiscuous mode [ 963.707428][ T1930] bridge0: port 1(macsec1) entered blocking state [ 963.714254][ T1930] bridge0: port 1(macsec1) entered disabled state [ 963.721025][ T1930] macsec1: entered allmulticast mode [ 963.726293][ T1930] bridge0: entered allmulticast mode [ 963.732574][ T1930] macsec1: left allmulticast mode [ 963.737668][ T1930] bridge0: left allmulticast mode [ 963.743641][ T1930] bridge0: left promiscuous mode [ 966.643271][ T1984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10478'. [ 967.663063][ T2012] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 968.775309][ T2032] netlink: 'syz.7.10493': attribute type 27 has an invalid length. [ 969.106589][ T2034] macsec1: entered promiscuous mode [ 969.111959][ T2034] bridge0: entered promiscuous mode [ 969.117684][ T2034] bridge0: port 1(macsec1) entered blocking state [ 969.124199][ T2034] bridge0: port 1(macsec1) entered disabled state [ 969.151911][ T2034] macsec1: entered allmulticast mode [ 969.157234][ T2034] bridge0: entered allmulticast mode [ 969.187743][ T2034] macsec1: left allmulticast mode [ 969.192808][ T2034] bridge0: left allmulticast mode [ 969.216155][ T2034] bridge0: left promiscuous mode [ 971.302371][ T2133] vhci_hcd: invalid port number 96 [ 971.307588][ T2133] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 971.317617][ T29] audit: type=1326 audit(1761751428.199:27207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2132 comm="syz.2.10508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb1d56efc9 code=0x0 [ 971.718278][ T2120] Bluetooth: hci0: Frame reassembly failed (-84) [ 973.020163][ T2168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 973.036911][ T29] audit: type=1400 audit(1761751430.005:27208): avc: denied { read } for pid=2164 comm="syz.4.10518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 973.451025][ T2177] netlink: 'syz.7.10522': attribute type 27 has an invalid length. [ 973.692291][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 973.692362][T25565] Bluetooth: hci0: command 0x1003 tx timeout [ 973.819334][ T2187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10525'. [ 974.171556][ T2196] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10526'. [ 974.511607][ T2196] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10526'. [ 974.890102][ T2206] macsec1: entered promiscuous mode [ 974.895487][ T2206] bridge0: entered promiscuous mode [ 974.901335][ T2206] bridge0: port 1(macsec1) entered blocking state [ 974.907826][ T2206] bridge0: port 1(macsec1) entered disabled state [ 974.914427][ T2206] macsec1: entered allmulticast mode [ 974.919708][ T2206] bridge0: entered allmulticast mode [ 974.926035][ T2206] macsec1: left allmulticast mode [ 974.931150][ T2206] bridge0: left allmulticast mode [ 974.937468][ T2206] bridge0: left promiscuous mode [ 975.924030][ T2057] Bluetooth: hci0: Frame reassembly failed (-84) [ 976.810804][ T2241] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 977.357676][ T2249] wireguard0: entered promiscuous mode [ 977.363188][ T2249] wireguard0: entered allmulticast mode [ 978.225882][T29441] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 978.852539][ T2257] netlink: 'syz.9.10546': attribute type 27 has an invalid length. [ 979.091394][ T2257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.102128][ T2257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.165916][ T2084] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.199033][ T2084] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.341507][ T2084] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.440057][ T2084] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.542826][ T2271] macsec1: entered promiscuous mode [ 979.548127][ T2271] bridge0: entered promiscuous mode [ 979.637267][ T2271] bridge0: port 1(macsec1) entered blocking state [ 979.643816][ T2271] bridge0: port 1(macsec1) entered disabled state [ 979.740348][ T2271] macsec1: entered allmulticast mode [ 979.745774][ T2271] bridge0: entered allmulticast mode [ 979.768190][ T2271] macsec1: left allmulticast mode [ 979.773295][ T2271] bridge0: left allmulticast mode [ 979.799300][ T2271] bridge0: left promiscuous mode [ 980.393897][ T2288] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10555'. [ 980.403310][ T2288] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10555'. [ 983.324166][ T2350] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10574'. [ 983.364978][ T2350] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10574'. [ 983.422778][ T2343] macsec1: entered promiscuous mode [ 983.428053][ T2343] bridge0: entered promiscuous mode [ 983.434039][ T2343] bridge0: port 1(macsec1) entered blocking state [ 983.440565][ T2343] bridge0: port 1(macsec1) entered disabled state [ 983.452692][ T2343] macsec1: entered allmulticast mode [ 983.458126][ T2343] bridge0: entered allmulticast mode [ 983.488659][ T2343] macsec1: left allmulticast mode [ 983.493715][ T2343] bridge0: left allmulticast mode [ 983.544750][ T2343] bridge0: left promiscuous mode [ 985.023508][ T2376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 986.033677][ T2385] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 990.706978][ T2441] bridge0: entered promiscuous mode [ 990.712259][ T2441] macsec1: entered promiscuous mode [ 990.713122][T21665] usb usb8-port1: attempt power cycle [ 990.718406][ T2441] bridge0: port 1(macsec1) entered blocking state [ 990.729342][ T2441] bridge0: port 1(macsec1) entered disabled state [ 990.735934][ T2441] macsec1: entered allmulticast mode [ 990.741213][ T2441] bridge0: entered allmulticast mode [ 990.747440][ T2441] macsec1: left allmulticast mode [ 990.752472][ T2441] bridge0: left allmulticast mode [ 990.772033][ T2441] bridge0: left promiscuous mode [ 991.733931][ T2466] macsec1: entered promiscuous mode [ 991.739180][ T2466] bridge0: entered promiscuous mode [ 991.770357][ T2466] bridge0: port 1(macsec1) entered blocking state [ 991.776880][ T2466] bridge0: port 1(macsec1) entered disabled state [ 991.783842][ T2466] macsec1: entered allmulticast mode [ 991.789219][ T2466] bridge0: entered allmulticast mode [ 991.795146][ T2466] macsec1: left allmulticast mode [ 991.800172][ T2466] bridge0: left allmulticast mode [ 991.806516][ T2466] bridge0: left promiscuous mode [ 992.306631][ T2485] futex_wake_op: syz.4.10618 tries to shift op by -1; fix this program [ 992.774060][T21665] usb usb8-port1: unable to enumerate USB device [ 993.600197][ T2499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.610494][ T2499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.437424][ T2528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10629'. [ 996.965897][ T2571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.974703][ T2571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.311413][ T2577] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 997.574140][ T2582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.633879][ T2582] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.667225][ T2582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 997.880610][ T29] audit: type=1400 audit(1761751456.082:27209): avc: denied { write } for pid=2586 comm="syz.1.10649" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 998.805127][ T2594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.833126][ T2594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.248200][ T2620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.256082][ T2620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.264489][ T2620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1000.295011][ T2622] netlink: 248 bytes leftover after parsing attributes in process `syz.9.10661'. [ 1002.384340][ T2659] netlink: 248 bytes leftover after parsing attributes in process `syz.2.10672'. [ 1002.459055][ T2661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.467564][ T2661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.018989][ T2667] netlink: 'syz.9.10675': attribute type 27 has an invalid length. [ 1003.984682][ T2681] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1005.806499][ T2718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.814941][ T2718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.910958][ T2722] hub 6-0:1.0: USB hub found [ 1005.915811][ T2722] hub 6-0:1.0: 8 ports detected [ 1006.421714][ T2733] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1008.779983][ T2817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2817 comm=syz.7.10705 [ 1009.516074][ T2828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.533483][ T2828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.494477][ T2850] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10711'. [ 1010.566609][ T2850] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10711'. [ 1010.661668][ T2853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.670187][ T2853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.497884][ T2896] bridge0: entered promiscuous mode [ 1014.503308][ T2896] macsec1: entered promiscuous mode [ 1014.509794][ T2896] bridge0: port 1(macsec1) entered blocking state [ 1014.516248][ T2896] bridge0: port 1(macsec1) entered disabled state [ 1014.522865][ T2896] macsec1: entered allmulticast mode [ 1014.528144][ T2896] bridge0: entered allmulticast mode [ 1014.634275][ T2896] macsec1: left allmulticast mode [ 1014.639368][ T2896] bridge0: left allmulticast mode [ 1014.645069][ T2896] bridge0: left promiscuous mode [ 1014.908216][ T2899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10724'. [ 1014.958071][ T2899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10724'. [ 1017.222915][ T2924] netlink: 'syz.9.10733': attribute type 10 has an invalid length. [ 1017.507994][ T2928] netlink: 'syz.9.10733': attribute type 6 has an invalid length. [ 1017.516027][ T2928] netlink: 'syz.9.10733': attribute type 7 has an invalid length. [ 1017.523917][ T2928] netlink: 'syz.9.10733': attribute type 8 has an invalid length. [ 1018.745944][ T2938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1018.762307][ T2940] netlink: 'syz.4.10738': attribute type 27 has an invalid length. [ 1020.654032][ T2970] macsec1: entered promiscuous mode [ 1020.659285][ T2970] bridge0: entered promiscuous mode [ 1020.665752][ T2970] bridge0: port 1(macsec1) entered blocking state [ 1020.672282][ T2970] bridge0: port 1(macsec1) entered disabled state [ 1020.678883][ T2970] macsec1: entered allmulticast mode [ 1020.684254][ T2970] bridge0: entered allmulticast mode [ 1020.690070][ T2970] macsec1: left allmulticast mode [ 1020.695214][ T2970] bridge0: left allmulticast mode [ 1020.701179][ T2970] bridge0: left promiscuous mode [ 1021.277827][ T2973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.286540][ T2973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.471314][ T29] audit: type=1400 audit(1761751481.896:27210): avc: denied { mount } for pid=2968 comm="syz.9.10746" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1022.703761][ T2983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.712433][ T2983] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.723492][ T2983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1024.709628][ T3029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10762'. [ 1024.718843][ T3029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10762'. [ 1027.997403][ T3084] macsec1: entered promiscuous mode [ 1028.002746][ T3084] bridge0: entered promiscuous mode [ 1028.008446][ T3084] bridge0: port 1(macsec1) entered blocking state [ 1028.014867][ T3084] bridge0: port 1(macsec1) entered disabled state [ 1028.021389][ T3084] macsec1: entered allmulticast mode [ 1028.026725][ T3084] bridge0: entered allmulticast mode [ 1028.032619][ T3084] macsec1: left allmulticast mode [ 1028.037996][ T3084] bridge0: left allmulticast mode [ 1028.043617][ T3084] bridge0: left promiscuous mode [ 1028.135762][ T3085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.231857][ T3085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.752609][ T29] audit: type=1400 audit(1761751488.499:27211): avc: denied { nlmsg_write } for pid=3091 comm="syz.1.10780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1028.938997][ T3095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.968148][ T3095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.570639][ T3135] macsec1: entered promiscuous mode [ 1031.576017][ T3135] bridge0: entered promiscuous mode [ 1031.581969][ T3135] bridge0: port 1(macsec1) entered blocking state [ 1031.588475][ T3135] bridge0: port 1(macsec1) entered disabled state [ 1031.595151][ T3135] macsec1: entered allmulticast mode [ 1031.600490][ T3135] bridge0: entered allmulticast mode [ 1031.610300][ T3135] macsec1: left allmulticast mode [ 1031.615355][ T3135] bridge0: left allmulticast mode [ 1031.621386][ T3135] bridge0: left promiscuous mode [ 1032.644450][ T3171] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1032.989282][ T3173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.997707][ T3173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.302094][ T3178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.310573][ T3178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.527195][ T3196] macsec1: entered promiscuous mode [ 1034.532439][ T3196] bridge0: entered promiscuous mode [ 1034.538517][ T3196] bridge0: port 1(macsec1) entered blocking state [ 1034.545141][ T3196] bridge0: port 1(macsec1) entered disabled state [ 1034.551812][ T3196] macsec1: entered allmulticast mode [ 1034.557102][ T3196] bridge0: entered allmulticast mode [ 1034.609206][ T3196] macsec1: left allmulticast mode [ 1034.614359][ T3196] bridge0: left allmulticast mode [ 1034.620101][ T3196] bridge0: left promiscuous mode [ 1035.179621][ T3204] netlink: 'syz.7.10810': attribute type 27 has an invalid length. [ 1036.057450][ T3223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.099115][ T3223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.206893][ T3229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.215046][ T3229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.225433][ T3229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1036.293512][ T3237] netlink: 'syz.7.10822': attribute type 27 has an invalid length. [ 1036.684714][ T3245] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1037.129796][ T3256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3256 comm=syz.9.10829 [ 1037.718783][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.736196][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.764074][ T3269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1038.171410][ T29] audit: type=1326 audit(1761751498.378:27212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3265 comm="syz.7.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b14befc9 code=0x7fc00000 [ 1038.195109][ T29] audit: type=1326 audit(1761751498.378:27213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3265 comm="syz.7.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7b14befc9 code=0x7fc00000 [ 1038.218664][ T29] audit: type=1326 audit(1761751498.378:27214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3265 comm="syz.7.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b14befc9 code=0x7fc00000 [ 1038.468132][ T29] audit: type=1400 audit(1761751498.693:27215): avc: denied { getopt } for pid=3285 comm="syz.9.10839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1039.175042][ T3300] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1039.536973][ T3315] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10848'. [ 1041.280004][ T3346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.287783][ T3346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.296745][ T3346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1041.365640][ T3350] macsec1: entered promiscuous mode [ 1041.370877][ T3350] bridge0: entered promiscuous mode [ 1041.376727][ T3350] bridge0: port 1(macsec1) entered blocking state [ 1041.383268][ T3350] bridge0: port 1(macsec1) entered disabled state [ 1041.389866][ T3350] macsec1: entered allmulticast mode [ 1041.395169][ T3350] bridge0: entered allmulticast mode [ 1041.401168][ T3350] macsec1: left allmulticast mode [ 1041.406191][ T3350] bridge0: left allmulticast mode [ 1041.412014][ T3350] bridge0: left promiscuous mode [ 1042.695818][ T3383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.704437][ T3383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.703270][ T3430] vlan2: entered allmulticast mode [ 1045.708494][ T3430] dummy0: entered allmulticast mode [ 1046.626962][ T3449] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10884'. [ 1046.660245][ T3449] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10884'. [ 1046.710045][ T3452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.814865][ T3452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.244117][ T3460] netlink: 'syz.2.10891': attribute type 27 has an invalid length. [ 1047.362653][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.397012][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.440174][ T2098] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.458882][ T2089] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.468542][ T2089] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.486501][ T2089] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.510933][ T29] audit: type=1400 audit(1761751510.283:27216): avc: denied { bind } for pid=3499 comm="syz.7.10906" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1049.531392][ T29] audit: type=1400 audit(1761751510.283:27217): avc: denied { name_bind } for pid=3499 comm="syz.7.10906" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1049.553398][ T29] audit: type=1400 audit(1761751510.283:27218): avc: denied { node_bind } for pid=3499 comm="syz.7.10906" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1049.908489][ T3518] macsec1: entered promiscuous mode [ 1049.913715][ T3518] bridge0: entered promiscuous mode [ 1049.919640][ T3518] bridge0: port 1(macsec1) entered blocking state [ 1049.926069][ T3518] bridge0: port 1(macsec1) entered disabled state [ 1049.932700][ T3518] macsec1: entered allmulticast mode [ 1049.938018][ T3518] bridge0: entered allmulticast mode [ 1049.944497][ T3518] macsec1: left allmulticast mode [ 1049.949667][ T3518] bridge0: left allmulticast mode [ 1049.955703][ T3518] bridge0: left promiscuous mode [ 1050.303897][ T3525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.312545][ T3525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.474246][ T3530] x_tables: duplicate underflow at hook 3 [ 1051.078760][ T29] audit: type=1326 audit(1761751511.889:27219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.2.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1d56efc9 code=0x7ffc0000 [ 1051.102423][ T29] audit: type=1326 audit(1761751511.889:27220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.2.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1d56efc9 code=0x7ffc0000 [ 1051.126001][ T29] audit: type=1326 audit(1761751511.889:27221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.2.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb1d56efc9 code=0x7ffc0000 [ 1051.149596][ T29] audit: type=1326 audit(1761751511.889:27222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.2.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1d56efc9 code=0x7ffc0000 [ 1051.173345][ T29] audit: type=1326 audit(1761751511.889:27223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.2.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1d56efc9 code=0x7ffc0000 [ 1051.196900][ T29] audit: type=1326 audit(1761751511.889:27224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.2.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb1d56efc9 code=0x7ffc0000 [ 1051.220725][ T29] audit: type=1326 audit(1761751511.889:27225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.2.10916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb1d56efc9 code=0x7ffc0000 [ 1051.326839][ T3549] netlink: 'syz.1.10919': attribute type 27 has an invalid length. [ 1053.547286][ T3589] tipc: Enabling of bearer rejected, failed to enable media [ 1053.853528][ T3594] netlink: 'syz.2.10932': attribute type 10 has an invalid length. [ 1054.063002][ T3598] netlink: 'syz.2.10932': attribute type 6 has an invalid length. [ 1054.071008][ T3598] netlink: 'syz.2.10932': attribute type 7 has an invalid length. [ 1054.078836][ T3598] netlink: 'syz.2.10932': attribute type 8 has an invalid length. [ 1054.870874][ T3609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.921403][ T3609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.168831][ T3618] netlink: 'syz.1.10938': attribute type 27 has an invalid length. [ 1055.559983][ T3622] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10940'. [ 1057.341722][ T3636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1057.508370][ T3646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.516375][ T3646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.620590][ T3646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1058.223393][ T3657] netlink: 'syz.9.10951': attribute type 27 has an invalid length. [ 1059.143616][ T3680] macsec1: entered promiscuous mode [ 1059.149093][ T3680] bridge0: entered promiscuous mode [ 1059.251683][ T3684] netlink: 'syz.1.10960': attribute type 10 has an invalid length. [ 1059.271178][ T3686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.279667][ T3686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.385950][ T3687] netlink: 'syz.1.10960': attribute type 6 has an invalid length. [ 1059.393789][ T3687] netlink: 'syz.1.10960': attribute type 7 has an invalid length. [ 1059.401671][ T3687] netlink: 'syz.1.10960': attribute type 8 has an invalid length. [ 1059.499415][ T3691] netlink: 'syz.7.10963': attribute type 27 has an invalid length. [ 1059.838190][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.847233][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.390057][ T3729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.398649][ T3729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.486693][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1062.486707][ T29] audit: type=1400 audit(1761751523.909:27230): avc: denied { module_load } for pid=3759 comm="syz.4.10987" path="/sys/power/wakeup_count" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1062.520987][ T3756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.529721][ T3756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.392429][ T3781] macsec1: entered promiscuous mode [ 1063.397687][ T3781] bridge0: entered promiscuous mode [ 1063.403537][ T3781] bridge0: port 1(macsec1) entered blocking state [ 1063.410100][ T3781] bridge0: port 1(macsec1) entered disabled state [ 1063.416717][ T3781] macsec1: entered allmulticast mode [ 1063.422009][ T3781] bridge0: entered allmulticast mode [ 1063.428347][ T3781] macsec1: left allmulticast mode [ 1063.433393][ T3781] bridge0: left allmulticast mode [ 1063.439131][ T3781] bridge0: left promiscuous mode [ 1063.972093][ T3790] netlink: 'syz.9.10996': attribute type 10 has an invalid length. [ 1064.078736][ T29] audit: type=1400 audit(1761751525.578:27231): avc: denied { ioctl } for pid=3796 comm="syz.4.10999" path="socket:[133179]" dev="sockfs" ino=133179 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1064.110657][ T3793] netlink: 'syz.9.10996': attribute type 6 has an invalid length. [ 1064.118519][ T3793] netlink: 'syz.9.10996': attribute type 7 has an invalid length. [ 1064.126399][ T3793] netlink: 'syz.9.10996': attribute type 8 has an invalid length. [ 1065.027149][ T3812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.251141][ T3812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.304763][ T3812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1066.090235][ T3840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.098766][ T3840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.554113][ T3852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.632371][ T3852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.658857][ T3867] 9pnet_fd: Insufficient options for proto=fd [ 1069.142589][ T3886] netlink: 'syz.7.11028': attribute type 27 has an invalid length. [ 1069.221696][ T3890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.233460][ T3890] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.265049][ T3890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1070.937368][ T3929] macsec1: entered promiscuous mode [ 1070.942765][ T3929] dummy0: entered promiscuous mode [ 1071.524288][ T3929] dummy0: left promiscuous mode [ 1071.854932][ T3932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.863657][ T3932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.307913][ T3960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.316448][ T3960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.326680][ T3960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1073.398972][ T29] audit: type=1400 audit(1761751535.362:27232): avc: denied { mount } for pid=3955 comm="syz.9.11051" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1073.945235][ T29] audit: type=1400 audit(1761751535.929:27233): avc: denied { execute } for pid=3969 comm="syz.1.11056" name="file0" dev="ramfs" ino=133016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1073.968255][ T29] audit: type=1400 audit(1761751535.929:27234): avc: denied { execute_no_trans } for pid=3969 comm="syz.1.11056" path="/file0" dev="ramfs" ino=133016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1074.279343][ T3979] netlink: 'syz.9.11058': attribute type 10 has an invalid length. [ 1074.489969][ T3983] netlink: 'syz.9.11058': attribute type 6 has an invalid length. [ 1074.497837][ T3983] netlink: 'syz.9.11058': attribute type 7 has an invalid length. [ 1074.505689][ T3983] netlink: 'syz.9.11058': attribute type 8 has an invalid length. [ 1076.407506][ T4027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1076.978754][ T29] audit: type=1400 audit(1761751539.089:27235): avc: denied { bind } for pid=4044 comm="syz.7.11080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1076.998294][ T29] audit: type=1400 audit(1761751539.089:27236): avc: denied { name_bind } for pid=4044 comm="syz.7.11080" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1077.019074][ T29] audit: type=1400 audit(1761751539.089:27237): avc: denied { node_bind } for pid=4044 comm="syz.7.11080" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1077.039784][ T29] audit: type=1400 audit(1761751539.100:27238): avc: denied { read } for pid=4044 comm="syz.7.11080" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1077.060181][ T29] audit: type=1400 audit(1761751539.100:27239): avc: denied { connect } for pid=4044 comm="syz.7.11080" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1077.203796][ T29] audit: type=1400 audit(1761751539.341:27240): avc: denied { checkpoint_restore } for pid=4047 comm="syz.7.11081" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1077.432127][ T29] audit: type=1400 audit(1761751539.593:27241): avc: denied { bind } for pid=4058 comm="syz.2.11087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1077.499502][ T4065] netlink: 'syz.2.11089': attribute type 10 has an invalid length. [ 1077.609754][ T4065] netlink: 'syz.2.11089': attribute type 6 has an invalid length. [ 1077.617610][ T4065] netlink: 'syz.2.11089': attribute type 7 has an invalid length. [ 1077.625415][ T4065] netlink: 'syz.2.11089': attribute type 8 has an invalid length. [ 1077.840520][ T4077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.894108][ T4077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.045148][ T4082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.093744][ T4082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.477090][ T4104] netlink: 'syz.9.11103': attribute type 10 has an invalid length. [ 1079.568206][ T4104] netlink: 'syz.9.11103': attribute type 6 has an invalid length. [ 1079.576092][ T4104] netlink: 'syz.9.11103': attribute type 7 has an invalid length. [ 1079.583963][ T4104] netlink: 'syz.9.11103': attribute type 8 has an invalid length. [ 1082.295995][ T4158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1083.158311][ T4185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1083.754083][ T4216] vlan2: entered allmulticast mode [ 1083.759262][ T4216] dummy0: entered allmulticast mode [ 1084.426278][ T4221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.483403][ T4221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.514133][ T4221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1084.586025][ T29] audit: type=1400 audit(1761751547.078:27242): avc: denied { associate } for pid=4225 comm="syz.7.11149" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1085.611710][ T4254] vlan2: entered allmulticast mode [ 1086.537061][ T29] audit: type=1400 audit(1761751549.125:27243): avc: denied { setopt } for pid=4265 comm="syz.7.11164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1087.293560][ T29] audit: type=1400 audit(1761751549.944:27244): avc: denied { bind } for pid=4281 comm="syz.7.11169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1087.754324][ T4287] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11171'. [ 1088.043355][ T29] audit: type=1400 audit(1761751550.732:27245): avc: denied { mounton } for pid=4300 comm="syz.1.11176" path="/proc/968/task" dev="proc" ino=134480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1088.121546][ T4304] vlan2: entered allmulticast mode [ 1088.126724][ T4304] dummy0: entered allmulticast mode [ 1089.758380][ T4325] veth1_to_bond: entered allmulticast mode [ 1089.781615][ T4324] veth1_to_bond: left allmulticast mode [ 1089.801510][ T4329] netlink: 'syz.4.11185': attribute type 10 has an invalid length. [ 1090.053931][ T4337] netlink: 'syz.4.11185': attribute type 6 has an invalid length. [ 1090.061890][ T4337] netlink: 'syz.4.11185': attribute type 7 has an invalid length. [ 1090.069772][ T4337] netlink: 'syz.4.11185': attribute type 8 has an invalid length. [ 1090.373742][ T4346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11187'. [ 1090.805189][ T4346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11187'. [ 1091.449721][T21646] usb usb8-port1: attempt power cycle [ 1091.610596][ T4370] hub 6-0:1.0: USB hub found [ 1091.615456][ T4370] hub 6-0:1.0: 8 ports detected [ 1093.791560][T21646] usb usb8-port1: unable to enumerate USB device [ 1094.088994][ T4418] hub 6-0:1.0: USB hub found [ 1094.094082][ T4418] hub 6-0:1.0: 8 ports detected [ 1095.258862][ T4435] netlink: 'syz.7.11221': attribute type 10 has an invalid length. [ 1095.489834][ T4448] netlink: 'syz.7.11221': attribute type 6 has an invalid length. [ 1095.497735][ T4448] netlink: 'syz.7.11221': attribute type 7 has an invalid length. [ 1095.505527][ T4448] netlink: 'syz.7.11221': attribute type 8 has an invalid length. [ 1095.827230][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11227'. [ 1095.935917][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11227'. [ 1096.504582][ T4469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.513524][ T4469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.437889][ T4498] netlink: 'syz.1.11242': attribute type 10 has an invalid length. [ 1097.745924][ T4508] netlink: 'syz.1.11242': attribute type 6 has an invalid length. [ 1097.745942][ T4508] netlink: 'syz.1.11242': attribute type 7 has an invalid length. [ 1097.745954][ T4508] netlink: 'syz.1.11242': attribute type 8 has an invalid length. [ 1098.634766][ T4520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.643405][ T4520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.788572][ T4517] tap0: tun_chr_ioctl cmd 35108 [ 1098.794388][ T4517] tap0: tun_chr_ioctl cmd 1074025677 [ 1098.799881][ T4517] tap0: linktype set to 1 [ 1099.449806][ T4526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.478027][ T4526] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.506129][ T4526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1100.579845][ T4564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11264'. [ 1100.598207][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.606737][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.441095][ T4589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.455458][ T4589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.726611][ T4595] macsec1: entered promiscuous mode [ 1101.731844][ T4595] bridge0: entered promiscuous mode [ 1101.737782][ T4595] bridge0: port 1(macsec1) entered blocking state [ 1101.744309][ T4595] bridge0: port 1(macsec1) entered disabled state [ 1101.751229][ T4595] macsec1: entered allmulticast mode [ 1101.756705][ T4595] bridge0: entered allmulticast mode [ 1101.834480][ T4595] macsec1: left allmulticast mode [ 1101.839533][ T4595] bridge0: left allmulticast mode [ 1101.845479][ T4595] bridge0: left promiscuous mode [ 1101.904730][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.913740][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.405139][ T29] audit: type=1400 audit(1761751565.817:27246): avc: denied { create } for pid=4607 comm="syz.1.11279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1102.838260][ T4619] hub 6-0:1.0: USB hub found [ 1102.842975][ T4619] hub 6-0:1.0: 8 ports detected [ 1103.594407][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11283'. [ 1104.474413][ T4639] vlan2: entered allmulticast mode [ 1104.479596][ T4639] dummy0: entered allmulticast mode [ 1106.344967][ T4668] netlink: 'syz.1.11298': attribute type 27 has an invalid length. [ 1106.404706][ T4668] vlan2: left allmulticast mode [ 1106.417934][ T4668] dummy0: left allmulticast mode [ 1106.513149][ T29] audit: type=1400 audit(1761751570.121:27247): avc: denied { remount } for pid=4669 comm="syz.1.11299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1106.542729][ T29] audit: type=1400 audit(1761751570.153:27248): avc: denied { unmount } for pid=31861 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1106.944385][ T4688] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1107.169281][ T4693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1107.234273][ T4700] netlink: 'syz.7.11310': attribute type 27 has an invalid length. [ 1107.259373][ T4700] vlan2: left allmulticast mode [ 1107.305239][ T29] audit: type=1400 audit(1761751570.961:27249): avc: denied { add_name } for pid=4702 comm="syz.7.11311" name="hugetlb.1GB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1107.328373][ T29] audit: type=1400 audit(1761751570.961:27250): avc: denied { create } for pid=4702 comm="syz.7.11311" name="hugetlb.1GB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1107.374225][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11312'. [ 1107.383355][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11312'. [ 1108.501857][ T4725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1108.775839][ T4735] netlink: 'syz.1.11322': attribute type 27 has an invalid length. [ 1108.904828][T21645] hid_parser_main: 8 callbacks suppressed [ 1108.904850][T21645] hid-generic 0003:0003:0000.002C: unknown main item tag 0x0 [ 1108.918153][T21645] hid-generic 0003:0003:0000.002C: unknown main item tag 0x0 [ 1108.925646][T21645] hid-generic 0003:0003:0000.002C: unknown main item tag 0x0 [ 1108.933075][T21645] hid-generic 0003:0003:0000.002C: unknown main item tag 0x0 [ 1108.940518][T21645] hid-generic 0003:0003:0000.002C: unknown main item tag 0x0 [ 1108.947952][T21645] hid-generic 0003:0003:0000.002C: unknown main item tag 0x0 [ 1108.955343][T21645] hid-generic 0003:0003:0000.002C: unknown main item tag 0x0 [ 1108.962765][T21645] hid-generic 0003:0003:0000.002C: unknown main item tag 0x0 [ 1108.970177][T21645] hid-generic 0003:0003:0000.002C: unknown main item tag 0x0 [ 1108.977599][T21645] hid-generic 0003:0003:0000.002C: unknown main item tag 0x0 [ 1109.006538][T21645] hid-generic 0003:0003:0000.002C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1109.016557][ T4747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.025186][ T4747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.255778][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.271584][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.172605][ T4772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.181986][ T4772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.083008][ T4794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11339'. [ 1111.092237][ T4794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11339'. [ 1111.140869][ T29] audit: type=1400 audit(1761751574.982:27251): avc: denied { nlmsg_read } for pid=4795 comm="syz.2.11344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1111.204865][ T4798] netlink: 'syz.2.11345': attribute type 27 has an invalid length. [ 1111.285477][ T4798] bridge0: left promiscuous mode [ 1111.318512][ T4798] macsec1: left promiscuous mode [ 1111.324950][ T4798] vlan2: left allmulticast mode [ 1111.330069][ T4798] dummy0: left allmulticast mode [ 1112.123873][ T4821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11351'. [ 1112.132966][ T4821] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 1112.433800][ T4833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1113.808899][ T4882] netlink: 104 bytes leftover after parsing attributes in process `syz.9.11373'. [ 1113.854670][ T4886] netlink: 2836 bytes leftover after parsing attributes in process `syz.2.11374'. [ 1115.432239][ T4928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1116.561925][ T4964] netlink: 'syz.2.11403': attribute type 27 has an invalid length. [ 1116.846659][ T4996] netlink: 'syz.4.11416': attribute type 27 has an invalid length. [ 1116.975240][ T4996] vlan2: left allmulticast mode [ 1116.981071][ T4996] dummy0: left allmulticast mode [ 1116.991046][ T4999] macsec1: entered promiscuous mode [ 1116.996298][ T4999] bridge0: entered promiscuous mode [ 1117.002103][ T4999] bridge0: port 1(macsec1) entered blocking state [ 1117.008545][ T4999] bridge0: port 1(macsec1) entered disabled state [ 1117.015206][ T4999] macsec1: entered allmulticast mode [ 1117.020495][ T4999] bridge0: entered allmulticast mode [ 1117.027717][ T4999] macsec1: left allmulticast mode [ 1117.032748][ T4999] bridge0: left allmulticast mode [ 1117.039784][ T4999] bridge0: left promiscuous mode [ 1118.977119][ T29] audit: type=1400 audit(1761751583.202:27252): avc: denied { write } for pid=5035 comm="syz.1.11430" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1120.614912][ T5070] vlan2: entered allmulticast mode [ 1120.620094][ T5070] dummy0: entered allmulticast mode [ 1121.525231][ T5088] netlink: 'syz.9.11448': attribute type 27 has an invalid length. [ 1121.541821][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.561378][ T5089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.571256][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.598481][ T5086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1121.655271][ T5089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.668557][ T5088] vlan2: left allmulticast mode [ 1121.679866][ T5088] dummy0: left allmulticast mode [ 1122.166336][ T5101] netlink: 32 bytes leftover after parsing attributes in process `syz.9.11450'. [ 1122.346175][ T5101] netlink: 32 bytes leftover after parsing attributes in process `syz.9.11450'. [ 1123.837324][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.845678][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.858296][ T5125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1124.340312][ T5146] xt_limit: Overflow, try lower: 167772/2147483648 [ 1124.348520][ T5151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11466'. [ 1125.054112][ T5169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1125.388040][ T29] audit: type=1400 audit(1761751589.868:27253): avc: denied { listen } for pid=5164 comm="syz.4.11471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1126.624374][ T29] audit: type=1400 audit(1761751591.233:27254): avc: denied { read } for pid=2989 comm="acpid" name="event4" dev="devtmpfs" ino=1358 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1126.646482][ T29] audit: type=1400 audit(1761751591.233:27255): avc: denied { open } for pid=2989 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1358 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1126.669364][ T29] audit: type=1400 audit(1761751591.233:27256): avc: denied { ioctl } for pid=2989 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=1358 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1126.741956][ T5238] netlink: 72 bytes leftover after parsing attributes in process `syz.9.11501'. [ 1126.891411][ T5246] netlink: 200 bytes leftover after parsing attributes in process `syz.2.11503'. [ 1126.912698][ T5248] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1127.046162][ T5252] hub 6-0:1.0: USB hub found [ 1127.050886][ T5252] hub 6-0:1.0: 8 ports detected [ 1127.499963][ T5256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11505'. [ 1127.619269][ T5256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11505'. [ 1127.807511][ T29] audit: type=1400 audit(1761751592.472:27257): avc: denied { setattr } for pid=5263 comm="syz.4.11509" name="" dev="pipefs" ino=120841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1128.390472][ T5284] netlink: 'syz.4.11516': attribute type 27 has an invalid length. [ 1128.448173][ T5289] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11518'. [ 1128.457467][ T5289] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1128.677269][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11521'. [ 1128.760492][T21659] usb usb8-port1: attempt power cycle [ 1129.142066][ T5314] netlink: 'syz.7.11528': attribute type 27 has an invalid length. [ 1129.182083][ T5316] netlink: 72 bytes leftover after parsing attributes in process `syz.7.11529'. [ 1129.191514][ T5316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11529'. [ 1129.462326][ T5328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11533'. [ 1130.306673][ T5347] netlink: 'syz.4.11540': attribute type 27 has an invalid length. [ 1130.854053][ T5377] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11551'. [ 1130.877453][ T5379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.886241][ T5379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.913556][T21659] usb usb8-port1: unable to enumerate USB device [ 1131.584676][ T5395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.603625][ T5395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.831950][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11560'. [ 1131.912173][ T5412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.920704][ T5412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.076478][ T5423] netlink: 'syz.2.11568': attribute type 27 has an invalid length. [ 1133.658857][ T5456] macsec1: entered promiscuous mode [ 1133.664091][ T5456] bridge0: entered promiscuous mode [ 1133.670046][ T5456] bridge0: port 1(macsec1) entered blocking state [ 1133.676559][ T5456] bridge0: port 1(macsec1) entered disabled state [ 1133.683214][ T5456] macsec1: entered allmulticast mode [ 1133.688533][ T5456] bridge0: entered allmulticast mode [ 1133.738793][ T5456] macsec1: left allmulticast mode [ 1133.743940][ T5456] bridge0: left allmulticast mode [ 1133.750070][ T5456] bridge0: left promiscuous mode [ 1134.409322][ T5464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.454179][ T5464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.889343][ T5495] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11591'. [ 1136.043786][ T5502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11593'. [ 1136.059370][ T5502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11593'. [ 1136.273089][ T29] audit: type=1400 audit(1761751601.363:27258): avc: denied { name_bind } for pid=5507 comm="syz.2.11597" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1136.470499][ T5514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.483988][ T5514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.551205][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11605'. [ 1138.910679][ T29] audit: type=1400 audit(1761751604.135:27259): avc: denied { listen } for pid=5556 comm="syz.7.11613" lport=35066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1139.263915][ T5565] netlink: 'syz.9.11615': attribute type 27 has an invalid length. [ 1140.377941][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11620'. [ 1140.567140][ T5596] hub 1-0:1.0: USB hub found [ 1140.582750][ T5596] hub 1-0:1.0: 8 ports detected [ 1140.692728][ T5602] netlink: 'syz.4.11627': attribute type 27 has an invalid length. [ 1141.056144][ T5623] netlink: 'syz.4.11637': attribute type 10 has an invalid length. [ 1141.194025][ T5613] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11629'. [ 1141.229299][ T5613] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11629'. [ 1141.259133][ T5627] netlink: 'syz.4.11637': attribute type 6 has an invalid length. [ 1141.266961][ T5627] netlink: 'syz.4.11637': attribute type 7 has an invalid length. [ 1141.274912][ T5627] netlink: 'syz.4.11637': attribute type 8 has an invalid length. [ 1141.339327][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11636'. [ 1143.608482][ T5677] netlink: 'syz.9.11653': attribute type 10 has an invalid length. [ 1143.943911][ T5682] netlink: 'syz.9.11653': attribute type 6 has an invalid length. [ 1143.951773][ T5682] netlink: 'syz.9.11653': attribute type 7 has an invalid length. [ 1143.959651][ T5682] netlink: 'syz.9.11653': attribute type 8 has an invalid length. [ 1144.319501][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.353483][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.450297][ T5701] netlink: 'syz.4.11659': attribute type 27 has an invalid length. [ 1147.208546][ T5732] netlink: 160 bytes leftover after parsing attributes in process `syz.2.11668'. [ 1147.218211][ T5732] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1147.266046][ T29] audit: type=1400 audit(1761751612.911:27260): avc: denied { setattr } for pid=5733 comm="syz.1.11669" name="NETLINK" dev="sockfs" ino=138425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1147.322534][ T5736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.348104][ T5736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.049157][ T5749] netlink: 60 bytes leftover after parsing attributes in process `syz.7.11674'. [ 1148.058407][ T5749] unsupported nlmsg_type 40 [ 1148.373527][ T5761] netlink: 'syz.9.11680': attribute type 27 has an invalid length. [ 1148.518146][ T5766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11675'. [ 1148.568306][ T5766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11675'. [ 1149.097639][ T5779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11686'. [ 1149.933321][ T5796] netlink: 'syz.7.11692': attribute type 27 has an invalid length. [ 1150.291235][ T5806] netlink: 'syz.4.11696': attribute type 10 has an invalid length. [ 1150.622931][ T5814] netlink: 'syz.4.11696': attribute type 6 has an invalid length. [ 1150.630924][ T5814] netlink: 'syz.4.11696': attribute type 7 has an invalid length. [ 1150.638752][ T5814] netlink: 'syz.4.11696': attribute type 8 has an invalid length. [ 1151.357102][ T5824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.512838][ T5824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.392045][ T5835] netlink: 'syz.2.11704': attribute type 27 has an invalid length. [ 1153.021701][ T29] audit: type=1326 audit(1761751618.948:27261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b14befc9 code=0x7ffc0000 [ 1153.045395][ T29] audit: type=1326 audit(1761751618.948:27262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b14befc9 code=0x7ffc0000 [ 1153.069018][ T29] audit: type=1326 audit(1761751618.948:27263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc7b14befc9 code=0x7ffc0000 [ 1153.098384][ T29] audit: type=1326 audit(1761751619.032:27264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b14befc9 code=0x7ffc0000 [ 1153.122004][ T29] audit: type=1326 audit(1761751619.032:27265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b14befc9 code=0x7ffc0000 [ 1153.145631][ T29] audit: type=1326 audit(1761751619.032:27266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc7b14befc9 code=0x7ffc0000 [ 1153.169221][ T29] audit: type=1326 audit(1761751619.032:27267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.7.11709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b14befc9 code=0x7ffc0000 [ 1153.172402][ T5857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.203878][ T5857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.054933][ T5875] netlink: 'syz.2.11717': attribute type 27 has an invalid length. [ 1154.110062][ T5877] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11719'. [ 1154.643878][ T5902] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11725'. [ 1155.814144][ T29] audit: type=1400 audit(1761751621.887:27268): avc: denied { shutdown } for pid=5932 comm="syz.4.11738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1156.996436][ T2080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.015305][ T2080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.031360][ T2080] bond0 (unregistering): Released all slaves [ 1157.082327][ T5976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.100867][ T2080] hsr_slave_0: left promiscuous mode [ 1157.106742][ T2080] hsr_slave_1: left promiscuous mode [ 1157.111605][ T5976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.118476][ T2080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.132117][ T2080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1157.202000][ T2080] team0 (unregistering): Port device team_slave_1 removed [ 1157.211690][ T2080] team0 (unregistering): Port device team_slave_0 removed [ 1157.258672][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11755'. [ 1157.338503][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 1157.404906][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.411998][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.491034][ T5958] bridge_slave_0: entered allmulticast mode [ 1157.497693][ T5958] bridge_slave_0: entered promiscuous mode [ 1157.518302][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.525428][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.549738][ T5958] bridge_slave_1: entered allmulticast mode [ 1157.565118][ T5958] bridge_slave_1: entered promiscuous mode [ 1157.601584][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.612946][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11760'. [ 1157.625192][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.683079][ T5958] team0: Port device team_slave_0 added [ 1157.699207][ T5958] team0: Port device team_slave_1 added [ 1157.740257][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.747408][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.773339][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.785185][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.792167][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.818217][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.845970][ T5958] hsr_slave_0: entered promiscuous mode [ 1157.852228][ T5958] hsr_slave_1: entered promiscuous mode [ 1158.121728][ T5958] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1158.286027][ T5958] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1158.295488][ T5958] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1158.304604][ T5958] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1158.392694][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.419021][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.430649][ T2075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.437769][ T2075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.449327][ T2064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.456507][ T2064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.477922][ T5958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1158.488348][ T5958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1158.547879][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.601015][ T6038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11766'. [ 1158.717309][ T5958] veth0_vlan: entered promiscuous mode [ 1158.726372][ T5958] veth1_vlan: entered promiscuous mode [ 1158.743022][ T5958] veth0_macvtap: entered promiscuous mode [ 1158.750426][ T5958] veth1_macvtap: entered promiscuous mode [ 1158.762196][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.773045][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.783811][ T2076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.799256][ T2076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.813836][ T2076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.829138][ T2076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.841078][ T6052] hub 6-0:1.0: USB hub found [ 1158.845915][ T6052] hub 6-0:1.0: 8 ports detected [ 1160.099804][T21645] usb usb8-port1: attempt power cycle [ 1161.154769][ T6138] bridge0: entered promiscuous mode [ 1161.160161][ T6138] macsec1: entered promiscuous mode [ 1161.166524][ T6138] bridge0: port 3(macsec1) entered blocking state [ 1161.172973][ T6138] bridge0: port 3(macsec1) entered disabled state [ 1161.179683][ T6138] macsec1: entered allmulticast mode [ 1161.184973][ T6138] bridge0: entered allmulticast mode [ 1161.233775][ T6138] macsec1: left allmulticast mode [ 1161.238940][ T6138] bridge0: left allmulticast mode [ 1161.247020][ T6138] bridge0: left promiscuous mode [ 1162.257608][ T6181] netlink: 'syz.5.11784': attribute type 27 has an invalid length. [ 1162.361903][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11786'. [ 1162.384809][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.392044][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.517156][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.549532][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.613304][ T2064] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.628594][ T2064] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.651619][ T2064] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.660836][ T2064] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.042879][T21645] usb usb8-port1: unable to enumerate USB device [ 1163.320447][ T29] audit: type=1400 audit(1761751629.729:27269): avc: denied { map } for pid=6204 comm="syz.1.11793" path="pipe:[139232]" dev="pipefs" ino=139232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1163.343709][ T29] audit: type=1400 audit(1761751629.771:27270): avc: denied { setattr } for pid=6204 comm="syz.1.11793" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 1164.091107][ T6253] bridge_slave_1: entered allmulticast mode [ 1164.162914][ T6263] netlink: 'syz.1.11818': attribute type 27 has an invalid length. [ 1164.171723][ T6263] bridge_slave_1: left allmulticast mode [ 1164.316642][ T6276] macsec1: entered promiscuous mode [ 1164.321942][ T6276] bridge0: entered promiscuous mode [ 1164.327587][ T6276] bridge0: port 3(macsec1) entered blocking state [ 1164.334100][ T6276] bridge0: port 3(macsec1) entered disabled state [ 1164.340659][ T6276] macsec1: entered allmulticast mode [ 1164.345946][ T6276] bridge0: entered allmulticast mode [ 1164.376519][ T6276] macsec1: left allmulticast mode [ 1164.381753][ T6276] bridge0: left allmulticast mode [ 1164.387693][ T6276] bridge0: left promiscuous mode [ 1164.840222][ T6061] usb usb8-port1: attempt power cycle [ 1165.068573][ T6297] netlink: 'syz.5.11829': attribute type 10 has an invalid length. [ 1165.333571][ T6301] netlink: 'syz.5.11829': attribute type 6 has an invalid length. [ 1165.341501][ T6301] netlink: 'syz.5.11829': attribute type 7 has an invalid length. [ 1165.349374][ T6301] netlink: 'syz.5.11829': attribute type 8 has an invalid length. [ 1165.450277][ T6302] netlink: 'syz.9.11830': attribute type 27 has an invalid length. [ 1165.912144][ T29] audit: type=1400 audit(1761751632.490:27271): avc: denied { write } for pid=6307 comm="syz.9.11833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1166.267703][ T29] audit: type=1400 audit(1761751632.857:27272): avc: denied { accept } for pid=6315 comm="syz.1.11836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1167.485760][ T6061] usb usb8-port1: unable to enumerate USB device [ 1167.733562][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.742225][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.911762][ T6357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.921204][ T6357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.392373][ T29] audit: type=1400 audit(1761751635.083:27273): avc: denied { create } for pid=6382 comm="syz.1.11860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1170.830755][ T6429] bridge0: port 1(veth0_to_bond) entered blocking state [ 1170.837955][ T6429] bridge0: port 1(veth0_to_bond) entered disabled state [ 1170.845778][ T6429] veth0_to_bond: entered allmulticast mode [ 1170.874582][ T6429] veth0_to_bond: entered promiscuous mode [ 1171.108641][ T29] audit: type=1400 audit(1761751637.938:27274): avc: denied { relabelfrom } for pid=6439 comm="syz.1.11881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1171.128823][ T29] audit: type=1400 audit(1761751637.938:27275): avc: denied { relabelto } for pid=6439 comm="syz.1.11881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1171.659177][ T6456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.683560][ T6456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.195799][ T6568] ------------[ cut here ]------------ [ 1174.201516][ T6568] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0) [ 1174.217759][ T6568] WARNING: CPU: 0 PID: 6568 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 1174.228128][ T6568] Modules linked in: [ 1174.232065][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.4.11934 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1174.243511][ T6568] Tainted: [W]=WARN [ 1174.247423][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1174.257581][ T6568] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 1174.263925][ T6568] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 32 f9 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 1174.283660][ T6568] RSP: 0018:ffffc90004d8f408 EFLAGS: 00010282 [ 1174.289778][ T6568] RAX: 7642a43203261d00 RBX: ffff888167183b50 RCX: 0000000000080000 [ 1174.297850][ T6568] RDX: ffffc90008c6b000 RSI: 00000000000042ba RDI: 00000000000042bb [ 1174.305875][ T6568] RBP: 0000000000000000 R08: 0001c90004d8f257 R09: 0000000000000000 [ 1174.313921][ T6568] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888167183b10 [ 1174.322056][ T6568] R13: ffff88815fcb0000 R14: ffff88815fcb0000 R15: ffff888167183b48 [ 1174.330107][ T6568] FS: 00007f5efc80f6c0(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 1174.339160][ T6568] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1174.345861][ T6568] CR2: 00007f5efc80ef98 CR3: 00000001445b8000 CR4: 00000000003506f0 [ 1174.353974][ T6568] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1174.362052][ T6568] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1174.370141][ T6568] Call Trace: [ 1174.373468][ T6568] [ 1174.376458][ T6568] reg_set_min_max+0x215/0x260 [ 1174.381382][ T6568] check_cond_jmp_op+0x130d/0x19e0 [ 1174.386559][ T6568] do_check+0x3363/0x8460 [ 1174.391069][ T6568] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 1174.397485][ T6568] do_check_common+0xc5e/0x12b0 [ 1174.402658][ T6568] bpf_check+0xaaae/0xd9d0 [ 1174.407233][ T6568] ? merge_sched_in+0x605/0xa30 [ 1174.412186][ T6568] ? rb_next+0x5c/0x80 [ 1174.416349][ T6568] ? visit_groups_merge+0xf7e/0xfd0 [ 1174.421652][ T6568] ? __pmu_ctx_sched_in+0x8a/0xb0 [ 1174.426890][ T6568] ? ctx_sched_in+0x34d/0x370 [ 1174.431610][ T6568] ? __rcu_read_unlock+0x4f/0x70 [ 1174.436599][ T6568] ? sysvec_irq_work+0xe/0x80 [ 1174.441324][ T6568] ? __pfx_perf_pmu_nop_void+0x10/0x10 [ 1174.446981][ T6568] ? _raw_spin_unlock+0x14/0x50 [ 1174.451961][ T6568] ? finish_task_switch+0xb6/0x2b0 [ 1174.457170][ T6568] ? finish_task_switch+0xad/0x2b0 [ 1174.462318][ T6568] ? __schedule+0x6b9/0xb30 [ 1174.466946][ T6568] ? should_fail_ex+0x30/0x280 [ 1174.471828][ T6568] ? should_failslab+0x8c/0xb0 [ 1174.476684][ T6568] ? __kmalloc_noprof+0x2a2/0x570 [ 1174.481760][ T6568] ? security_bpf_prog_load+0x60/0x140 [ 1174.487341][ T6568] ? selinux_bpf_prog_load+0xad/0xd0 [ 1174.492712][ T6568] ? security_bpf_prog_load+0x9e/0x140 [ 1174.498519][ T6568] bpf_prog_load+0xf6e/0x1100 [ 1174.503548][ T6568] ? security_bpf+0x2b/0x90 [ 1174.508134][ T6568] __sys_bpf+0x469/0x7c0 [ 1174.512763][ T6568] __x64_sys_bpf+0x41/0x50 [ 1174.517314][ T6568] x64_sys_call+0x2aee/0x3000 [ 1174.522146][ T6568] do_syscall_64+0xd2/0x200 [ 1174.526813][ T6568] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1174.533023][ T6568] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1174.538980][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.545055][ T6568] RIP: 0033:0x7f5efddaefc9 [ 1174.549820][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.569512][ T6568] RSP: 002b:00007f5efc80f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1174.578054][ T6568] RAX: ffffffffffffffda RBX: 00007f5efe005fa0 RCX: 00007f5efddaefc9 [ 1174.586101][ T6568] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 1174.594244][ T6568] RBP: 00007f5efde31f91 R08: 0000000000000000 R09: 0000000000000000 [ 1174.602379][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.610543][ T6568] R13: 00007f5efe006038 R14: 00007f5efe005fa0 R15: 00007ffdb8435aa8 [ 1174.618637][ T6568] [ 1174.621687][ T6568] ---[ end trace 0000000000000000 ]--- [ 1176.245876][ T29] audit: type=1400 audit(1761751643.313:27276): avc: denied { tracepoint } for pid=6638 comm="syz.9.11960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1177.348899][ T6709] syzkaller0: entered promiscuous mode [ 1177.354590][ T6709] syzkaller0: entered allmulticast mode [ 1178.152982][ T6735] sock: sock_set_timeout: `syz.1.11999' (pid 6735) tries to set negative timeout [ 1178.881185][ T6768] netlink: 32 bytes leftover after parsing attributes in process `syz.7.12009'. [ 1178.911037][ T6768] netlink: 32 bytes leftover after parsing attributes in process `syz.7.12009'. [ 1179.326478][ T6777] lo: entered allmulticast mode [ 1179.332332][ T6777] Q6`Ҙ: renamed from lo [ 1183.205304][ T6843] netlink: 36 bytes leftover after parsing attributes in process `syz.9.12039'. [ 1183.369644][ T6863] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12043'. [ 1183.412494][ T6863] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12043'. [ 1183.565608][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12050'. [ 1184.724570][ T6892] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12055'. [ 1185.477920][ T29] audit: type=1400 audit(1761751653.024:27277): avc: denied { cpu } for pid=6915 comm="syz.4.12065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1186.447484][ T6061] usb usb8-port1: attempt power cycle [ 1186.547107][ T6929] netlink: 36 bytes leftover after parsing attributes in process `syz.7.12068'. [ 1186.686589][ T6941] netlink: 'syz.5.12069': attribute type 6 has an invalid length. [ 1186.694435][ T6941] netlink: 'syz.5.12069': attribute type 7 has an invalid length. [ 1186.702307][ T6941] netlink: 'syz.5.12069': attribute type 8 has an invalid length. [ 1187.390351][ T29] audit: type=1400 audit(1761751655.029:27278): avc: denied { remount } for pid=6956 comm="syz.5.12079" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1187.437697][ T29] audit: type=1400 audit(1761751655.082:27279): avc: denied { watch } for pid=6958 comm="syz.5.12080" path="/proc/200" dev="proc" ino=141840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1187.486117][ T6959] veth3: entered promiscuous mode [ 1187.491278][ T6959] veth3: entered allmulticast mode [ 1187.783407][ T6964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.791999][ T6964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1188.619099][ T6061] usb usb8-port1: unable to enumerate USB device [ 1188.846461][ T7001] netlink: 'syz.4.12090': attribute type 6 has an invalid length. [ 1188.854364][ T7001] netlink: 'syz.4.12090': attribute type 7 has an invalid length. [ 1188.862312][ T7001] netlink: 'syz.4.12090': attribute type 8 has an invalid length. [ 1188.909757][ T29] audit: type=1400 audit(1761751656.625:27280): avc: denied { shutdown } for pid=7002 comm="syz.1.12095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1188.946725][ T29] audit: type=1400 audit(1761751656.656:27281): avc: denied { getopt } for pid=7002 comm="syz.1.12095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1189.404590][ T29] audit: type=1400 audit(1761751657.150:27282): avc: denied { read } for pid=7015 comm="syz.1.12100" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1189.427911][ T29] audit: type=1400 audit(1761751657.150:27283): avc: denied { open } for pid=7015 comm="syz.1.12100" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1189.763310][ T29] audit: type=1400 audit(1761751657.528:27284): avc: denied { append } for pid=7047 comm="syz.4.12116" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1189.787331][ T29] audit: type=1400 audit(1761751657.528:27285): avc: denied { open } for pid=7047 comm="syz.4.12116" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1189.878046][ T7057] program syz.4.12116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1190.733032][ T29] audit: type=1400 audit(1761751658.535:27286): avc: denied { mount } for pid=7107 comm="syz.7.12137" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1191.100565][ T7125] netlink: 'syz.1.12142': attribute type 1 has an invalid length. [ 1191.146923][ T7125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1191.230936][ T7127] bond1: peer notification delay (15) is not a multiple of miimon (100), value rounded to 0 ms [ 1191.246513][ T7127] bond1: entered allmulticast mode [ 1191.310837][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12144'. [ 1191.503882][ T7143] ip6erspan0: entered promiscuous mode [ 1191.960242][ T29] audit: type=1400 audit(1761751659.827:27287): avc: denied { accept } for pid=7163 comm="syz.7.12157" lport=34991 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1191.984054][ T29] audit: type=1400 audit(1761751659.827:27288): avc: denied { getopt } for pid=7163 comm="syz.7.12157" lport=34991 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1193.096360][ T7205] vlan2: entered allmulticast mode [ 1193.107793][ T7205] dummy0: entered allmulticast mode [ 1193.918416][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12184'. [ 1194.130366][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12186'. [ 1194.140991][ T29] audit: type=1400 audit(1761751662.115:27289): avc: denied { read write } for pid=7241 comm="syz.4.12188" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1194.192876][ T29] audit: type=1400 audit(1761751662.115:27290): avc: denied { open } for pid=7241 comm="syz.4.12188" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1194.262520][ T29] audit: type=1400 audit(1761751662.241:27291): avc: denied { name_connect } for pid=7246 comm="syz.1.12191" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1194.308498][ T7252] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1194.308498][ T7252] The task syz.4.12189 (7252) triggered the difference, watch for misbehavior. [ 1194.330432][ T29] audit: type=1400 audit(1761751662.315:27292): avc: denied { listen } for pid=7246 comm="syz.1.12191" lport=45924 faddr=10.1.1.0 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1194.353957][ T29] audit: type=1400 audit(1761751662.315:27293): avc: denied { ioctl } for pid=7246 comm="syz.1.12191" path="socket:[142223]" dev="sockfs" ino=142223 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1194.414239][ T7257] syz.5.12194 (7257): /proc/7256/oom_adj is deprecated, please use /proc/7256/oom_score_adj instead. [ 1195.311859][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.335695][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.444547][ T7296] batadv_slave_0: entered promiscuous mode [ 1195.450797][ T7296] netlink: 'syz.9.12209': attribute type 1 has an invalid length. [ 1196.006795][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12216'. [ 1196.071431][ T29] audit: type=1400 audit(1761751664.141:27294): avc: denied { create } for pid=7314 comm="syz.5.12217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1196.393004][ T7325] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12221'. [ 1196.402074][ T7325] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12221'. [ 1196.411021][ T7325] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12221'. [ 1196.420057][ T7325] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12221'. [ 1196.429028][ T7325] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12221'. [ 1196.438032][ T7325] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12221'. [ 1196.447008][ T7325] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12221'. [ 1196.455976][ T7325] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12221'. [ 1196.464950][ T7325] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12221'. [ 1196.473916][ T7325] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12221'. [ 1196.483505][ T7325] veth3: left promiscuous mode [ 1196.506972][ T7334] team0: Caught tx_queue_len zero misconfig [ 1199.460145][T21659] usb usb8-port1: attempt power cycle [ 1199.853006][ T29] audit: type=1326 audit(1761751668.120:27295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.12260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5efddaefc9 code=0x7ffc0000 [ 1199.883567][ T29] audit: type=1326 audit(1761751668.120:27296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.12260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5efddaefc9 code=0x7ffc0000 [ 1199.907278][ T29] audit: type=1326 audit(1761751668.120:27297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.12260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5efddaefc9 code=0x7ffc0000 [ 1199.930942][ T29] audit: type=1326 audit(1761751668.120:27298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.12260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5efddaefc9 code=0x7ffc0000 [ 1199.934935][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.954682][ T29] audit: type=1326 audit(1761751668.120:27299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.12260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5efddaefc9 code=0x7ffc0000 [ 1199.973880][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.986824][ T29] audit: type=1326 audit(1761751668.120:27300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.12260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5efddaefc9 code=0x7ffc0000 [ 1200.018195][ T29] audit: type=1326 audit(1761751668.120:27301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.12260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5efddaefc9 code=0x7ffc0000 [ 1200.042067][ T29] audit: type=1326 audit(1761751668.120:27302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.12260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5efddaefc9 code=0x7ffc0000 [ 1200.065692][ T29] audit: type=1326 audit(1761751668.120:27303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.4.12260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5efddaefc9 code=0x7ffc0000 [ 1201.182370][ T7455] ================================================================== [ 1201.190472][ T7455] BUG: KCSAN: data-race in __process_echoes / n_tty_write [ 1201.197596][ T7455] [ 1201.199906][ T7455] write to 0xffffc9000c733280 of 8 bytes by task 7456 on cpu 0: [ 1201.207512][ T7455] __process_echoes+0x63e/0x6b0 [ 1201.212351][ T7455] n_tty_receive_buf_common+0x8e4/0xbe0 [ 1201.217881][ T7455] n_tty_receive_buf+0x30/0x40 [ 1201.222632][ T7455] tiocsti+0x170/0x1d0 [ 1201.226685][ T7455] tty_ioctl+0x4a4/0xb80 [ 1201.230909][ T7455] __se_sys_ioctl+0xce/0x140 [ 1201.235488][ T7455] __x64_sys_ioctl+0x43/0x50 [ 1201.240079][ T7455] x64_sys_call+0x1816/0x3000 [ 1201.244743][ T7455] do_syscall_64+0xd2/0x200 [ 1201.249236][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.255115][ T7455] [ 1201.257426][ T7455] read to 0xffffc9000c733280 of 8 bytes by task 7455 on cpu 1: [ 1201.264961][ T7455] n_tty_write+0x161/0xb40 [ 1201.269381][ T7455] file_tty_write+0x378/0x690 [ 1201.274040][ T7455] tty_write+0x25/0x30 [ 1201.278116][ T7455] vfs_write+0x52a/0x960 [ 1201.282346][ T7455] ksys_write+0xda/0x1a0 [ 1201.286588][ T7455] __x64_sys_write+0x40/0x50 [ 1201.291171][ T7455] x64_sys_call+0x2802/0x3000 [ 1201.295830][ T7455] do_syscall_64+0xd2/0x200 [ 1201.300311][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.306182][ T7455] [ 1201.308482][ T7455] value changed: 0x0000000000000000 -> 0x0000000000000003 [ 1201.315561][ T7455] [ 1201.317862][ T7455] Reported by Kernel Concurrency Sanitizer on: [ 1201.323993][ T7455] CPU: 1 UID: 0 PID: 7455 Comm: syz.7.12269 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1201.335348][ T7455] Tainted: [W]=WARN [ 1201.339126][ T7455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1201.349171][ T7455] ================================================================== [ 1201.357508][T21659] usb usb8-port1: unable to enumerate USB device