last executing test programs: 5m48.412567668s ago: executing program 3 (id=287): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000380)='./cgroup\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB="000472160556c49a8f77d21f2a5ddadd0700000000000000b9773e93b10bea54840856fcb2d48332a9bc03c716106c3045d5f3c338b810be692d50a50b8a1c4a287b3eb1bc43e5135e8d", @ANYRESDEC=r0], 0x1, 0x1534, &(0x7f0000002d00)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x25, 0x4, 0x8000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0xb6, 0x7fff1004}]}) 5m46.057523702s ago: executing program 3 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = gettid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) r9 = socket$key(0xf, 0x3, 0x2) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f0000000500)=""/137, 0x89}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000008c0)=""/121, 0x79}, {&(0x7f0000000280)}], 0x6, &(0x7f0000000b00)=""/237, 0xed}, 0xe0}], 0x1, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400), 0x2000011a) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) 5m44.738016397s ago: executing program 3 (id=299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x40000000, 0x0) ptrace$getsig(0x4202, r4, 0x5faa, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="9044878be7749ca8d2c75ce569c17bd03330276045d1c1eb78f407a3f82758af3d9e7f5ac088e712caa6149138fa99fa0f3923397ee3b34ce15d14b64d3e1eb406231ebb85dd8655e16d6679bd213fca47f32df082982fa2f820b382517b03531d4ca959cd193574a5642a8867d51b71803d170ec2d59317f7a370a4a68ed84ecc031a6e0f3d456eb1342a8ccaf858ac13e967183128e7495cc122b087724007e906ef28676163d156e7ea0c19704b1c866a65e7875a1fd9d7f0ccf45af897dc", @ANYRESDEC=r5, @ANYRES16=r6, @ANYRESDEC=r5, @ANYBLOB="3f809e9a19f87e72225854354340aa41e991fab29a6b1a02337145f5e1e8bc21da"], 0x0, 0x64}, 0x28) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec740536", 0x38}], 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r9 = syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x900) ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080), &(0x7f0000000180)=""/43, 0x2b}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r11, &(0x7f00000008c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6000003, 0x12, r10, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 5m44.626091057s ago: executing program 3 (id=301): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 5m44.59722985s ago: executing program 3 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x400454a4, &(0x7f0000000180)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0xf0333471403c7778, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61106600da0000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000880)={&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000540)="e35d4f39298c9d9a39a824e6152111c48d7829b79d2eb1b4b065e5b070dc963197d1bf8ee9a18b1b0b588754b6370c7c60a7a7ae032b7aa6dbba5a4a4ac68298dd1cf2e4658b26434f3783c29d236d37e7e2a72b3224da47c823cc907a155059e5798e1a16018aa9e1dbee01d353a20a6fa53f2de5a8bd25a6efad3caa75d2cb580823ef9e06ab82fd70ea7d14277aa50da31a07b1ebed3bb74fcc335f9cb11ea2fa57b8c40894cd56bbda19a95c2746cb55ca12dc8e2f4cd7e76b6631d5f03c80fa1f65682a7a0a68602097b966da8b4c5a", 0xd2}, {&(0x7f0000000740)="f4b64c4c080af45eea0c8f855015a4124e750dfac5c432ce937b162993b48fbd2598ff33f857b89c066bb591911ef6cf40162461f67cb697b9a71b3b536b162c103447ed56d2a7899d5d0c30fc79596fd3063c5ac4cb1df1dcc543f3dcc5995964796c80212cc561391c9209f62fedaa5de7b8d6a36cefeb8c30c0b31d59bf0b872562f217011769aace63cb799c9e4d62410296db", 0x95}, {&(0x7f0000000640)="a7bf128a60924f", 0x7}, {&(0x7f0000000800)="f222", 0x2}], 0x4, 0x0, 0x0, 0x40000}, 0x40800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000940)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c0002801800038010"], 0x48}}, 0x0) 5m40.376566041s ago: executing program 3 (id=304): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000440)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000080500b7040000f800000000000000240000db60bf8632d379c9"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syslog(0x2, &(0x7f00000000c0)=""/33, 0x21) syslog(0x2, &(0x7f00000001c0)=""/183, 0xb7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@usrjquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d7, &(0x7f0000001200)="$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") r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) madvise(&(0x7f000052f000/0x4000)=nil, 0x4000, 0x15) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") 5m25.275707892s ago: executing program 32 (id=304): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000440)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000080500b7040000f800000000000000240000db60bf8632d379c9"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syslog(0x2, &(0x7f00000000c0)=""/33, 0x21) syslog(0x2, &(0x7f00000001c0)=""/183, 0xb7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@usrjquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d7, &(0x7f0000001200)="$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") r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) madvise(&(0x7f000052f000/0x4000)=nil, 0x4000, 0x15) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") 12.204149437s ago: executing program 4 (id=1565): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000340), {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, "c1d8", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x3}, {0x1, 0x1, 0xc}, 0x0, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x19e) openat$incfs(r8, &(0x7f00000001c0)='.log\x00', 0x80040, 0x130) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x25) 10.905598302s ago: executing program 4 (id=1570): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000008180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, 0x0, 0x0) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x2000008, &(0x7f0000000700)=ANY=[], 0x0, 0x5552, &(0x7f000000ad80)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') chmod(0x0, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='9p_protocol_dump\x00', r8}, 0x18) 8.619419532s ago: executing program 4 (id=1576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) pivot_root(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xa) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x19882a, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x0, 0x5529, &(0x7f0000005ac0)="$eJzs3L1vG/UbAPDHSdP3X38RYmDrSRVSItWmTl8EW4FWvIhUUYGBCRz7Yrm1fVHsOCETAyNi4D9BIDEx8jcwMLMhBhAbUpDvLpC0DEhx4qb5fKS75+575+eer2VZeuzTBXBqzSd//FaJK3EhImYj4nJEvl0pl9zdIrwUEVcjYmbfUinH/x44GxEXI+LKOHmRs1Ie+ur66NrtX9/9/fsfz5259PV3P01v1sC0vRwRvfVie6tXxKxdxEfleGPUyWPv1qiMxYHe43I/G+VfOlvpap5hq7F3XiOPN9vF+dn65mAc17qN5ji2O2v5+Hq/uOBgVMStdDV/waPGRr7fSlfz2BlkeWzvFHVt7xTfbTuDYZGnVeb7NE8fw+FeLMbT7bSYz/rjPDb7w3K8yJu10u1xHJWxvFw0s24rr2P1cO/1s+y9Tn9zOxmlG4NO1k9u1+qv1up3qvWNrJUO01vVRq9151ay0O6OT6sO00bvbjvL2t201sx6i8lCu9ms1uvJwr10tdPoJ/V67WbtRvX2Yrl1PXnrwYdJt5UsjOMbnf7msNMdJGvZRlK8YjFZqt18bTG5Vk/eX15JVh7ev7+88sHH9z568PryO2+WJz1VVrKwdGNpqVq/UV2qL56i+X9eFj3B+cOhVKZdAMDJo/8HpmFy/X880f9vPIw4+v4/9P8TcaL63+ev/996JWKq84dD0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxaP89983a+MV/sXyrH/1cOvVDuVyJiJiJ2n1bJD+4zW+aZ+/fzd+eeqOGHSsTZ8hrnyuViRNwtlz//f8RvAgAAADzHvv3s6pdFt16s5qddEMfpbL6eufzJhPJVImJu/pcJZZsZr16cULL8830mtieULf8B6/yEkhU/uZ2ZVLb/ZPZAOL8vVIowc6zlAAAAx+JgJ3C8XQgAAADH6YtpF8B05Hftl/fiF/8F53fe//OH4IUDewAAAMAJVJl2AQAAAMCRy/v/CTz/b3d27/aBkuf/AQAAwLOjeP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFzv3c5s4EMUB+Nnghf2nRau9byt7gzK2hD3uMaKANEEBOZAW0gA1kFtKiCDC4xCIOETy2Fai75OcyVjmxxsEh5mRBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0X60Xt1e/r9vm7Pbt5BkNAAAAcMm2Wi/qf2ap/7W5/7259bPpFxFRRsSlufsoPp1ljpqc6uX5m9Pnq1c13EXUCYf3mDTXl4j401yPP7r+FAAAAODj2ixX8zRbT39mQxdEn9KiTfntb6a8IiKq2UOmtPKQ9ytTWP39Hsf/TGn1AtY0U1hachvnSnuT+ud+XLWbnjRFasqLLzsWmW3sAABAj0ZnTb+zEAAAAPr0b+gCGEYRz1uZx63ASWqa7b3PZz0AAADgHSqGLgAAAADoXD3/7+n8v73z/wAAAGAY6fw/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAurSt1ovNcjVvm7Pbt5NnNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBP7844CIRAGYbB3fWcy9z+sNGhqalIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcz2scVRwA8O/M7Gxtqxij5BARBQ96sem2tvYmHpTgwT9BCOm2xm790QaxpYi5eJOcexE9ighKvPV/6LmFXuqthz1U8KzM7Ex22gZcf81sk88H3rzvLsO873uBZb/zJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQG781jbPisDCJ0+q9W/evrRf97Yf6wo3tO8tFK+KkzaQfDy80XyRLEXG0u2QAAAA4GLK6vo+Iu/nOatGnC2X9n9fnFDX/t09N4qqe/6wuWR+u/+vav2i//Hzvud2BFibjFBc9tzEaHn80ld7/Ncd59/RfntErV76895KVf5D03a1nx3m5nsnXN2++3S/DQ21kCwD8E8fqvgrq70NFP+gyMQAOjF6j8K7r/2yh25wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2jDeiqN1nETEcm8aF27fv7a+V39j+85y3U5fv74dX06vWVwij4hzG6Ph8VZnM98uX7l6YW00Gl5qP3gxIroa/c1q+hfen+HkiE7WZ98EWbXYXaWRVuPPx2o8LsGsnyDJf/+hBADAvpRXrfgGeTffWS3eSxYj/vjuwfr/lUYcM9b/9z44fas5VrP+H7Q2w/m3snnxk5XLV66+tnFx7fzw/PCj108M3hicPHPq1JmV8l7JijsmAAAA/Dv9qjXr/3Tx0f3/I404Zqz/P/1m8EVzrEz9v6fppl/XmQAAABxsz7z0+297PWGZ9Pvx+drm5qXB5Lj7+sTk2EGqf9uhqjXr/2yx66wAAACANoy3kgf2/8824phx///J75//sXnNLCIOV/v/x9Y/Hp1tbzpzrY1/J+56jgAAAHTrcNWa+/95+fx/uvvIQxoRr748iaufAZyp/s/e+eqH5ljN5/9PtjfFuZQuTdaj7JciektdZwQAAMB+9kTVimL/13xn9cOfjrzX9/w/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///aGjgH") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r5, 0x10, 0x800, 0x8000) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000100)=0x7529) 7.677653462s ago: executing program 0 (id=1580): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0880000000000000000000005"], 0x10) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) (fail_nth: 1) 5.51456194s ago: executing program 4 (id=1585): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, "c1d8", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x3}, {0x1, 0x1, 0xc}, 0x0, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8004}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x19e) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x25) 4.070458749s ago: executing program 4 (id=1588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f00000004c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@val={0xfffffffffffffe1b}, @val={0x0, 0x99, {0x8, 0x64}}}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x28000000, 0x31}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000041) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r2}, 0xc) 4.002811275s ago: executing program 0 (id=1590): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x66020000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000340), {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, "c1d8", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x3}, {0x1, 0x1, 0xc}, 0x0, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8004}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x19e) openat$incfs(r6, &(0x7f00000001c0)='.log\x00', 0x80040, 0x130) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x25) 3.973562788s ago: executing program 5 (id=1592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x400454a4, &(0x7f0000000180)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.882225467s ago: executing program 5 (id=1595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c0002801800038010"], 0x48}}, 0x0) 3.314845432s ago: executing program 5 (id=1597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') lseek(r4, 0xffffff61, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x900) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000068000100fffc0000fcdbdf250200000004000000060007000500000008000600f200000008000500", @ANYRES32=r7, @ANYBLOB="4f06b36600fb1b0daccc9c8eacf1b30812820292138243444ee9254acdfeda0160"], 0x30}}, 0x0) mlock2(&(0x7f00001c9000/0x2000)=nil, 0x2000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r8}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet6(0x10, 0x2, 0x4) 3.098189392s ago: executing program 0 (id=1599): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f0000000500)=""/137, 0x89}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000008c0)=""/121, 0x79}, {&(0x7f0000000280)}], 0x6, &(0x7f0000000b00)=""/237, 0xed}, 0xe0}], 0x1, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400), 0x2000011a) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) 2.751123616s ago: executing program 4 (id=1600): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000180), &(0x7f0000000280)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x3b, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) pread64(r7, &(0x7f00000192c0)=""/102379, 0x18feb, 0x0) 2.360316663s ago: executing program 2 (id=1601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x400454a4, &(0x7f0000000180)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0xf0333471403c7778, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61106600da0000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 2.357959463s ago: executing program 2 (id=1602): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x208082, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200480, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000600)={0x3, 0x78, "61d292199c78cf37fccb82864f3f35486c5a45816bb06ab51e25ec84976ab1758e5635822506e799ead02782f08bc1ecece1f83bbd91f7a084950eeba8baff5f9fdd0e30e9c8afdb82ac5de5c287899b25e89dbadbab566c46ca82c08f4457f8455ca88380f585da0c9d9148de294debfe14d3068546b26f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000020201010000000000000000020000001800028014000180080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24000016) 2.267835552s ago: executing program 5 (id=1603): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000110000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r2, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, 0x0) 1.930918254s ago: executing program 0 (id=1604): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x2}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r10 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r10, r9, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r11, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r9, &(0x7f0000000000), 0x200a00}]) 1.273800307s ago: executing program 1 (id=1607): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89e0, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.273511408s ago: executing program 1 (id=1608): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c0002801800038010"], 0x48}}, 0x0) 1.269726058s ago: executing program 2 (id=1609): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000ff0000000000000071182e000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.256949209s ago: executing program 2 (id=1610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@val={0xfffffffffffffe1b}, @val={0x0, 0x99, {0x8, 0x64}}}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x28000000, 0x31}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000041) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1}, 0xc) 1.243727411s ago: executing program 1 (id=1611): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r0}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) io_uring_setup(0x21f8, &(0x7f0000001300)={0x0, 0x90d0, 0x8000, 0x3, 0x20c}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440)={0x0}, &(0x7f0000001480)=0xc) sched_setaffinity(r6, 0x8, &(0x7f00000014c0)=0x49fe) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0xffffff78}, @TCA_HTB_DIRECT_QLEN={0x3}]}}]}, 0x50}}, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x8613) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000840)=""/184, 0x26, 0xb8, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r11, 0xffffffffffffff90, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/149, 0x95}}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffffffffffb, 0x287080) getpgid(r6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000001540)={0x0, @adiantum}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 1.160257759s ago: executing program 0 (id=1612): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000bc0)={{r5}, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000002140)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@favordynmods}]}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 1.122741272s ago: executing program 1 (id=1613): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x40000000, 0x0) ptrace$getsig(0x4202, r4, 0x5faa, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="9044878be7749ca8d2c75ce569c17bd03330276045d1c1eb78f407a3f82758af3d9e7f5ac088e712caa6149138fa99fa0f3923397ee3b34ce15d14b64d3e1eb406231ebb85dd8655e16d6679bd213fca47f32df082982fa2f820b382517b03531d4ca959cd193574a5642a8867d51b71803d170ec2d59317f7a370a4a68ed84ecc031a6e0f3d456eb1342a8ccaf858ac13e967183128e7495cc122b087724007e906ef28676163d156e7ea0c19704b1c866a65e7875a1fd9d7f0ccf45af897dc", @ANYRESDEC=r5, @ANYRES16=r6, @ANYRESDEC=r5, @ANYBLOB="3f809e9a19f87e72225854354340aa41e991fab29a6b1a02337145f5e1e8bc21da"], 0x0, 0x64}, 0x28) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec7405", 0x37}], 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x900) ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080), &(0x7f0000000180)=""/43, 0x2b}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r9, &(0x7f00000008c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6000003, 0x12, r8, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 876.261046ms ago: executing program 1 (id=1614): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f0000000500)=""/137, 0x89}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000008c0)=""/121, 0x79}, {&(0x7f0000000280)}], 0x6, &(0x7f0000000b00)=""/237, 0xed}, 0xe0}], 0x1, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400), 0x2000011a) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) 144.948606ms ago: executing program 2 (id=1615): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 142.687426ms ago: executing program 0 (id=1616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r5, 0x8000, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) unshare(0x2a020400) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='kfree\x00', r7}, 0x18) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0x4e24, 0x3b5, 0x4e23, 0x9, 0xa, 0x80, 0x0, 0x87}, {0x1, 0x9, 0xfffffffffffffff8, 0x1, 0xd, 0x2, 0x7, 0x84fd}, {0x7, 0x8, 0xe2b, 0x9}, 0x3, 0x6e6bb1, 0x2, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x4d6, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3500, 0x3, 0x3, 0xfc, 0x1, 0x7, 0x6}}, 0xe8) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000680)="c50a3cf45085eb9387e991f762d3ed5fcf83af10dd1394612f5b0fc1070b17f7d279e0d9073a87fb0ec627469c37bc942b1e088b038d99e3d3a2d1e90445ceaa7bf5552d9fd9", 0x0, &(0x7f0000000940), 0x0, 0x100, r6, 0x4}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYRESOCT=r2], &(0x7f0000000b80)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0xc, [@enum64={0x8, 0x8, 0x0, 0x13, 0x1, 0x4, [{0xe, 0x2, 0x8000}, {0xb, 0x1, 0x1}, {0xd, 0x10000, 0x6}, {0xd, 0x6, 0x70a}, {0xb, 0x2, 0x4}, {0x3, 0x8, 0x1}, {0x3, 0x800, 0x2}, {0xe, 0x1e71, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x9}}, @const={0xa, 0x0, 0x0, 0xa, 0x4}, @union={0x3, 0x1, 0x0, 0x5, 0x1, 0x6, [{0x4, 0x3, 0x3}]}]}, {0x0, [0x4f, 0x61, 0x2e, 0x61, 0x5f, 0x0, 0x2e, 0x30, 0x2e, 0x61]}}, &(0x7f00000008c0)=""/177, 0xcc, 0xb1, 0x1, 0x6}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r9}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r9}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000003640)={{r0}, "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"}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r11, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 138.977367ms ago: executing program 2 (id=1617): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) (fail_nth: 1) 76.939533ms ago: executing program 5 (id=1618): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x3, 0x2, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000625bda225fd830430c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5d105dea3f2854fe05dd5e86e1099355c6274eac8da498764d7e16c95b935d4ef1160056", @ANYRES16=r9, @ANYBLOB="01006dbdf800ffdbdf250100000004000180100002800c0001800800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r5, 0x2f, 0x7, 0x7, 0x5, 0x6c, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x10, 0x6, 0x4}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x20c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3fd6376efe836b0e}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x15}, 0x8010) r11 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r12, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f00000002c0)={r12, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) io_uring_register$IORING_REGISTER_BUFFERS(r12, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/138, 0x8a}], 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2d, 0xffffffff, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0xc4c0) 835.62µs ago: executing program 1 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x400454a4, &(0x7f0000000180)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1620): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x208082, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200480, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000600)={0x3, 0x78, "61d292199c78cf37fccb82864f3f35486c5a45816bb06ab51e25ec84976ab1758e5635822506e799ead02782f08bc1ecece1f83bbd91f7a084950eeba8baff5f9fdd0e30e9c8afdb82ac5de5c287899b25e89dbadbab566c46ca82c08f4457f8455ca88380f585da0c9d9148de294debfe14d3068546b26f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000020201010000000000000000020000001800028014000180080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24000016) kernel console output (not intermixed with test programs): 55.388928][ T40] usb 1-1: device descriptor read/64, error -71 [ 255.464529][ T373] magicmouse 0003:05AC:0269.0005: item fetching failed at offset 5/7 [ 255.473148][ T373] magicmouse 0003:05AC:0269.0005: magicmouse hid parse failed [ 255.480912][ T373] magicmouse: probe of 0003:05AC:0269.0005 failed with error -22 [ 256.474845][ T373] usb 5-1: USB disconnect, device number 6 [ 256.539259][ T40] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 256.600604][ T3127] new mount options do not match the existing superblock, will be ignored [ 256.612369][ T3127] incfs: ino conflict with backing FS 1 [ 257.405960][ T3129] syz.1.776[3129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.406024][ T3129] syz.1.776[3129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.481093][ T3131] tipc: Enabled bearer , priority 0 [ 257.505713][ T43] tipc: Resetting bearer [ 257.513682][ T3131] binder: binder_mmap: 3130 200000000000-200000003000 bad vm_flags failed -1 [ 257.537263][ T3140] syz.5.780[3140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.537327][ T3140] syz.5.780[3140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.821702][ T3137] tipc: Resetting bearer [ 257.907900][ T3137] tipc: Disabling bearer [ 258.351072][ T3159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.786'. [ 258.358149][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 258.358164][ T28] audit: type=1400 audit(1766163995.418:383): avc: denied { write } for pid=3158 comm="syz.2.786" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 258.719824][ T28] audit: type=1400 audit(1766163995.438:384): avc: denied { mounton } for pid=3158 comm="syz.2.786" path="/156/file0" dev="tmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 258.743646][ T28] audit: type=1400 audit(1766163995.438:385): avc: denied { ioctl } for pid=3158 comm="syz.2.786" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24053 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 259.025710][ T3170] new mount options do not match the existing superblock, will be ignored [ 259.046236][ T3170] incfs: ino conflict with backing FS 1 [ 260.840298][ T3178] syz.0.792[3178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.840363][ T3178] syz.0.792[3178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.167803][ T28] audit: type=1400 audit(1766163998.238:386): avc: denied { mount } for pid=3190 comm="syz.0.797" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 261.517813][ T3196] netlink: 68 bytes leftover after parsing attributes in process `syz.0.797'. [ 261.519832][ T28] audit: type=1400 audit(1766163998.548:387): avc: denied { setopt } for pid=3190 comm="syz.0.797" laddr=127.0.0.1 lport=1 faddr=127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.832298][ T1472] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 263.347602][ T3212] incfs: mount failed -22 [ 264.554832][ T28] audit: type=1400 audit(1766164001.628:388): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 264.639584][ T3226] syz.0.806[3226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.640097][ T3226] syz.0.806[3226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.699293][ T3228] new mount options do not match the existing superblock, will be ignored [ 264.723307][ T3228] incfs: ino conflict with backing FS 1 [ 265.862039][ T3241] syz.0.810[3241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.862109][ T3241] syz.0.810[3241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.008038][ T3247] syz.0.814[3247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.020833][ T3247] syz.0.814[3247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.053926][ T3245] binder: binder_mmap: 3244 200000000000-200000003000 bad vm_flags failed -1 [ 266.836275][ T3255] incfs: mount failed -22 [ 266.987497][ T3262] netlink: 'syz.2.818': attribute type 12 has an invalid length. [ 267.002656][ T3266] syz.5.819[3266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.002718][ T3266] syz.5.819[3266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.084201][ T3269] tipc: Enabled bearer , priority 0 [ 267.103652][ T3269] binder: binder_mmap: 3267 200000000000-200000003000 bad vm_flags failed -1 [ 267.303387][ T3282] new mount options do not match the existing superblock, will be ignored [ 267.315299][ T3282] incfs: ino conflict with backing FS 1 [ 267.492646][ T3270] tipc: Resetting bearer [ 267.635939][ T3284] incfs: mount failed -22 [ 267.813171][ T3270] tipc: Disabling bearer [ 267.982504][ T3290] syz.1.825[3290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.982570][ T3290] syz.1.825[3290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.856940][ T3304] binder: binder_mmap: 3303 200000000000-200000003000 bad vm_flags failed -1 [ 268.935783][ T28] audit: type=1400 audit(1766164006.008:389): avc: denied { connect } for pid=3310 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.938980][ T460] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 268.955877][ T28] audit: type=1400 audit(1766164006.038:390): avc: denied { write } for pid=3310 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 269.282001][ T460] usb 1-1: not running at top speed; connect to a high speed hub [ 269.362640][ T460] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 269.466176][ T460] usb 1-1: config 95 has no interface number 0 [ 269.479266][ T460] usb 1-1: config 95 interface 1 has no altsetting 0 [ 269.549107][ T460] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 269.654035][ T460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.088074][ T460] usb 1-1: Product: syz [ 270.094069][ T460] usb 1-1: Manufacturer: syz [ 270.095409][ T3325] bpf_get_probe_write_proto: 4 callbacks suppressed [ 270.095421][ T3325] syz.4.837[3325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.129687][ T3325] syz.4.837[3325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.143255][ T460] usb 1-1: SerialNumber: syz [ 272.441851][ T3336] syz.0.840[3336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.441912][ T3336] syz.0.840[3336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.444708][ T460] usb 1-1: USB disconnect, device number 5 [ 272.486085][ T3339] syz.1.841[3339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.486416][ T3339] syz.1.841[3339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.591998][ T3340] new mount options do not match the existing superblock, will be ignored [ 272.616272][ T3340] incfs: ino conflict with backing FS 1 [ 273.818472][ T3368] netlink: 60 bytes leftover after parsing attributes in process `syz.5.849'. [ 273.839850][ T3371] syz.4.850[3371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.839934][ T3371] syz.4.850[3371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.763833][ T3389] syz.5.855[3389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.795574][ T3389] syz.5.855[3389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.170343][ T3399] new mount options do not match the existing superblock, will be ignored [ 276.194478][ T3399] incfs: ino conflict with backing FS 1 [ 276.921325][ T3403] incfs: mount failed -22 [ 277.011080][ T3409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.862'. [ 277.220978][ T3414] syz.0.864[3414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.221366][ T3414] syz.0.864[3414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.327028][ T28] audit: type=1400 audit(1766164015.398:391): avc: denied { bind } for pid=3437 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 278.504315][ T28] audit: type=1400 audit(1766164015.528:392): avc: denied { listen } for pid=3437 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.072253][ T3448] new mount options do not match the existing superblock, will be ignored [ 279.894327][ T28] audit: type=1400 audit(1766164016.968:393): avc: denied { unlink } for pid=3443 comm="syz.0.871" name="#5" dev="tmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 279.931806][ T3450] syz.5.874[3450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.931879][ T3450] syz.5.874[3450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.982007][ T3452] incfs: mount failed -22 [ 280.036220][ T3457] syz.5.876[3457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.036283][ T3457] syz.5.876[3457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.750631][ T3484] new mount options do not match the existing superblock, will be ignored [ 280.784264][ T3484] incfs: ino conflict with backing FS 1 [ 281.980780][ T3492] syz.1.887[3492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.980847][ T3492] syz.1.887[3492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.453024][ T3500] syz.4.890[3500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.465626][ T3500] syz.4.890[3500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.532779][ T3506] incfs: mount failed -22 [ 282.804776][ T3504] tipc: Enabled bearer , priority 0 [ 282.839998][ T3504] binder: binder_mmap: 3503 200000000000-200000003000 bad vm_flags failed -1 [ 282.992491][ T1588] tipc: Resetting bearer [ 283.000594][ T3510] tipc: Resetting bearer [ 283.071100][ T3510] tipc: Disabling bearer [ 284.567745][ T1472] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 284.826682][ T1472] usb 6-1: Using ep0 maxpacket: 16 [ 284.904537][ T28] audit: type=1400 audit(1766164021.978:394): avc: denied { bind } for pid=3535 comm="syz.2.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.927511][ T1472] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 284.943858][ T3534] device veth0 entered promiscuous mode [ 284.953422][ T1472] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 284.967837][ T3534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 284.977109][ T28] audit: type=1400 audit(1766164021.978:395): avc: denied { listen } for pid=3535 comm="syz.2.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.000672][ T1472] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.019323][ T3534] device veth0 left promiscuous mode [ 285.034447][ T1472] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.080842][ T1472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.122453][ T1472] usb 6-1: Product: syz [ 285.143225][ T1472] usb 6-1: Manufacturer: syz [ 285.166375][ T1472] usb 6-1: SerialNumber: syz [ 285.398829][ T3527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.451302][ T3527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.468643][ T28] audit: type=1400 audit(1766164022.538:396): avc: denied { create } for pid=3544 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.488586][ T28] audit: type=1400 audit(1766164022.558:397): avc: denied { connect } for pid=3544 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.517261][ T1472] usb 6-1: 0:2 : does not exist [ 285.569496][ T28] audit: type=1400 audit(1766164022.588:398): avc: denied { write } for pid=3544 comm="syz.0.903" path="socket:[25271]" dev="sockfs" ino=25271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.611409][ T3550] tipc: Started in network mode [ 285.618301][ T1472] usb 6-1: USB disconnect, device number 3 [ 285.619135][ T3550] tipc: Node identity 4, cluster identity 4711 [ 285.643040][ T3550] tipc: Node number set to 4 [ 286.014911][ T3560] incfs: mount failed -22 [ 287.620456][ T3588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.629181][ T3588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.777434][ T3599] new mount options do not match the existing superblock, will be ignored [ 288.084717][ T3595] xt_hashlimit: size too large, truncated to 1048576 [ 288.534130][ T28] audit: type=1400 audit(1766164025.608:399): avc: denied { map } for pid=3603 comm="syz.5.921" path="socket:[25656]" dev="sockfs" ino=25656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 288.593099][ T1543] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 288.889081][ T3615] incfs: mount failed -22 [ 290.422741][ T3644] new mount options do not match the existing superblock, will be ignored [ 290.431850][ T3644] incfs: ino conflict with backing FS 1 [ 290.493617][ T3626] syz.2.926 (3626) used greatest stack depth: 19872 bytes left [ 290.651100][ T3646] syz.2.934[3646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.651720][ T3646] syz.2.934[3646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.202067][ T3657] incfs: mount failed -22 [ 291.369347][ T1472] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 291.559986][ T1472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.576174][ T1472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.595308][ T1472] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 291.613855][ T1472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.628735][ T1472] usb 6-1: config 0 descriptor?? [ 292.251327][ T3652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.325907][ T3652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.452241][ T1472] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 292.497697][ T1472] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 292.584360][ T1472] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 292.683950][ T1472] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 292.770067][ T1472] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 292.879766][ T1472] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 292.933904][ T3679] netlink: 'syz.4.943': attribute type 4 has an invalid length. [ 292.956931][ T3679] netlink: 'syz.4.943': attribute type 4 has an invalid length. [ 292.989371][ T1472] playstation 0003:054C:0DF2.0006: Invalid reportID received, expected 9 got 0 [ 293.008569][ T1472] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 293.031065][ T28] audit: type=1400 audit(1766164036.105:400): avc: denied { validate_trans } for pid=3685 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 293.037682][ T1472] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 293.128923][ T1472] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 293.136950][ T1472] playstation: probe of 0003:054C:0DF2.0006 failed with error -22 [ 293.145094][ T28] audit: type=1400 audit(1766164036.205:401): avc: denied { create } for pid=3651 comm="syz.5.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.146256][ T3709] new mount options do not match the existing superblock, will be ignored [ 294.155872][ T3709] incfs: ino conflict with backing FS 1 [ 295.175793][ T3710] netlink: 68 bytes leftover after parsing attributes in process `syz.2.950'. [ 295.626390][ T373] usb 6-1: USB disconnect, device number 4 [ 295.877740][ T3723] syz.2.955[3723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.877803][ T3723] syz.2.955[3723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.087256][ T28] audit: type=1400 audit(1766164040.155:402): avc: denied { create } for pid=3745 comm="syz.4.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 297.194019][ T28] audit: type=1400 audit(1766164040.195:403): avc: denied { write } for pid=3745 comm="syz.4.961" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 297.763247][ T3760] new mount options do not match the existing superblock, will be ignored [ 297.841041][ T3761] netlink: 68 bytes leftover after parsing attributes in process `syz.5.965'. [ 299.936216][ T3796] syz.4.975[3796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.936282][ T3796] syz.4.975[3796] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.080040][ T3801] incfs: mount failed -22 [ 300.446088][ T3803] new mount options do not match the existing superblock, will be ignored [ 300.457990][ T3803] incfs: ino conflict with backing FS 1 [ 300.896202][ T3807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 301.049955][ T28] audit: type=1400 audit(1766164044.125:404): avc: denied { write } for pid=3804 comm="syz.4.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 301.147617][ T28] audit: type=1400 audit(1766164044.175:405): avc: denied { ioctl } for pid=3804 comm="syz.4.977" path="socket:[26820]" dev="sockfs" ino=26820 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.774317][ T3814] xt_hashlimit: size too large, truncated to 1048576 [ 302.648375][ T3820] block device autoloading is deprecated and will be removed. [ 304.111142][ T3838] syz.1.987[3838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.111204][ T3838] syz.1.987[3838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.815574][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 307.218745][ T3856] new mount options do not match the existing superblock, will be ignored [ 307.241646][ T3856] incfs: ino conflict with backing FS 1 [ 308.038420][ T3864] syz.0.992[3864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.038482][ T3864] syz.0.992[3864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.047213][ T28] audit: type=1400 audit(1766164051.115:406): avc: denied { name_bind } for pid=3865 comm="syz.1.994" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 308.087455][ T28] audit: type=1400 audit(1766164051.165:407): avc: denied { node_bind } for pid=3865 comm="syz.1.994" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 308.126717][ T3866] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 308.134946][ T3868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3868 comm=syz.0.996 [ 308.149732][ T3855] tipc: Started in network mode [ 308.154709][ T3855] tipc: Node identity 8e8045a31b98, cluster identity 4711 [ 308.162311][ T3855] tipc: Enabled bearer , priority 0 [ 308.180153][ T3855] binder: binder_mmap: 3850 200000000000-200000003000 bad vm_flags failed -1 [ 308.190326][ T3850] tipc: Resetting bearer [ 308.407431][ T3875] new mount options do not match the existing superblock, will be ignored [ 308.431375][ T3875] incfs: ino conflict with backing FS 1 [ 310.961263][ T3850] tipc: Disabling bearer [ 311.221252][ T3879] netlink: 68 bytes leftover after parsing attributes in process `syz.0.998'. [ 311.620195][ T40] tipc: Node number set to 2501395875 [ 311.684588][ T3886] syz.0.1003[3886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.684652][ T3886] syz.0.1003[3886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.735719][ T28] audit: type=1326 audit(1766164054.805:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.0.1004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f511578f749 code=0x0 [ 312.094765][ T3897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 312.318966][ T460] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 312.740060][ T460] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.751197][ T3908] syz.5.1008[3908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.751270][ T3908] syz.5.1008[3908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.757707][ T460] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.772604][ T3910] tipc: Enabling of bearer rejected, failed to enable media [ 312.777799][ T460] usb 3-1: config 0 has no interface number 0 [ 313.009948][ T460] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 313.022867][ T460] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 313.031922][ T460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.040280][ T460] usb 3-1: config 0 descriptor?? [ 313.046147][ T460] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 313.161458][ T3925] tipc: Enabled bearer , priority 0 [ 313.169326][ T3925] binder: binder_mmap: 3924 200000000000-200000003000 bad vm_flags failed -1 [ 313.244109][ T3932] incfs: mount failed -22 [ 313.458732][ T3926] tipc: Resetting bearer [ 313.554124][ T3926] tipc: Disabling bearer [ 313.832523][ T3940] incfs: mount failed -22 [ 313.950757][ T3950] syz.0.1019[3950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.950829][ T3950] syz.0.1019[3950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.176175][ T28] audit: type=1400 audit(1766164057.245:409): avc: denied { read } for pid=3953 comm="syz.0.1020" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 314.216077][ T28] audit: type=1400 audit(1766164057.255:410): avc: denied { open } for pid=3953 comm="syz.0.1020" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 314.296075][ T28] audit: type=1400 audit(1766164057.365:411): avc: denied { append } for pid=3957 comm="syz.5.1021" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.338473][ T28] audit: type=1400 audit(1766164057.405:412): avc: denied { map } for pid=3957 comm="syz.5.1021" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.349904][ T3960] syz.1.1023[3960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.362356][ T3960] syz.1.1023[3960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.420262][ T3968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 314.487110][ T28] audit: type=1400 audit(1766164057.555:413): avc: denied { read } for pid=3974 comm="syz.1.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.646792][ T3979] syz.1.1030[3979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.647192][ T3979] syz.1.1030[3979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.041094][ T1472] usb 3-1: USB disconnect, device number 10 [ 315.583148][ T4015] new mount options do not match the existing superblock, will be ignored [ 315.643650][ T4015] incfs: ino conflict with backing FS 1 [ 317.501454][ T4031] bpf_get_probe_write_proto: 6 callbacks suppressed [ 317.501472][ T4031] syz.0.1049[4031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.508446][ T4031] syz.0.1049[4031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.520311][ T28] audit: type=1400 audit(1766164060.555:414): avc: denied { mount } for pid=4018 comm="syz.1.1045" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 317.536273][ T373] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 317.809135][ T28] audit: type=1400 audit(1766164060.665:415): avc: denied { execute } for pid=4027 comm="syz.2.1048" path="/201/file1" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 317.989019][ T373] usb 6-1: Using ep0 maxpacket: 32 [ 318.001647][ T373] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 318.012986][ T373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 318.023713][ T373] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 318.034440][ T373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.051599][ T373] usb 6-1: config 0 descriptor?? [ 318.392426][ T4047] syz.2.1053[4047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.392520][ T4047] syz.2.1053[4047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.440894][ T4049] syz.2.1054[4049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.465315][ T4049] syz.2.1054[4049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.084703][ T4057] binder: 4055:4057 ioctl c0306201 0 returned -14 [ 320.100165][ T28] audit: type=1400 audit(1766164063.155:416): avc: denied { ioctl } for pid=4055 comm="syz.5.1057" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 320.132341][ T373] usbhid 6-1:0.0: can't add hid device: -71 [ 320.138395][ T4063] netlink: 'syz.0.1058': attribute type 12 has an invalid length. [ 320.141420][ T373] usbhid: probe of 6-1:0.0 failed with error -71 [ 320.156609][ T373] usb 6-1: USB disconnect, device number 5 [ 320.523284][ T28] audit: type=1400 audit(1766164063.235:417): avc: denied { write } for pid=4065 comm="syz.1.1060" path="socket:[27286]" dev="sockfs" ino=27286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.547416][ T28] audit: type=1400 audit(1766164063.235:418): avc: denied { accept } for pid=4065 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.567162][ T28] audit: type=1400 audit(1766164063.245:419): avc: denied { accept } for pid=4067 comm="syz.5.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.044694][ T4080] binder: binder_mmap: 4079 200000000000-200000003000 bad vm_flags failed -1 [ 321.100364][ T4087] syz.4.1066[4087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.100438][ T4087] syz.4.1066[4087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.105125][ T373] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 321.688207][ T373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 321.708927][ T373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.035704][ T373] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 322.045158][ T373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.053957][ T373] usb 6-1: config 0 descriptor?? [ 322.076124][ T4095] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1068'. [ 322.680197][ T4111] incfs: mount failed -22 [ 323.557347][ T4112] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1071'. [ 324.130606][ T373] usbhid 6-1:0.0: can't add hid device: -71 [ 324.136679][ T373] usbhid: probe of 6-1:0.0 failed with error -71 [ 324.150292][ T373] usb 6-1: USB disconnect, device number 6 [ 324.159748][ T28] audit: type=1400 audit(1766164067.235:420): avc: denied { execute_no_trans } for pid=4122 comm="syz.5.1076" path="/135/file0" dev="tmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.444318][ T4123] xt_bpf: check failed: parse error [ 325.248765][ T4136] incfs: mount failed -22 [ 326.273242][ T4157] incfs: mount failed -22 [ 327.176387][ T28] audit: type=1400 audit(1766164070.195:421): avc: denied { checkpoint_restore } for pid=4146 comm="syz.5.1081" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 327.335048][ T28] audit: type=1400 audit(1766164070.395:422): avc: denied { bind } for pid=4160 comm="syz.2.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.339606][ T4162] tipc: Failed to remove unknown binding: 66,1,1/3472142242:3723343502/3723343504 [ 327.364428][ T4167] syz.5.1089[4167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.364491][ T4167] syz.5.1089[4167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.383327][ T4162] tipc: Failed to remove unknown binding: 66,1,1/3472142242:3723343502/3723343504 [ 327.404402][ T28] audit: type=1400 audit(1766164070.395:423): avc: denied { setopt } for pid=4160 comm="syz.2.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.424056][ T4162] tipc: Failed to remove unknown binding: 66,1,1/3472142242:3723343502/3723343504 [ 327.526860][ T4172] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1085'. [ 329.258734][ T28] audit: type=1400 audit(1766164072.325:424): avc: denied { ioctl } for pid=4160 comm="syz.2.1086" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 330.950197][ T28] audit: type=1400 audit(1766164074.025:425): avc: denied { append } for pid=4196 comm="syz.5.1098" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 331.028064][ T4202] incfs: mount failed -22 [ 332.181328][ T4216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4216 comm=syz.1.1102 [ 332.213157][ T28] audit: type=1400 audit(1766164075.285:426): avc: denied { ioctl } for pid=4199 comm="syz.2.1099" path="socket:[27661]" dev="sockfs" ino=27661 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 332.337805][ T4219] new mount options do not match the existing superblock, will be ignored [ 332.354969][ T4219] incfs: ino conflict with backing FS 1 [ 333.120515][ T4224] syz.0.1104[4224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.120587][ T4224] syz.0.1104[4224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.508679][ T4232] binder: binder_mmap: 4231 200000000000-200000003000 bad vm_flags failed -1 [ 333.538101][ T4237] syz.0.1109[4237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.538217][ T4237] syz.0.1109[4237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.612473][ T4242] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 334.008969][ T28] audit: type=1400 audit(1766164077.075:427): avc: denied { map } for pid=4243 comm="syz.0.1111" path="socket:[26507]" dev="sockfs" ino=26507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.085541][ T28] audit: type=1400 audit(1766164077.075:428): avc: denied { read } for pid=4243 comm="syz.0.1111" path="socket:[26507]" dev="sockfs" ino=26507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.239282][ T4251] new mount options do not match the existing superblock, will be ignored [ 334.257250][ T4251] incfs: ino conflict with backing FS 1 [ 335.133884][ T4255] syz.0.1113[4255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.133947][ T4255] syz.0.1113[4255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.175290][ T4254] tipc: Enabling of bearer rejected, failed to enable media [ 337.155171][ T4273] syz.2.1121[4273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.155245][ T4273] syz.2.1121[4273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.267547][ T4272] binder: binder_mmap: 4269 200000000000-200000003000 bad vm_flags failed -1 [ 338.826880][ T4283] syz.1.1123[4283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.826975][ T4283] syz.1.1123[4283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.476892][ T4296] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1125'. [ 340.660948][ T28] audit: type=1400 audit(1766164083.735:429): avc: denied { write } for pid=4300 comm="syz.5.1129" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 340.795859][ T4312] binder: binder_mmap: 4311 200000000000-200000003000 bad vm_flags failed -1 [ 342.120954][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 342.210938][ T4328] incfs: mount failed -22 [ 343.749577][ T4344] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1140'. [ 343.914075][ T4351] binder: binder_mmap: 4350 200000000000-200000003000 bad vm_flags failed -1 [ 345.089701][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 345.151842][ T28] audit: type=1400 audit(1766164088.225:430): avc: denied { name_bind } for pid=4360 comm="syz.0.1147" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 345.187124][ T28] audit: type=1400 audit(1766164088.255:431): avc: denied { create } for pid=4366 comm="syz.2.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 346.591829][ T28] audit: type=1400 audit(1766164089.665:432): avc: denied { ioctl } for pid=4381 comm="syz.4.1154" path="socket:[28757]" dev="sockfs" ino=28757 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 346.617332][ T4383] tap0: tun_chr_ioctl cmd 1074025681 [ 346.833486][ T4387] incfs: mount failed -22 [ 347.933411][ T4401] device ip6erspan2 entered promiscuous mode [ 348.142620][ T4399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4399 comm=syz.1.1156 [ 348.155951][ T4399] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1156'. [ 350.601860][ T4413] new mount options do not match the existing superblock, will be ignored [ 355.380041][ T4418] new mount options do not match the existing superblock, will be ignored [ 356.089264][ T4434] incfs: mount failed -22 [ 356.500393][ T4437] incfs: mount failed -22 [ 358.130271][ T4443] FAULT_INJECTION: forcing a failure. [ 358.130271][ T4443] name failslab, interval 1, probability 0, space 0, times 0 [ 358.148692][ T4443] CPU: 0 PID: 4443 Comm: syz.4.1169 Not tainted syzkaller #0 [ 358.156284][ T4443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.166340][ T4443] Call Trace: [ 358.169643][ T4443] [ 358.172582][ T4443] __dump_stack+0x21/0x24 [ 358.176955][ T4443] dump_stack_lvl+0xee/0x150 [ 358.181563][ T4443] ? __cfi_dump_stack_lvl+0x8/0x8 [ 358.186613][ T4443] dump_stack+0x15/0x24 [ 358.190774][ T4443] should_fail_ex+0x3d4/0x520 [ 358.195466][ T4443] __should_failslab+0xac/0xf0 [ 358.200235][ T4443] should_failslab+0x9/0x20 [ 358.204743][ T4443] slab_pre_alloc_hook+0x30/0x1e0 [ 358.209871][ T4443] kmem_cache_alloc_lru+0x49/0x280 [ 358.215001][ T4443] ? __d_alloc+0x34/0x6c0 [ 358.219345][ T4443] ? avc_has_perm_noaudit+0x2f4/0x460 [ 358.224819][ T4443] __d_alloc+0x34/0x6c0 [ 358.228997][ T4443] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 358.234707][ T4443] d_alloc_parallel+0xe1/0x12f0 [ 358.239548][ T4443] ? __cfi_selinux_inode_permission+0x10/0x10 [ 358.245780][ T4443] ? __cfi_d_alloc_parallel+0x10/0x10 [ 358.251145][ T4443] ? __kasan_check_write+0x14/0x20 [ 358.256264][ T4443] ? rwsem_read_trylock+0x29a/0x620 [ 358.261514][ T4443] ? __cfi_lockref_get_not_dead+0x10/0x10 [ 358.267343][ T4443] ? downgrade_write+0x350/0x350 [ 358.272315][ T4443] __lookup_slow+0x141/0x3f0 [ 358.276924][ T4443] ? lookup_one_len+0x2d0/0x2d0 [ 358.281790][ T4443] ? down_read+0xa0/0xf0 [ 358.286067][ T4443] lookup_slow+0x57/0x70 [ 358.290414][ T4443] walk_component+0x2f4/0x420 [ 358.295118][ T4443] path_lookupat+0x180/0x490 [ 358.299734][ T4443] filename_lookup+0x1f0/0x500 [ 358.304596][ T4443] ? __cfi_filename_lookup+0x10/0x10 [ 358.310073][ T4443] ? strncpy_from_user+0x17a/0x2d0 [ 358.315210][ T4443] user_path_at_empty+0x47/0x1c0 [ 358.320151][ T4443] path_setxattr+0xae/0x280 [ 358.324682][ T4443] ? fput+0x154/0x1a0 [ 358.328679][ T4443] ? simple_xattr_list_add+0x120/0x120 [ 358.334154][ T4443] ? __cfi_ksys_write+0x10/0x10 [ 358.339012][ T4443] __x64_sys_lsetxattr+0xc2/0xe0 [ 358.343964][ T4443] x64_sys_call+0x8b7/0x9a0 [ 358.348484][ T4443] do_syscall_64+0x4c/0xa0 [ 358.352915][ T4443] ? clear_bhb_loop+0x30/0x80 [ 358.357614][ T4443] ? clear_bhb_loop+0x30/0x80 [ 358.362308][ T4443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.368214][ T4443] RIP: 0033:0x7f6c8678f749 [ 358.372663][ T4443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.392376][ T4443] RSP: 002b:00007f6c87602038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 358.400811][ T4443] RAX: ffffffffffffffda RBX: 00007f6c869e5fa0 RCX: 00007f6c8678f749 [ 358.408809][ T4443] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000280 [ 358.416928][ T4443] RBP: 00007f6c87602090 R08: 0000000000000000 R09: 0000000000000000 [ 358.424911][ T4443] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000001 [ 358.433201][ T4443] R13: 00007f6c869e6038 R14: 00007f6c869e5fa0 R15: 00007ffe76f8ed08 [ 358.441195][ T4443] [ 360.551446][ T4468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1175'. [ 362.014371][ T4472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4472 comm=syz.2.1175 [ 362.044828][ T4479] syz.1.1178[4479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.044877][ T4479] syz.1.1178[4479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.062530][ T4472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 363.617317][ T28] audit: type=1400 audit(1766164106.685:433): avc: denied { compute_member } for pid=4489 comm="syz.5.1181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 363.672632][ T4496] syz.4.1184[4496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.672707][ T4496] syz.4.1184[4496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.015763][ T4519] syz.2.1189 (4519): /proc/4519/oom_adj is deprecated, please use /proc/4519/oom_score_adj instead. [ 365.807995][ T28] audit: type=1400 audit(1766164108.875:434): avc: denied { setopt } for pid=4532 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.829332][ T28] audit: type=1400 audit(1766164108.905:435): avc: denied { write } for pid=4532 comm="syz.5.1195" path="socket:[28944]" dev="sockfs" ino=28944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.860109][ T28] audit: type=1400 audit(1766164108.905:436): avc: denied { read } for pid=4532 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.967458][ T4543] incfs: mount failed -22 [ 368.531189][ T4568] syz.2.1204[4568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.531266][ T4568] syz.2.1204[4568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.748623][ T4593] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1212'. [ 372.734822][ T4609] syz.1.1216[4609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.734898][ T4609] syz.1.1216[4609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.995010][ T4612] incfs: mount failed -22 [ 373.422590][ T28] audit: type=1400 audit(1766164116.495:437): avc: denied { write } for pid=4615 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 374.167982][ T28] audit: type=1400 audit(1766164117.235:438): avc: denied { watch watch_reads } for pid=4624 comm="syz.0.1221" path="/241/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 374.381273][ T4633] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 374.425902][ T28] audit: type=1400 audit(1766164117.495:439): avc: denied { getopt } for pid=4624 comm="syz.0.1221" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.477446][ T4639] syz.2.1224[4639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.477524][ T4639] syz.2.1224[4639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.594474][ T4645] syz.2.1227[4645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.251275][ T4646] syz.1.1223[4646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.477968][ T4645] syz.2.1227[4645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.535561][ T4658] syz.2.1229[4658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.547138][ T4658] syz.2.1229[4658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.178981][ T28] audit: type=1400 audit(1766164119.695:440): avc: denied { write } for pid=4662 comm="syz.4.1231" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 379.081455][ T28] audit: type=1400 audit(1766164122.155:441): avc: denied { mount } for pid=4690 comm="syz.4.1237" name="/" dev="configfs" ino=14077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 379.298471][ T28] audit: type=1400 audit(1766164122.155:442): avc: denied { search } for pid=4690 comm="syz.4.1237" name="/" dev="configfs" ino=14077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 379.363929][ T4699] syz.4.1241[4699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.364162][ T4699] syz.4.1241[4699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.419409][ T4702] syz.4.1242[4702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.483398][ T4702] syz.4.1242[4702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.770150][ T4711] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 381.926427][ T4730] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1248'. [ 382.009780][ T28] audit: type=1326 audit(1766164125.085:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4741 comm="syz.2.1249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f112838f749 code=0x0 [ 382.053470][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 382.063127][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 382.074382][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 382.084305][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 382.092875][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 382.120976][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 382.123284][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 382.179625][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 382.188163][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 382.203315][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 384.051086][ T28] audit: type=1400 audit(1766164125.695:444): avc: denied { view } for pid=4755 comm="syz.4.1253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 384.153444][ T4773] syz.4.1259[4773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.153520][ T4773] syz.4.1259[4773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.220575][ T4780] syz.4.1261[4780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.232307][ T4780] syz.4.1261[4780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.311584][ T4783] incfs: mount failed -22 [ 384.771237][ T4784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1255'. [ 387.204235][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 387.218694][ T4796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'. [ 387.220836][ T4797] syz.2.1263[4797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.237258][ T4797] syz.2.1263[4797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.665696][ T4849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1278'. [ 390.822379][ T4851] syz.4.1280[4851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.823093][ T4851] syz.4.1280[4851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.156653][ T28] audit: type=1400 audit(1766164134.225:445): avc: denied { read } for pid=4860 comm="syz.4.1282" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 391.191867][ T28] audit: type=1400 audit(1766164134.225:446): avc: denied { open } for pid=4860 comm="syz.4.1282" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 391.215744][ T28] audit: type=1400 audit(1766164134.275:447): avc: denied { ioctl } for pid=4860 comm="syz.4.1282" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 391.241523][ T4863] overlayfs: missing 'lowerdir' [ 391.247378][ T4861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3412 sclass=netlink_route_socket pid=4861 comm=syz.4.1282 [ 391.261206][ T28] audit: type=1400 audit(1766164134.335:448): avc: denied { remount } for pid=4834 comm="syz.5.1273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 391.282745][ T4857] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.289993][ T4857] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.327632][ T4861] netlink: 'syz.4.1282': attribute type 27 has an invalid length. [ 391.347380][ T4861] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.354589][ T4861] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.407492][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 391.432726][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 391.449281][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 391.467130][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 391.481644][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 391.489869][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 391.497619][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 391.509584][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.513266][ T4868] syz.5.1284[4868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.516977][ T4868] syz.5.1284[4868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.532767][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.551267][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.563696][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.571153][ T4864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.620849][ T4870] incfs: mount failed -22 [ 391.683476][ T4864] device veth0_vlan left promiscuous mode [ 391.692844][ T4864] device veth0_vlan entered promiscuous mode [ 391.715810][ T4864] device veth1_macvtap left promiscuous mode [ 391.731948][ T4864] device veth1_macvtap entered promiscuous mode [ 391.748064][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0.1: link becomes ready [ 391.771884][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 391.829433][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 391.893447][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 391.963869][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 392.035687][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 392.108019][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 392.118647][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 392.127062][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 392.135431][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.144000][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.152830][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 392.161265][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 392.169635][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 392.178518][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.188690][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 392.209676][ T4864] syz.4.1282 (4864) used greatest stack depth: 18464 bytes left [ 393.133737][ T28] audit: type=1400 audit(1766164136.205:449): avc: denied { accept } for pid=4890 comm="syz.4.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 393.219920][ T4893] syz.1.1292[4893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.219996][ T4893] syz.1.1292[4893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.206216][ T4915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3412 sclass=netlink_route_socket pid=4915 comm=syz.2.1298 [ 394.244066][ T4915] netlink: 'syz.2.1298': attribute type 27 has an invalid length. [ 394.268353][ T4915] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.275677][ T4915] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.362271][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 394.380405][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 394.459113][ T4922] incfs: mount failed -22 [ 394.693535][ T4918] device veth0_vlan left promiscuous mode [ 394.702036][ T4918] device veth0_vlan entered promiscuous mode [ 394.720620][ T4918] device veth1_macvtap left promiscuous mode [ 394.731526][ T4918] device veth1_macvtap entered promiscuous mode [ 394.756878][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 394.780848][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.787942][ T1588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.835278][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 394.864617][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.872937][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.880000][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.887470][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 394.896745][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 394.910287][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 394.913573][ T4927] syz.2.1300[4927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.918394][ T4927] syz.2.1300[4927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.918540][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 394.951356][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 394.959898][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.970367][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 394.978812][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.987139][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 394.995661][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 395.004800][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 395.013684][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 395.022184][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 395.030612][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.038739][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 395.047454][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.055864][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 395.064613][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 395.073103][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 395.081997][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.119680][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 395.128077][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.135836][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.143433][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 395.152644][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 395.162689][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 395.171245][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 395.178802][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 395.186749][ T1588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.194506][ T4923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1296'. [ 395.380087][ T4949] syz.1.1310[4949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.380165][ T4949] syz.1.1310[4949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.773912][ T4979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1315'. [ 398.045430][ T4990] syz.2.1322[4990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.045507][ T4990] syz.2.1322[4990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.113492][ T4992] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 398.134637][ T28] audit: type=1400 audit(1766164141.185:450): avc: denied { relabelfrom } for pid=4989 comm="syz.1.1323" name="" dev="pipefs" ino=30511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 398.204170][ T28] audit: type=1400 audit(1766164141.215:451): avc: denied { relabelto } for pid=4989 comm="syz.1.1323" name="" dev="pipefs" ino=30511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 398.261893][ T28] audit: type=1326 audit(1766164141.315:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.1.1326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9880f8f749 code=0x0 [ 399.319021][ T28] audit: type=1400 audit(1766164142.355:453): avc: denied { bind } for pid=5002 comm="syz.0.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 401.061573][ T5027] overlayfs: failed to resolve './file1': -2 [ 401.226835][ T5030] syz.2.1335[5030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.226945][ T5030] syz.2.1335[5030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.534427][ T5041] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1337'. [ 402.118266][ T28] audit: type=1326 audit(1766164145.185:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.0.1338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f511578f749 code=0x0 [ 402.579505][ T28] audit: type=1326 audit(1766164145.655:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.5.1342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce34d8f749 code=0x0 [ 402.625738][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 402.797444][ T28] audit: type=1400 audit(1766164145.865:456): avc: denied { create } for pid=5059 comm="syz.2.1344" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 403.069805][ T5066] futex_wake_op: syz.4.1345 tries to shift op by -1; fix this program [ 403.145795][ T5069] binder: binder_mmap: 5067 200000000000-200000003000 bad vm_flags failed -1 [ 404.525077][ T28] audit: type=1400 audit(1766164147.595:457): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=1477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 404.710314][ T5092] FAULT_INJECTION: forcing a failure. [ 404.710314][ T5092] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 404.723627][ T5092] CPU: 1 PID: 5092 Comm: syz.0.1349 Not tainted syzkaller #0 [ 404.731104][ T5092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.741157][ T5092] Call Trace: [ 404.744447][ T5092] [ 404.747410][ T5092] __dump_stack+0x21/0x24 [ 404.751758][ T5092] dump_stack_lvl+0xee/0x150 [ 404.756362][ T5092] ? __cfi_dump_stack_lvl+0x8/0x8 [ 404.761397][ T5092] dump_stack+0x15/0x24 [ 404.765558][ T5092] should_fail_ex+0x3d4/0x520 [ 404.770594][ T5092] should_fail+0xb/0x10 [ 404.774757][ T5092] should_fail_usercopy+0x1a/0x20 [ 404.779878][ T5092] _copy_from_user+0x1e/0xc0 [ 404.784484][ T5092] strndup_user+0xb6/0x150 [ 404.788920][ T5092] __se_sys_fsopen+0x40/0x2f0 [ 404.793626][ T5092] __x64_sys_fsopen+0x5b/0x70 [ 404.798320][ T5092] x64_sys_call+0x537/0x9a0 [ 404.802820][ T5092] do_syscall_64+0x4c/0xa0 [ 404.807279][ T5092] ? clear_bhb_loop+0x30/0x80 [ 404.812038][ T5092] ? clear_bhb_loop+0x30/0x80 [ 404.816720][ T5092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.822607][ T5092] RIP: 0033:0x7f511578f749 [ 404.827017][ T5092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.846687][ T5092] RSP: 002b:00007f51141b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 404.855095][ T5092] RAX: ffffffffffffffda RBX: 00007f51159e6180 RCX: 00007f511578f749 [ 404.863355][ T5092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 404.871857][ T5092] RBP: 00007f51141b5090 R08: 0000000000000000 R09: 0000000000000000 [ 404.879916][ T5092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.887871][ T5092] R13: 00007f51159e6218 R14: 00007f51159e6180 R15: 00007ffcf42e3158 [ 404.896028][ T5092] [ 404.927427][ T5094] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 405.076468][ T5099] syz.1.1353[5099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.076547][ T5099] syz.1.1353[5099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.309871][ T5106] overlayfs: failed to clone upperpath [ 405.359085][ T28] audit: type=1400 audit(1766164148.385:458): avc: denied { mount } for pid=5100 comm="syz.1.1354" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 405.433601][ T5107] incfs: mount failed -22 [ 405.861058][ T5115] incfs: mount failed -22 [ 406.103592][ T5125] FAULT_INJECTION: forcing a failure. [ 406.103592][ T5125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.116851][ T28] audit: type=1400 audit(1766164149.175:459): avc: denied { create } for pid=5124 comm="syz.4.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 406.137723][ T5125] CPU: 0 PID: 5125 Comm: syz.2.1361 Not tainted syzkaller #0 [ 406.145118][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.155177][ T5125] Call Trace: [ 406.158457][ T5125] [ 406.161497][ T5125] __dump_stack+0x21/0x24 [ 406.165823][ T5125] dump_stack_lvl+0xee/0x150 [ 406.170487][ T5125] ? __cfi_dump_stack_lvl+0x8/0x8 [ 406.175504][ T5125] ? __stack_depot_save+0x36/0x480 [ 406.180601][ T5125] dump_stack+0x15/0x24 [ 406.184755][ T5125] should_fail_ex+0x3d4/0x520 [ 406.189430][ T5125] should_fail+0xb/0x10 [ 406.193573][ T5125] should_fail_usercopy+0x1a/0x20 [ 406.198593][ T5125] _copy_from_user+0x1e/0xc0 [ 406.203172][ T5125] iovec_from_user+0x1aa/0x2e0 [ 406.207927][ T5125] __import_iovec+0x71/0x470 [ 406.212603][ T5125] ? kstrtouint_from_user+0xf7/0x150 [ 406.218417][ T5125] import_iovec+0x7c/0xb0 [ 406.222738][ T5125] ___sys_recvmsg+0x433/0x510 [ 406.227853][ T5125] ? __sys_recvmsg+0x270/0x270 [ 406.232623][ T5125] ? security_file_permission+0x94/0xb0 [ 406.238264][ T5125] ? __cfi_vfs_write+0x10/0x10 [ 406.243059][ T5125] ? __kasan_check_read+0x11/0x20 [ 406.248088][ T5125] ? __fdget+0x15b/0x220 [ 406.252322][ T5125] __x64_sys_recvmsg+0x1ed/0x2c0 [ 406.257267][ T5125] ? __kasan_check_read+0x11/0x20 [ 406.262380][ T5125] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 406.267839][ T5125] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 406.273912][ T5125] x64_sys_call+0x75/0x9a0 [ 406.278418][ T5125] do_syscall_64+0x4c/0xa0 [ 406.282834][ T5125] ? clear_bhb_loop+0x30/0x80 [ 406.287678][ T5125] ? clear_bhb_loop+0x30/0x80 [ 406.292345][ T5125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.298230][ T5125] RIP: 0033:0x7f112838f749 [ 406.302627][ T5125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.322315][ T5125] RSP: 002b:00007f11291a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 406.330721][ T5125] RAX: ffffffffffffffda RBX: 00007f11285e5fa0 RCX: 00007f112838f749 [ 406.338676][ T5125] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000006 [ 406.346638][ T5125] RBP: 00007f11291a3090 R08: 0000000000000000 R09: 0000000000000000 [ 406.354610][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.362588][ T5125] R13: 00007f11285e6038 R14: 00007f11285e5fa0 R15: 00007ffff5dcba38 [ 406.370823][ T5125] [ 406.473612][ T28] audit: type=1400 audit(1766164149.545:460): avc: denied { set_context_mgr } for pid=5135 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 407.774614][ T28] audit: type=1400 audit(1766164150.835:461): avc: denied { create } for pid=5135 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 407.854912][ T5154] syz.4.1370[5154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.854985][ T5154] syz.4.1370[5154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.941793][ T5152] binder: binder_mmap: 5151 200000000000-200000003000 bad vm_flags failed -1 [ 408.388910][ T5162] FAULT_INJECTION: forcing a failure. [ 408.388910][ T5162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.445166][ T5162] CPU: 0 PID: 5162 Comm: syz.4.1372 Not tainted syzkaller #0 [ 408.452591][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.462753][ T5162] Call Trace: [ 408.466042][ T5162] [ 408.469072][ T5162] __dump_stack+0x21/0x24 [ 408.473774][ T5162] dump_stack_lvl+0xee/0x150 [ 408.478393][ T5162] ? __cfi_dump_stack_lvl+0x8/0x8 [ 408.483441][ T5162] dump_stack+0x15/0x24 [ 408.487615][ T5162] should_fail_ex+0x3d4/0x520 [ 408.492317][ T5162] should_fail+0xb/0x10 [ 408.496492][ T5162] should_fail_usercopy+0x1a/0x20 [ 408.501888][ T5162] strncpy_from_user+0x24/0x2d0 [ 408.506865][ T5162] ? getname_flags+0xb9/0x500 [ 408.511650][ T5162] getname_flags+0xf4/0x500 [ 408.516177][ T5162] getname+0x19/0x20 [ 408.520296][ T5162] __x64_sys_execve+0x78/0xb0 [ 408.525338][ T5162] x64_sys_call+0x98/0x9a0 [ 408.529860][ T5162] do_syscall_64+0x4c/0xa0 [ 408.534353][ T5162] ? clear_bhb_loop+0x30/0x80 [ 408.539591][ T5162] ? clear_bhb_loop+0x30/0x80 [ 408.544307][ T5162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.550353][ T5162] RIP: 0033:0x7f6c8678f749 [ 408.554778][ T5162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.574485][ T5162] RSP: 002b:00007f6c87602038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 408.583051][ T5162] RAX: ffffffffffffffda RBX: 00007f6c869e5fa0 RCX: 00007f6c8678f749 [ 408.591491][ T5162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 408.599472][ T5162] RBP: 00007f6c87602090 R08: 0000000000000000 R09: 0000000000000000 [ 408.607455][ T5162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.615531][ T5162] R13: 00007f6c869e6038 R14: 00007f6c869e5fa0 R15: 00007ffe76f8ed08 [ 408.623793][ T5162] [ 408.817940][ T5166] incfs: mount failed -22 [ 409.016916][ T5172] syz.1.1376[5172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.016991][ T5172] syz.1.1376[5172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.052428][ T5176] FAULT_INJECTION: forcing a failure. [ 409.052428][ T5176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.120050][ T5176] CPU: 1 PID: 5176 Comm: syz.2.1377 Not tainted syzkaller #0 [ 409.127474][ T5176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.137712][ T5176] Call Trace: [ 409.141140][ T5176] [ 409.144104][ T5176] __dump_stack+0x21/0x24 [ 409.148535][ T5176] dump_stack_lvl+0xee/0x150 [ 409.153134][ T5176] ? __cfi_dump_stack_lvl+0x8/0x8 [ 409.158350][ T5176] ? getname_flags+0xb9/0x500 [ 409.163029][ T5176] dump_stack+0x15/0x24 [ 409.167192][ T5176] should_fail_ex+0x3d4/0x520 [ 409.171963][ T5176] should_fail+0xb/0x10 [ 409.176122][ T5176] should_fail_usercopy+0x1a/0x20 [ 409.181155][ T5176] strncpy_from_user+0x24/0x2d0 [ 409.186023][ T5176] ? ksys_write+0x1eb/0x240 [ 409.190527][ T5176] ? getname_flags+0xb9/0x500 [ 409.195209][ T5176] getname_flags+0xf4/0x500 [ 409.199732][ T5176] getname+0x19/0x20 [ 409.203630][ T5176] __x64_sys_execve+0x78/0xb0 [ 409.208311][ T5176] x64_sys_call+0x98/0x9a0 [ 409.212735][ T5176] do_syscall_64+0x4c/0xa0 [ 409.217154][ T5176] ? clear_bhb_loop+0x30/0x80 [ 409.221839][ T5176] ? clear_bhb_loop+0x30/0x80 [ 409.226534][ T5176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.232462][ T5176] RIP: 0033:0x7f112838f749 [ 409.236975][ T5176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.256668][ T5176] RSP: 002b:00007f11291a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 409.265073][ T5176] RAX: ffffffffffffffda RBX: 00007f11285e5fa0 RCX: 00007f112838f749 [ 409.273049][ T5176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 409.281024][ T5176] RBP: 00007f11291a3090 R08: 0000000000000000 R09: 0000000000000000 [ 409.289243][ T5176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.297344][ T5176] R13: 00007f11285e6038 R14: 00007f11285e5fa0 R15: 00007ffff5dcba38 [ 409.305326][ T5176] [ 409.343599][ T5180] FAULT_INJECTION: forcing a failure. [ 409.343599][ T5180] name failslab, interval 1, probability 0, space 0, times 0 [ 409.356461][ T5180] CPU: 1 PID: 5180 Comm: syz.4.1375 Not tainted syzkaller #0 [ 409.363846][ T5180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.374371][ T5180] Call Trace: [ 409.377682][ T5180] [ 409.380771][ T5180] __dump_stack+0x21/0x24 [ 409.385119][ T5180] dump_stack_lvl+0xee/0x150 [ 409.389739][ T5180] ? __cfi_dump_stack_lvl+0x8/0x8 [ 409.394784][ T5180] ? avc_has_perm_noaudit+0x2f4/0x460 [ 409.400265][ T5180] dump_stack+0x15/0x24 [ 409.404435][ T5180] should_fail_ex+0x3d4/0x520 [ 409.409749][ T5180] __should_failslab+0xac/0xf0 [ 409.414717][ T5180] should_failslab+0x9/0x20 [ 409.420723][ T5180] kmem_cache_alloc_node+0x42/0x340 [ 409.427116][ T5180] ? __alloc_skb+0xea/0x4b0 [ 409.432845][ T5180] __alloc_skb+0xea/0x4b0 [ 409.437341][ T5180] alloc_skb_with_frags+0xa8/0x620 [ 409.442737][ T5180] sock_alloc_send_pskb+0x853/0x980 [ 409.447955][ T5180] ? __kasan_check_write+0x14/0x20 [ 409.453079][ T5180] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 409.458989][ T5180] ? memcpy+0x56/0x70 [ 409.462989][ T5180] ? avc_has_perm_noaudit+0x2f4/0x460 [ 409.468375][ T5180] packet_sendmsg+0x366d/0x51f0 [ 409.473252][ T5180] ? trace_event_raw_event_selinux_audited+0x591/0x610 [ 409.480187][ T5180] ? _parse_integer+0x2a/0x40 [ 409.484892][ T5180] ? __cfi_avc_has_perm+0x10/0x10 [ 409.489941][ T5180] ? kstrtouint+0x74/0xe0 [ 409.494305][ T5180] ? selinux_socket_sendmsg+0x208/0x2e0 [ 409.499883][ T5180] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 409.505969][ T5180] ? __cfi_packet_sendmsg+0x10/0x10 [ 409.511196][ T5180] ? __fget_files+0x2d5/0x330 [ 409.515983][ T5180] ? security_socket_sendmsg+0x93/0xb0 [ 409.522003][ T5180] __sys_sendto+0x464/0x5e0 [ 409.526701][ T5180] ? slab_free_freelist_hook+0xc2/0x190 [ 409.532469][ T5180] ? __cfi___sys_sendto+0x10/0x10 [ 409.537529][ T5180] ? ksys_write+0x1eb/0x240 [ 409.542128][ T5180] ? __cfi_ksys_write+0x10/0x10 [ 409.547032][ T5180] __x64_sys_sendto+0xe5/0x100 [ 409.551922][ T5180] x64_sys_call+0x83/0x9a0 [ 409.556442][ T5180] do_syscall_64+0x4c/0xa0 [ 409.560953][ T5180] ? clear_bhb_loop+0x30/0x80 [ 409.565736][ T5180] ? clear_bhb_loop+0x30/0x80 [ 409.570509][ T5180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.576408][ T5180] RIP: 0033:0x7f6c8678f749 [ 409.580949][ T5180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.600666][ T5180] RSP: 002b:00007f6c875e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 409.609179][ T5180] RAX: ffffffffffffffda RBX: 00007f6c869e6090 RCX: 00007f6c8678f749 [ 409.617254][ T5180] RDX: 000000000000000e RSI: 0000200000000040 RDI: 000000000000000f [ 409.625239][ T5180] RBP: 00007f6c875e1090 R08: 0000200000000200 R09: 0000000000000014 [ 409.633525][ T5180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.641514][ T5180] R13: 00007f6c869e6128 R14: 00007f6c869e6090 R15: 00007ffe76f8ed08 [ 409.649531][ T5180] [ 411.223843][ T5206] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 411.250163][ T28] audit: type=1400 audit(1766164154.315:462): avc: denied { create } for pid=5201 comm="syz.2.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 411.676075][ T5210] binder: binder_mmap: 5209 200000000000-200000003000 bad vm_flags failed -1 [ 412.294403][ T5240] incfs: mount failed -22 [ 412.779445][ T5249] FAULT_INJECTION: forcing a failure. [ 412.779445][ T5249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.793101][ T5249] CPU: 0 PID: 5249 Comm: syz.5.1396 Not tainted syzkaller #0 [ 412.800936][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.810991][ T5249] Call Trace: [ 412.814294][ T5249] [ 412.817214][ T5249] __dump_stack+0x21/0x24 [ 412.821530][ T5249] dump_stack_lvl+0xee/0x150 [ 412.826106][ T5249] ? __cfi_dump_stack_lvl+0x8/0x8 [ 412.831124][ T5249] ? __cfi___alloc_pages+0x10/0x10 [ 412.836226][ T5249] dump_stack+0x15/0x24 [ 412.840464][ T5249] should_fail_ex+0x3d4/0x520 [ 412.845145][ T5249] should_fail+0xb/0x10 [ 412.849303][ T5249] should_fail_usercopy+0x1a/0x20 [ 412.854319][ T5249] _copy_from_user+0x1e/0xc0 [ 412.858980][ T5249] simple_transaction_get+0x11d/0x150 [ 412.864516][ T5249] selinux_transaction_write+0xd2/0x170 [ 412.870142][ T5249] ? __cfi_selinux_transaction_write+0x10/0x10 [ 412.876288][ T5249] vfs_write+0x40c/0xca0 [ 412.880525][ T5249] ? slab_free_freelist_hook+0xc2/0x190 [ 412.886587][ T5249] ? __cfi_vfs_write+0x10/0x10 [ 412.891346][ T5249] ? __kasan_check_write+0x14/0x20 [ 412.896447][ T5249] ? mutex_lock+0x8d/0x1a0 [ 412.900959][ T5249] ? __cfi_mutex_lock+0x10/0x10 [ 412.905814][ T5249] ? __fdget_pos+0x2cd/0x380 [ 412.910408][ T5249] ? ksys_write+0x71/0x240 [ 412.914824][ T5249] ksys_write+0x140/0x240 [ 412.919247][ T5249] ? __cfi_ksys_write+0x10/0x10 [ 412.924093][ T5249] ? debug_smp_processor_id+0x17/0x20 [ 412.929536][ T5249] __x64_sys_write+0x7b/0x90 [ 412.934286][ T5249] x64_sys_call+0x27b/0x9a0 [ 412.938783][ T5249] do_syscall_64+0x4c/0xa0 [ 412.943186][ T5249] ? clear_bhb_loop+0x30/0x80 [ 412.950771][ T5249] ? clear_bhb_loop+0x30/0x80 [ 412.955656][ T5249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.961875][ T5249] RIP: 0033:0x7fce34d8f749 [ 412.966473][ T5249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.986672][ T5249] RSP: 002b:00007fce35c20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.995100][ T5249] RAX: ffffffffffffffda RBX: 00007fce34fe5fa0 RCX: 00007fce34d8f749 [ 413.003080][ T5249] RDX: 0000000000000063 RSI: 0000200000000500 RDI: 0000000000000003 [ 413.011054][ T5249] RBP: 00007fce35c20090 R08: 0000000000000000 R09: 0000000000000000 [ 413.019110][ T5249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.027071][ T5249] R13: 00007fce34fe6038 R14: 00007fce34fe5fa0 R15: 00007fff79c53aa8 [ 413.035208][ T5249] [ 413.312572][ T5265] incfs: mount failed -22 [ 413.661905][ T28] audit: type=1326 audit(1766164156.735:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.2.1405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f112838f749 code=0x0 [ 413.691279][ T5276] FAULT_INJECTION: forcing a failure. [ 413.691279][ T5276] name failslab, interval 1, probability 0, space 0, times 0 [ 413.872242][ T5277] new mount options do not match the existing superblock, will be ignored [ 413.884286][ T5277] incfs: ino conflict with backing FS 1 [ 414.021102][ T5276] CPU: 1 PID: 5276 Comm: syz.4.1406 Not tainted syzkaller #0 [ 414.028522][ T5276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.038678][ T5276] Call Trace: [ 414.041969][ T5276] [ 414.044895][ T5276] __dump_stack+0x21/0x24 [ 414.049245][ T5276] dump_stack_lvl+0xee/0x150 [ 414.053861][ T5276] ? __cfi_dump_stack_lvl+0x8/0x8 [ 414.058908][ T5276] dump_stack+0x15/0x24 [ 414.063338][ T5276] should_fail_ex+0x3d4/0x520 [ 414.068050][ T5276] ? prepare_creds+0x2f/0x640 [ 414.072752][ T5276] __should_failslab+0xac/0xf0 [ 414.077550][ T5276] should_failslab+0x9/0x20 [ 414.082065][ T5276] kmem_cache_alloc+0x3b/0x330 [ 414.086864][ T5276] prepare_creds+0x2f/0x640 [ 414.091469][ T5276] ? memcpy+0x56/0x70 [ 414.096071][ T5276] copy_creds+0xe4/0x640 [ 414.100319][ T5276] copy_process+0x828/0x34a0 [ 414.104949][ T5276] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 414.110709][ T5276] ? __kasan_check_write+0x14/0x20 [ 414.115833][ T5276] ? idle_dummy+0x10/0x10 [ 414.120196][ T5276] kernel_clone+0x23a/0x810 [ 414.124822][ T5276] ? __cfi_kernel_clone+0x10/0x10 [ 414.129970][ T5276] ? __kasan_check_write+0x14/0x20 [ 414.135186][ T5276] ? mutex_unlock+0x89/0x220 [ 414.139819][ T5276] __x64_sys_clone+0x168/0x1b0 [ 414.144633][ T5276] ? __cfi___x64_sys_clone+0x10/0x10 [ 414.149927][ T5276] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 414.156077][ T5276] x64_sys_call+0x990/0x9a0 [ 414.160593][ T5276] do_syscall_64+0x4c/0xa0 [ 414.165097][ T5276] ? clear_bhb_loop+0x30/0x80 [ 414.169787][ T5276] ? clear_bhb_loop+0x30/0x80 [ 414.174491][ T5276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.180494][ T5276] RIP: 0033:0x7f6c8678f749 [ 414.184908][ T5276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.204638][ T5276] RSP: 002b:00007f6c87601fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 414.213493][ T5276] RAX: ffffffffffffffda RBX: 00007f6c869e5fa0 RCX: 00007f6c8678f749 [ 414.221468][ T5276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 414.229627][ T5276] RBP: 00007f6c87602090 R08: 0000000000000000 R09: 0000000000000000 [ 414.237608][ T5276] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 414.245578][ T5276] R13: 00007f6c869e6038 R14: 00007f6c869e5fa0 R15: 00007ffe76f8ed08 [ 414.253577][ T5276] [ 414.304153][ T5258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 414.316674][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.324294][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.342346][ T5258] device ip6erspan2 left promiscuous mode [ 414.349778][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 414.363202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 414.382892][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 414.391401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 414.399906][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 414.408703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 414.418128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 414.427218][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 414.595081][ T5301] incfs: Backing dir is not set, filesystem can't be mounted. [ 414.602938][ T5301] incfs: mount failed -2 [ 414.779113][ T1721] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 414.859794][ T5303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1413'. [ 414.889173][ T40] ip6_tunnel: K xmit: Local address not yet configured! [ 414.896280][ T40] ip6_tunnel: K xmit: Local address not yet configured! [ 414.919068][ T40] ip6_tunnel: K xmit: Local address not yet configured! [ 414.968961][ T1721] usb 3-1: Using ep0 maxpacket: 16 [ 415.038994][ T1002] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 415.152789][ T28] audit: type=1400 audit(1766164158.215:464): avc: denied { setattr } for pid=5294 comm="syz.2.1412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 415.347127][ T40] ip6_tunnel: K xmit: Local address not yet configured! [ 415.859451][ T28] audit: type=1400 audit(1766164158.925:465): avc: denied { accept } for pid=5307 comm="syz.1.1416" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 415.889211][ T40] ip6_tunnel: K xmit: Local address not yet configured! [ 416.040728][ T1002] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 416.050975][ T1002] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 416.060828][ T1002] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 416.070658][ T1002] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 416.081892][ T1002] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 416.091207][ T1002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.101447][ T1002] usb 5-1: Product: syz [ 416.105721][ T1002] usb 5-1: Manufacturer: syz [ 416.110507][ T1002] usb 5-1: SerialNumber: syz [ 416.116762][ T1002] usb 5-1: config 0 descriptor?? [ 416.122779][ T1002] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 416.197045][ T28] audit: type=1326 audit(1766164159.265:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.1.1422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9880f8f749 code=0x0 [ 416.281366][ T5326] incfs: mount failed -22 [ 416.536926][ T5328] new mount options do not match the existing superblock, will be ignored [ 416.549541][ T5328] incfs: ino conflict with backing FS 1 [ 416.638216][ T1002] scsi host1: usb-storage 5-1:0.0 [ 417.405071][ T1002] usb 5-1: USB disconnect, device number 7 [ 417.524660][ T1721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 417.534146][ T1721] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 417.596662][ T5338] incfs: Backing dir is not set, filesystem can't be mounted. [ 417.604376][ T5338] incfs: mount failed -2 [ 417.620134][ T1721] usb 3-1: can't read configurations, error -71 [ 417.642567][ T5340] FAULT_INJECTION: forcing a failure. [ 417.642567][ T5340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.656468][ T5340] CPU: 1 PID: 5340 Comm: syz.2.1426 Not tainted syzkaller #0 [ 417.663857][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.673915][ T5340] Call Trace: [ 417.677195][ T5340] [ 417.680120][ T5340] __dump_stack+0x21/0x24 [ 417.684456][ T5340] dump_stack_lvl+0xee/0x150 [ 417.689634][ T5340] ? __cfi_dump_stack_lvl+0x8/0x8 [ 417.694659][ T5340] dump_stack+0x15/0x24 [ 417.698911][ T5340] should_fail_ex+0x3d4/0x520 [ 417.703614][ T5340] should_fail+0xb/0x10 [ 417.707874][ T5340] should_fail_usercopy+0x1a/0x20 [ 417.712915][ T5340] _copy_from_user+0x1e/0xc0 [ 417.717530][ T5340] iovec_from_user+0x1aa/0x2e0 [ 417.722338][ T5340] __import_iovec+0x71/0x470 [ 417.726956][ T5340] ? __switch_to_asm+0x3a/0x60 [ 417.731842][ T5340] import_iovec+0x7c/0xb0 [ 417.736287][ T5340] ___sys_sendmsg+0x1e4/0x290 [ 417.740986][ T5340] ? __sys_sendmsg+0x270/0x270 [ 417.745765][ T5340] ? __kasan_check_read+0x11/0x20 [ 417.750790][ T5340] ? preempt_schedule_irq+0xbb/0x110 [ 417.756112][ T5340] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 417.762328][ T5340] ? irqentry_exit+0x37/0x40 [ 417.768440][ T5340] ? __fdget+0x19c/0x220 [ 417.772702][ T5340] __x64_sys_sendmsg+0x1f0/0x2c0 [ 417.777863][ T5340] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 417.783481][ T5340] ? __kasan_check_write+0x14/0x20 [ 417.789370][ T5340] ? fpregs_restore_userregs+0x128/0x260 [ 417.795082][ T5340] ? switch_fpu_return+0xe/0x10 [ 417.800731][ T5340] x64_sys_call+0x171/0x9a0 [ 417.805496][ T5340] do_syscall_64+0x4c/0xa0 [ 417.810590][ T5340] ? clear_bhb_loop+0x30/0x80 [ 417.815439][ T5340] ? clear_bhb_loop+0x30/0x80 [ 417.820122][ T5340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.826402][ T5340] RIP: 0033:0x7f112838f749 [ 417.831092][ T5340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.850866][ T5340] RSP: 002b:00007f11291a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.859967][ T5340] RAX: ffffffffffffffda RBX: 00007f11285e5fa0 RCX: 00007f112838f749 [ 417.868280][ T5340] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 417.876351][ T5340] RBP: 00007f11291a3090 R08: 0000000000000000 R09: 0000000000000000 [ 417.885004][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.893057][ T5340] R13: 00007f11285e6038 R14: 00007f11285e5fa0 R15: 00007ffff5dcba38 [ 417.901254][ T5340] [ 417.978991][ T1472] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 418.160769][ T1472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 418.171116][ T1472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 418.185104][ T1472] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 418.195139][ T1472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.210781][ T1472] usb 1-1: Product: syz [ 418.215347][ T1472] usb 1-1: Manufacturer: syz [ 418.220682][ T1472] usb 1-1: SerialNumber: syz [ 418.230405][ T1472] usb 1-1: config 0 descriptor?? [ 418.241917][ T1472] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress 0d [ 418.627698][ T28] audit: type=1400 audit(1766164161.695:467): avc: denied { read } for pid=5331 comm="syz.0.1423" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 418.651895][ T28] audit: type=1400 audit(1766164161.695:468): avc: denied { open } for pid=5331 comm="syz.0.1423" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 418.675175][ T28] audit: type=1400 audit(1766164161.695:469): avc: denied { ioctl } for pid=5331 comm="syz.0.1423" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 418.722315][ T1472] usb 1-1: USB disconnect, device number 6 [ 418.905391][ T5370] incfs: mount failed -22 [ 419.008968][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 419.069779][ T5371] new mount options do not match the existing superblock, will be ignored [ 419.079078][ T5371] incfs: ino conflict with backing FS 1 [ 419.503477][ T5374] FAULT_INJECTION: forcing a failure. [ 419.503477][ T5374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.517339][ T5374] CPU: 1 PID: 5374 Comm: syz.4.1437 Not tainted syzkaller #0 [ 419.524812][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.534957][ T5374] Call Trace: [ 419.538242][ T5374] [ 419.541263][ T5374] __dump_stack+0x21/0x24 [ 419.545611][ T5374] dump_stack_lvl+0xee/0x150 [ 419.550249][ T5374] ? __cfi_dump_stack_lvl+0x8/0x8 [ 419.555633][ T5374] dump_stack+0x15/0x24 [ 419.559795][ T5374] should_fail_ex+0x3d4/0x520 [ 419.564917][ T5374] should_fail+0xb/0x10 [ 419.569081][ T5374] should_fail_usercopy+0x1a/0x20 [ 419.574139][ T5374] _copy_from_user+0x1e/0xc0 [ 419.578929][ T5374] iovec_from_user+0x1aa/0x2e0 [ 419.583806][ T5374] __import_iovec+0x71/0x470 [ 419.589466][ T5374] import_iovec+0x7c/0xb0 [ 419.593819][ T5374] ___sys_sendmsg+0x1e4/0x290 [ 419.599040][ T5374] ? __sys_sendmsg+0x270/0x270 [ 419.603817][ T5374] ? __fdget+0x19c/0x220 [ 419.608057][ T5374] __x64_sys_sendmsg+0x1f0/0x2c0 [ 419.613261][ T5374] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 419.618900][ T5374] ? __kasan_check_write+0x14/0x20 [ 419.624007][ T5374] ? fpregs_restore_userregs+0x128/0x260 [ 419.629643][ T5374] ? switch_fpu_return+0xe/0x10 [ 419.634503][ T5374] x64_sys_call+0x171/0x9a0 [ 419.639007][ T5374] do_syscall_64+0x4c/0xa0 [ 419.643419][ T5374] ? clear_bhb_loop+0x30/0x80 [ 419.648187][ T5374] ? clear_bhb_loop+0x30/0x80 [ 419.652997][ T5374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.658930][ T5374] RIP: 0033:0x7f6c8678f749 [ 419.663342][ T5374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.683038][ T5374] RSP: 002b:00007f6c87602038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.691477][ T5374] RAX: ffffffffffffffda RBX: 00007f6c869e5fa0 RCX: 00007f6c8678f749 [ 419.699489][ T5374] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 419.707480][ T5374] RBP: 00007f6c87602090 R08: 0000000000000000 R09: 0000000000000000 [ 419.716151][ T5374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.724123][ T5374] R13: 00007f6c869e6038 R14: 00007f6c869e5fa0 R15: 00007ffe76f8ed08 [ 419.732123][ T5374] [ 419.941268][ T28] audit: type=1400 audit(1766164162.995:470): avc: denied { block_suspend } for pid=5386 comm="syz.1.1443" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 419.947772][ T5382] syz.0.1438 uses obsolete (PF_INET,SOCK_PACKET) [ 420.230630][ T5394] incfs: Backing dir is not set, filesystem can't be mounted. [ 420.238667][ T5394] incfs: mount failed -2 [ 420.384236][ T28] audit: type=1326 audit(1766164163.455:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.0.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511578f749 code=0x7ffc0000 [ 420.409811][ T28] audit: type=1326 audit(1766164163.485:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.0.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511578f749 code=0x7ffc0000 [ 420.485479][ T28] audit: type=1326 audit(1766164163.515:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.0.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f511578f749 code=0x7ffc0000 [ 420.517312][ T28] audit: type=1326 audit(1766164163.515:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.0.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511578f749 code=0x7ffc0000 [ 420.541192][ T28] audit: type=1326 audit(1766164163.515:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.0.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511578f749 code=0x7ffc0000 [ 420.564861][ T28] audit: type=1326 audit(1766164163.515:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.0.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f511578f749 code=0x7ffc0000 [ 420.771154][ T5403] syz.4.1447[5403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.771224][ T5403] syz.4.1447[5403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.938253][ T5409] syz.2.1448[5409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.073103][ T5409] syz.2.1448[5409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.748749][ T5420] incfs: mount failed -22 [ 422.168445][ T5429] new mount options do not match the existing superblock, will be ignored [ 422.180842][ T5429] incfs: ino conflict with backing FS 1 [ 424.578234][ T5452] syz.4.1461[5452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.579137][ T5452] syz.4.1461[5452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.825724][ T5465] binder: binder_mmap: 5464 200000000000-200000003000 bad vm_flags failed -1 [ 426.179058][ T5485] incfs: mount failed -22 [ 426.398605][ T5487] futex_wake_op: syz.2.1469 tries to shift op by -1; fix this program [ 427.488976][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 427.767399][ T5507] binder: binder_mmap: 5506 200000000000-200000003000 bad vm_flags failed -1 [ 427.785656][ T5510] syz.5.1475[5510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.785728][ T5510] syz.5.1475[5510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.057856][ T5519] incfs: Backing dir is not set, filesystem can't be mounted. [ 428.076961][ T5519] incfs: mount failed -2 [ 428.181251][ T5520] FAULT_INJECTION: forcing a failure. [ 428.181251][ T5520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.254339][ T5520] CPU: 0 PID: 5520 Comm: syz.5.1487 Not tainted syzkaller #0 [ 428.261983][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.272132][ T5520] Call Trace: [ 428.275417][ T5520] [ 428.278524][ T5520] __dump_stack+0x21/0x24 [ 428.282940][ T5520] dump_stack_lvl+0xee/0x150 [ 428.287523][ T5520] ? __cfi_dump_stack_lvl+0x8/0x8 [ 428.292546][ T5520] dump_stack+0x15/0x24 [ 428.296704][ T5520] should_fail_ex+0x3d4/0x520 [ 428.301384][ T5520] should_fail+0xb/0x10 [ 428.305542][ T5520] should_fail_usercopy+0x1a/0x20 [ 428.310566][ T5520] _copy_from_user+0x1e/0xc0 [ 428.315513][ T5520] __sys_bpf+0x277/0x780 [ 428.319784][ T5520] ? bpf_link_show_fdinfo+0x320/0x320 [ 428.325256][ T5520] ? __cfi_ksys_write+0x10/0x10 [ 428.330153][ T5520] ? debug_smp_processor_id+0x17/0x20 [ 428.335525][ T5520] __x64_sys_bpf+0x7c/0x90 [ 428.339948][ T5520] x64_sys_call+0x488/0x9a0 [ 428.344448][ T5520] do_syscall_64+0x4c/0xa0 [ 428.348869][ T5520] ? clear_bhb_loop+0x30/0x80 [ 428.353550][ T5520] ? clear_bhb_loop+0x30/0x80 [ 428.358227][ T5520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.364126][ T5520] RIP: 0033:0x7fce34d8f749 [ 428.368643][ T5520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.388264][ T5520] RSP: 002b:00007fce35bde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.396705][ T5520] RAX: ffffffffffffffda RBX: 00007fce34fe6180 RCX: 00007fce34d8f749 [ 428.404684][ T5520] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 428.412660][ T5520] RBP: 00007fce35bde090 R08: 0000000000000000 R09: 0000000000000000 [ 428.420651][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.428626][ T5520] R13: 00007fce34fe6218 R14: 00007fce34fe6180 R15: 00007fff79c53aa8 [ 428.436656][ T5520] [ 428.653573][ T5524] binder: binder_mmap: 5523 200000000000-200000003000 bad vm_flags failed -1 [ 429.699359][ T5535] incfs: mount failed -22 [ 430.203192][ T5534] kthread_run failed with err -4 [ 431.218641][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 431.227724][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 431.950553][ T5570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1490'. [ 432.361774][ T5574] binder: binder_mmap: 5571 200000000000-200000003000 bad vm_flags failed -1 [ 433.167832][ T5591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1497'. [ 433.196687][ T5591] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1497'. [ 435.369797][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 435.369812][ T28] audit: type=1400 audit(1766164178.445:525): avc: denied { watch } for pid=5600 comm="syz.4.1500" path="/316/file1" dev="tmpfs" ino=1703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 435.599737][ T5615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1504'. [ 435.678333][ T5620] binder: binder_mmap: 5619 200000000000-200000003000 bad vm_flags failed -1 [ 437.216735][ T5641] incfs: Backing dir is not set, filesystem can't be mounted. [ 437.224480][ T5641] incfs: mount failed -2 [ 437.687353][ T28] audit: type=1400 audit(1766164180.755:526): avc: denied { map } for pid=5646 comm="syz.5.1513" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 437.689920][ T5647] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 439.094106][ T5653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1514'. [ 439.705448][ T5664] binder: binder_mmap: 5663 200000000000-200000003000 bad vm_flags failed -1 [ 439.740449][ T5674] syz.2.1521[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.740525][ T5674] syz.2.1521[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.982661][ T5685] incfs: Backing dir is not set, filesystem can't be mounted. [ 440.002190][ T5685] incfs: mount failed -2 [ 440.528970][ T5684] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 440.652570][ T5695] futex_wake_op: syz.2.1527 tries to shift op by -1; fix this program [ 440.665613][ T5695] fuse: Bad value for 'group_id' [ 440.999843][ T5705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1529'. [ 441.619988][ T5720] futex_wake_op: syz.2.1534 tries to shift op by -1; fix this program [ 442.523387][ T5729] FAULT_INJECTION: forcing a failure. [ 442.523387][ T5729] name fail_futex, interval 1, probability 0, space 0, times 1 [ 442.537466][ T5729] CPU: 1 PID: 5729 Comm: syz.4.1536 Not tainted syzkaller #0 [ 442.544862][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.554929][ T5729] Call Trace: [ 442.558205][ T5729] [ 442.561232][ T5729] __dump_stack+0x21/0x24 [ 442.565580][ T5729] dump_stack_lvl+0xee/0x150 [ 442.570198][ T5729] ? __cfi_dump_stack_lvl+0x8/0x8 [ 442.575236][ T5729] dump_stack+0x15/0x24 [ 442.579401][ T5729] should_fail_ex+0x3d4/0x520 [ 442.584079][ T5729] should_fail+0xb/0x10 [ 442.588240][ T5729] get_futex_key+0x13d/0xb00 [ 442.592831][ T5729] ? _parse_integer+0x2a/0x40 [ 442.597520][ T5729] ? __cfi_get_futex_key+0x10/0x10 [ 442.602633][ T5729] futex_wake_op+0x1d9/0xce0 [ 442.607224][ T5729] ? __cfi_futex_wake_op+0x10/0x10 [ 442.612334][ T5729] ? __kasan_check_write+0x14/0x20 [ 442.617447][ T5729] ? proc_fail_nth_write+0x17a/0x1f0 [ 442.622733][ T5729] ? security_file_permission+0x8a/0xb0 [ 442.628278][ T5729] ? security_file_permission+0x94/0xb0 [ 442.633913][ T5729] ? vfs_write+0x9d6/0xca0 [ 442.638331][ T5729] ? slab_free_freelist_hook+0xc2/0x190 [ 442.643886][ T5729] do_futex+0x1ad/0x420 [ 442.648049][ T5729] ? __cfi_do_futex+0x10/0x10 [ 442.652733][ T5729] ? __kasan_check_write+0x14/0x20 [ 442.657842][ T5729] ? mutex_unlock+0x89/0x220 [ 442.662444][ T5729] __se_sys_futex+0x273/0x2e0 [ 442.667116][ T5729] ? __kasan_check_write+0x14/0x20 [ 442.672227][ T5729] ? __x64_sys_futex+0x100/0x100 [ 442.677173][ T5729] ? ksys_write+0x1eb/0x240 [ 442.681682][ T5729] ? __cfi_ksys_write+0x10/0x10 [ 442.686543][ T5729] __x64_sys_futex+0xe5/0x100 [ 442.691656][ T5729] x64_sys_call+0x7ec/0x9a0 [ 442.696161][ T5729] do_syscall_64+0x4c/0xa0 [ 442.701016][ T5729] ? clear_bhb_loop+0x30/0x80 [ 442.705697][ T5729] ? clear_bhb_loop+0x30/0x80 [ 442.710382][ T5729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.716295][ T5729] RIP: 0033:0x7f6c8678f749 [ 442.720721][ T5729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.740350][ T5729] RSP: 002b:00007f6c87602038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 442.748774][ T5729] RAX: ffffffffffffffda RBX: 00007f6c869e5fa0 RCX: 00007f6c8678f749 [ 442.756759][ T5729] RDX: 0000000000000000 RSI: 0000000000000085 RDI: 0000000000000000 [ 442.764841][ T5729] RBP: 00007f6c87602090 R08: 0000000000000000 R09: 00000000c5fffffd [ 442.772935][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.780912][ T5729] R13: 00007f6c869e6038 R14: 00007f6c869e5fa0 R15: 00007ffe76f8ed08 [ 442.788896][ T5729] [ 442.980527][ T5736] fuse: Bad value for 'group_id' [ 443.064316][ T5740] incfs: Backing dir is not set, filesystem can't be mounted. [ 443.072109][ T5740] incfs: mount failed -2 [ 443.489075][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 443.918859][ T28] audit: type=1400 audit(1766164186.985:527): avc: denied { mounton } for pid=5746 comm="syz.0.1539" path="/302/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 443.965701][ T5753] syz.1.1541[5753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.965786][ T5753] syz.1.1541[5753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.996009][ T5755] syz.0.1542[5755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.009497][ T28] audit: type=1400 audit(1766164187.025:528): avc: denied { create } for pid=5746 comm="syz.0.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 444.250640][ T5757] FAULT_INJECTION: forcing a failure. [ 444.250640][ T5757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.263867][ T5757] CPU: 1 PID: 5757 Comm: syz.4.1540 Not tainted syzkaller #0 [ 444.271237][ T5757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.281379][ T5757] Call Trace: [ 444.284690][ T5757] [ 444.287628][ T5757] __dump_stack+0x21/0x24 [ 444.291952][ T5757] dump_stack_lvl+0xee/0x150 [ 444.296544][ T5757] ? __cfi_dump_stack_lvl+0x8/0x8 [ 444.301619][ T5757] ? strncpy_from_user+0x1f5/0x2d0 [ 444.306739][ T5757] dump_stack+0x15/0x24 [ 444.310902][ T5757] should_fail_ex+0x3d4/0x520 [ 444.315599][ T5757] should_fail+0xb/0x10 [ 444.319764][ T5757] should_fail_usercopy+0x1a/0x20 [ 444.324851][ T5757] _copy_from_user+0x1e/0xc0 [ 444.329452][ T5757] ipv6_flowlabel_opt+0x14a/0x1de0 [ 444.334550][ T5757] ? __kasan_check_write+0x14/0x20 [ 444.339647][ T5757] ? __cfi_ipv6_flowlabel_opt+0x10/0x10 [ 444.345173][ T5757] ? __this_cpu_preempt_check+0x13/0x20 [ 444.350711][ T5757] ? __kasan_check_write+0x14/0x20 [ 444.355802][ T5757] ? _raw_spin_lock_bh+0x8e/0xe0 [ 444.360727][ T5757] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 444.366197][ T5757] ? __local_bh_enable_ip+0x58/0x80 [ 444.371384][ T5757] ? _raw_spin_unlock_bh+0x50/0x60 [ 444.376567][ T5757] ? lock_sock_nested+0x1ec/0x280 [ 444.381641][ T5757] ? __cfi_lock_sock_nested+0x10/0x10 [ 444.387048][ T5757] do_ipv6_setsockopt+0x9d1/0x39a0 [ 444.392152][ T5757] ? strncpy_from_user+0x1fb/0x2d0 [ 444.397251][ T5757] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 444.402958][ T5757] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 444.408498][ T5757] ? fixup_exception+0xd87/0x1dd0 [ 444.413510][ T5757] ? irqentry_exit+0x37/0x40 [ 444.418084][ T5757] ? sysvec_reschedule_ipi+0x78/0x80 [ 444.423356][ T5757] ? __cfi_fixup_exception+0x10/0x10 [ 444.428632][ T5757] ? 0xffffffffa0003dcc [ 444.432771][ T5757] ? is_bpf_text_address+0x177/0x190 [ 444.438040][ T5757] ? kernel_text_address+0xa0/0xd0 [ 444.443138][ T5757] ? unwind_get_return_address+0x4d/0x90 [ 444.448753][ T5757] ? kernelmode_fixup_or_oops+0x85/0xd0 [ 444.454458][ T5757] ? __bad_area_nosemaphore+0xb5/0x620 [ 444.459994][ T5757] ? bad_area_nosemaphore+0x2d/0x40 [ 444.465179][ T5757] ? do_user_addr_fault+0xdf8/0x1050 [ 444.470447][ T5757] ? avc_has_perm_noaudit+0x2f4/0x460 [ 444.475890][ T5757] ? _parse_integer+0x2a/0x40 [ 444.480576][ T5757] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 444.486309][ T5757] ? kstrtouint_from_user+0xf7/0x150 [ 444.491604][ T5757] ? avc_has_perm+0x158/0x240 [ 444.496360][ T5757] ? __cfi_avc_has_perm+0x10/0x10 [ 444.501371][ T5757] ipv6_setsockopt+0x59/0x1a0 [ 444.506053][ T5757] rawv6_setsockopt+0x263/0x620 [ 444.510885][ T5757] ? __cfi_rawv6_setsockopt+0x10/0x10 [ 444.516241][ T5757] ? __fget_files+0x2d5/0x330 [ 444.520900][ T5757] sock_common_setsockopt+0xb1/0xc0 [ 444.526089][ T5757] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 444.531969][ T5757] __sys_setsockopt+0x306/0x4e0 [ 444.536809][ T5757] ? __cfi___sys_setsockopt+0x10/0x10 [ 444.542164][ T5757] ? ksys_write+0x1eb/0x240 [ 444.546660][ T5757] ? __cfi_ksys_write+0x10/0x10 [ 444.551500][ T5757] __x64_sys_setsockopt+0xbf/0xd0 [ 444.556513][ T5757] x64_sys_call+0x124/0x9a0 [ 444.560997][ T5757] do_syscall_64+0x4c/0xa0 [ 444.565395][ T5757] ? clear_bhb_loop+0x30/0x80 [ 444.570062][ T5757] ? clear_bhb_loop+0x30/0x80 [ 444.574723][ T5757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.580598][ T5757] RIP: 0033:0x7f6c8678f749 [ 444.584996][ T5757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.604583][ T5757] RSP: 002b:00007f6c875c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 444.612978][ T5757] RAX: ffffffffffffffda RBX: 00007f6c869e6180 RCX: 00007f6c8678f749 [ 444.620944][ T5757] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000007 [ 444.628916][ T5757] RBP: 00007f6c875c0090 R08: 0000000000000020 R09: 0000000000000000 [ 444.636873][ T5757] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.644824][ T5757] R13: 00007f6c869e6218 R14: 00007f6c869e6180 R15: 00007ffe76f8ed08 [ 444.652784][ T5757] [ 444.858554][ T5755] syz.0.1542[5755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.865787][ T28] audit: type=1400 audit(1766164187.025:529): avc: denied { sys_admin } for pid=5746 comm="syz.0.1539" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 444.938983][ T28] audit: type=1400 audit(1766164187.055:530): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 445.021434][ T5767] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1546'. [ 445.339224][ T5774] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1544'. [ 445.896250][ T5778] syz.4.1549[5778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 445.896338][ T5778] syz.4.1549[5778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.023695][ T5780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1548'. [ 447.475163][ T5803] futex_wake_op: syz.0.1557 tries to shift op by -1; fix this program [ 447.566769][ T5805] syz.2.1556[5805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.567061][ T5805] syz.2.1556[5805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.858237][ T28] audit: type=1326 audit(1766164190.925:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.2.1558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f112838f749 code=0x0 [ 448.023241][ T28] audit: type=1400 audit(1766164191.095:532): avc: denied { associate } for pid=5817 comm="syz.1.1555" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 448.602323][ T5832] FAULT_INJECTION: forcing a failure. [ 448.602323][ T5832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.683187][ T5832] CPU: 0 PID: 5832 Comm: syz.4.1561 Not tainted syzkaller #0 [ 448.690599][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 448.700665][ T5832] Call Trace: [ 448.703943][ T5832] [ 448.706870][ T5832] __dump_stack+0x21/0x24 [ 448.711219][ T5832] dump_stack_lvl+0xee/0x150 [ 448.715809][ T5832] ? __cfi_dump_stack_lvl+0x8/0x8 [ 448.720856][ T5832] dump_stack+0x15/0x24 [ 448.725010][ T5832] should_fail_ex+0x3d4/0x520 [ 448.729693][ T5832] should_fail+0xb/0x10 [ 448.733852][ T5832] should_fail_usercopy+0x1a/0x20 [ 448.738877][ T5832] _copy_from_user+0x1e/0xc0 [ 448.743464][ T5832] __sys_bpf+0x277/0x780 [ 448.747703][ T5832] ? bpf_link_show_fdinfo+0x320/0x320 [ 448.753073][ T5832] ? __cfi_ksys_write+0x10/0x10 [ 448.757921][ T5832] ? debug_smp_processor_id+0x17/0x20 [ 448.763289][ T5832] __x64_sys_bpf+0x7c/0x90 [ 448.767713][ T5832] x64_sys_call+0x488/0x9a0 [ 448.772221][ T5832] do_syscall_64+0x4c/0xa0 [ 448.776636][ T5832] ? clear_bhb_loop+0x30/0x80 [ 448.781317][ T5832] ? clear_bhb_loop+0x30/0x80 [ 448.786000][ T5832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.792065][ T5832] RIP: 0033:0x7f6c8678f749 [ 448.796480][ T5832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.816082][ T5832] RSP: 002b:00007f6c87602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.824504][ T5832] RAX: ffffffffffffffda RBX: 00007f6c869e5fa0 RCX: 00007f6c8678f749 [ 448.832479][ T5832] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000003 [ 448.840457][ T5832] RBP: 00007f6c87602090 R08: 0000000000000000 R09: 0000000000000000 [ 448.848429][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.856405][ T5832] R13: 00007f6c869e6038 R14: 00007f6c869e5fa0 R15: 00007ffe76f8ed08 [ 448.864392][ T5832] [ 448.876213][ T5834] syz.2.1562[5834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.876290][ T5834] syz.2.1562[5834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.270793][ T5849] incfs: mount failed -22 [ 449.575319][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1568'. [ 450.449868][ T5861] new mount options do not match the existing superblock, will be ignored [ 452.027896][ T5868] syz.2.1572[5868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.027980][ T5868] syz.2.1572[5868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.230566][ T28] audit: type=1326 audit(1766164195.305:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5870 comm="syz.2.1574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f112838f749 code=0x0 [ 452.311243][ T5873] FAULT_INJECTION: forcing a failure. [ 452.311243][ T5873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.324438][ T5873] CPU: 0 PID: 5873 Comm: syz.0.1575 Not tainted syzkaller #0 [ 452.331822][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 452.341905][ T5873] Call Trace: [ 452.345185][ T5873] [ 452.348109][ T5873] __dump_stack+0x21/0x24 [ 452.352449][ T5873] dump_stack_lvl+0xee/0x150 [ 452.357050][ T5873] ? __cfi_dump_stack_lvl+0x8/0x8 [ 452.362174][ T5873] ? hrtimer_reprogram+0x388/0x430 [ 452.367320][ T5873] dump_stack+0x15/0x24 [ 452.371487][ T5873] should_fail_ex+0x3d4/0x520 [ 452.376216][ T5873] should_fail+0xb/0x10 [ 452.380380][ T5873] should_fail_usercopy+0x1a/0x20 [ 452.385403][ T5873] copy_fpstate_to_sigframe+0x849/0xaa0 [ 452.390956][ T5873] ? copy_fpstate_to_sigframe+0x17c/0xaa0 [ 452.396678][ T5873] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 452.402741][ T5873] ? get_signal+0x124b/0x1520 [ 452.407413][ T5873] ? fpu__alloc_mathframe+0xb3/0x130 [ 452.412683][ T5873] arch_do_signal_or_restart+0x5bd/0x1030 [ 452.418385][ T5873] ? fput+0x154/0x1a0 [ 452.422349][ T5873] ? generic_file_rw_checks+0x2a0/0x2a0 [ 452.427878][ T5873] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 452.434019][ T5873] ? __kasan_check_write+0x14/0x20 [ 452.439116][ T5873] exit_to_user_mode_loop+0x7a/0xb0 [ 452.444298][ T5873] exit_to_user_mode_prepare+0x87/0xd0 [ 452.449738][ T5873] syscall_exit_to_user_mode+0x1a/0x30 [ 452.455273][ T5873] do_syscall_64+0x58/0xa0 [ 452.459859][ T5873] ? clear_bhb_loop+0x30/0x80 [ 452.464524][ T5873] ? clear_bhb_loop+0x30/0x80 [ 452.469217][ T5873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.475105][ T5873] RIP: 0033:0x7f511578f747 [ 452.479588][ T5873] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 452.499180][ T5873] RSP: 002b:00007f51141f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 452.507667][ T5873] RAX: 0000000000000013 RBX: 00007f51159e5fa0 RCX: 00007f511578f749 [ 452.515621][ T5873] RDX: 0000000000000002 RSI: 00002000000009c0 RDI: 0000000000000009 [ 452.523665][ T5873] RBP: 00007f51141f7090 R08: 0000000000000000 R09: 0000000000000000 [ 452.531618][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.539585][ T5873] R13: 00007f51159e6038 R14: 00007f51159e5fa0 R15: 00007ffcf42e3158 [ 452.547631][ T5873] [ 453.923593][ T5900] new mount options do not match the existing superblock, will be ignored [ 455.741608][ T5913] FAULT_INJECTION: forcing a failure. [ 455.741608][ T5913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.754950][ T5913] CPU: 0 PID: 5913 Comm: syz.0.1580 Not tainted syzkaller #0 [ 455.762331][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.772474][ T5913] Call Trace: [ 455.775760][ T5913] [ 455.778688][ T5913] __dump_stack+0x21/0x24 [ 455.783022][ T5913] dump_stack_lvl+0xee/0x150 [ 455.787618][ T5913] ? __cfi_dump_stack_lvl+0x8/0x8 [ 455.792626][ T5913] ? stack_trace_save+0x98/0xe0 [ 455.797477][ T5913] dump_stack+0x15/0x24 [ 455.801714][ T5913] should_fail_ex+0x3d4/0x520 [ 455.806381][ T5913] should_fail+0xb/0x10 [ 455.810519][ T5913] should_fail_usercopy+0x1a/0x20 [ 455.815526][ T5913] _copy_from_user+0x1e/0xc0 [ 455.820183][ T5913] ___sys_recvmsg+0x12b/0x510 [ 455.824843][ T5913] ? kstrtoull+0x137/0x1d0 [ 455.829249][ T5913] ? __sys_recvmsg+0x270/0x270 [ 455.834004][ T5913] ? kstrtouint_from_user+0xf7/0x150 [ 455.839447][ T5913] ? __fget_files+0x2d5/0x330 [ 455.844106][ T5913] ? __fdget+0x19c/0x220 [ 455.848324][ T5913] ? do_recvmmsg+0x176/0x7a0 [ 455.852901][ T5913] do_recvmmsg+0x359/0x7a0 [ 455.857294][ T5913] ? __sys_recvmmsg+0x280/0x280 [ 455.862129][ T5913] ? __cfi_mutex_unlock+0x10/0x10 [ 455.867134][ T5913] ? __kasan_check_write+0x14/0x20 [ 455.872218][ T5913] ? fput+0x154/0x1a0 [ 455.876180][ T5913] __x64_sys_recvmmsg+0x18d/0x240 [ 455.881195][ T5913] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 455.886741][ T5913] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 455.892802][ T5913] x64_sys_call+0x3e7/0x9a0 [ 455.897293][ T5913] do_syscall_64+0x4c/0xa0 [ 455.901823][ T5913] ? clear_bhb_loop+0x30/0x80 [ 455.906484][ T5913] ? clear_bhb_loop+0x30/0x80 [ 455.911149][ T5913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.917040][ T5913] RIP: 0033:0x7f511578f749 [ 455.921463][ T5913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.941068][ T5913] RSP: 002b:00007f51141d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 455.949480][ T5913] RAX: ffffffffffffffda RBX: 00007f51159e6090 RCX: 00007f511578f749 [ 455.957435][ T5913] RDX: 0400000000000179 RSI: 0000200000000480 RDI: 000000000000000b [ 455.965410][ T5913] RBP: 00007f51141d6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.973364][ T5913] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 455.981325][ T5913] R13: 00007f51159e6128 R14: 00007f51159e6090 R15: 00007ffcf42e3158 [ 455.989283][ T5913] [ 456.372052][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 456.381047][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 457.067874][ T5921] syz.2.1587[5921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.067950][ T5921] syz.2.1587[5921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.130936][ T28] audit: type=1326 audit(1766164200.205:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.4.1588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c8678f749 code=0x0 [ 457.173152][ T5929] syz.5.1591[5929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.173221][ T5929] syz.5.1591[5929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.212492][ T5932] syz.5.1592[5932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.256877][ T5932] syz.5.1592[5932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.292534][ T5939] syz.5.1595[5939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.304077][ T5939] syz.5.1595[5939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.613550][ T5943] new mount options do not match the existing superblock, will be ignored [ 457.634111][ T5943] incfs: ino conflict with backing FS 1 [ 458.713581][ T5960] syz.2.1601[5960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.714242][ T5960] syz.2.1601[5960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.025589][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 459.045909][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 459.499146][ T5977] netlink: 'syz.1.1606': attribute type 27 has an invalid length. [ 459.551137][ T5977] bridge0: port 3(gretap0) entered disabled state [ 459.598058][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.605377][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.753794][ T5979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1606'. [ 459.930503][ T28] audit: type=1326 audit(1766164203.005:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.2.1610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f112838f749 code=0x0 [ 460.030231][ T5992] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1611'. [ 460.156428][ T6002] new mount options do not match the existing superblock, will be ignored [ 460.167937][ T6002] incfs: ino conflict with backing FS 1 [ 461.098911][ T28] audit: type=1400 audit(1766164204.165:536): avc: denied { create } for pid=6013 comm="syz.5.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 461.137639][ T6015] FAULT_INJECTION: forcing a failure. [ 461.137639][ T6015] name failslab, interval 1, probability 0, space 0, times 0 [ 461.150351][ T6015] CPU: 0 PID: 6015 Comm: syz.2.1617 Not tainted syzkaller #0 [ 461.157728][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.167789][ T6015] Call Trace: [ 461.171077][ T6015] [ 461.174011][ T6015] __dump_stack+0x21/0x24 [ 461.178342][ T6015] dump_stack_lvl+0xee/0x150 [ 461.182937][ T6015] ? __cfi_dump_stack_lvl+0x8/0x8 [ 461.187973][ T6015] ? call_rcu+0xb83/0xf90 [ 461.192323][ T6015] ? exit_to_user_mode_loop+0x9b/0xb0 [ 461.197717][ T6015] dump_stack+0x15/0x24 [ 461.201889][ T6015] should_fail_ex+0x3d4/0x520 [ 461.206594][ T6015] __should_failslab+0xac/0xf0 [ 461.211375][ T6015] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 461.217366][ T6015] should_failslab+0x9/0x20 [ 461.221878][ T6015] __kmem_cache_alloc_node+0x3d/0x2c0 [ 461.227257][ T6015] ? __cfi_mutex_lock+0x10/0x10 [ 461.232111][ T6015] ? delete_node+0x3dc/0xa60 [ 461.236714][ T6015] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 461.242715][ T6015] __kmalloc+0xa1/0x1e0 [ 461.246891][ T6015] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 461.252961][ T6015] tracepoint_probe_unregister+0x1e6/0x8b0 [ 461.258773][ T6015] bpf_probe_unregister+0x61/0x70 [ 461.263803][ T6015] bpf_raw_tp_link_release+0x63/0x90 [ 461.269086][ T6015] bpf_link_free+0x13a/0x390 [ 461.273682][ T6015] ? bpf_link_put_deferred+0x20/0x20 [ 461.278964][ T6015] ? security_file_free+0xd8/0xf0 [ 461.283989][ T6015] bpf_link_release+0x15f/0x170 [ 461.288829][ T6015] ? __cfi_bpf_link_release+0x10/0x10 [ 461.294186][ T6015] __fput+0x1fc/0x8f0 [ 461.298172][ T6015] ____fput+0x15/0x20 [ 461.302161][ T6015] task_work_run+0x1db/0x240 [ 461.306751][ T6015] ? __cfi_task_work_run+0x10/0x10 [ 461.311854][ T6015] ? __cfi___close_range+0x10/0x10 [ 461.316985][ T6015] exit_to_user_mode_loop+0x9b/0xb0 [ 461.322184][ T6015] exit_to_user_mode_prepare+0x87/0xd0 [ 461.327644][ T6015] syscall_exit_to_user_mode+0x1a/0x30 [ 461.333111][ T6015] do_syscall_64+0x58/0xa0 [ 461.337609][ T6015] ? clear_bhb_loop+0x30/0x80 [ 461.342286][ T6015] ? clear_bhb_loop+0x30/0x80 [ 461.346960][ T6015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.352842][ T6015] RIP: 0033:0x7f112838f749 [ 461.357242][ T6015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.376831][ T6015] RSP: 002b:00007f1129182038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 461.385231][ T6015] RAX: 0000000000000000 RBX: 00007f11285e6090 RCX: 00007f112838f749 [ 461.393189][ T6015] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 461.401142][ T6015] RBP: 00007f1129182090 R08: 0000000000000000 R09: 0000000000000000 [ 461.409098][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.417054][ T6015] R13: 00007f11285e6128 R14: 00007f11285e6090 R15: 00007ffff5dcba38 [ 461.425013][ T6015] [ 461.428562][ T16] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 461.440318][ T16] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 461.446451][ T16] CPU: 1 PID: 16 Comm: rcu_exp_gp_kthr Not tainted syzkaller #0 [ 461.454053][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.464086][ T16] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 461.470221][ T16] Code: 80 3c 30 00 74 05 e8 f4 86 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 461.489810][ T16] RSP: 0018:ffffc90000107930 EFLAGS: 00010096 [ 461.495863][ T16] RAX: 1ffff110220d9a36 RBX: ffff8881106cd1a8 RCX: ffff88813d8f3cc0 [ 461.503821][ T16] RDX: ffff888100322880 RSI: 0000000000000001 RDI: ffffc90000e1f000 [ 461.511780][ T16] RBP: ffffc90000107970 R08: 0000000000000000 R09: fffffbfff0ee4f16 [ 461.519833][ T16] R10: 00000000b720eca3 R11: 1ffffffff0ee4f15 R12: 0000000000000001 [ 461.527797][ T16] R13: ffff8881106cd1a8 R14: dffffc0000000000 R15: ffffffff81714650 [ 461.535758][ T16] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 461.544759][ T16] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.551441][ T16] CR2: 0000000000000000 CR3: 0000000120ef5000 CR4: 00000000003506a0 [ 461.559562][ T16] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 461.567508][ T16] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 461.575548][ T16] Call Trace: [ 461.578903][ T16] [ 461.581814][ T16] __schedule+0x1263/0x14e0 [ 461.586298][ T16] ? __sched_text_start+0x8/0x8 [ 461.591121][ T16] ? ttwu_do_activate+0x174/0x280 [ 461.596122][ T16] ? preempt_schedule+0xa7/0xb0 [ 461.600941][ T16] preempt_schedule_common+0x9b/0xf0 [ 461.606198][ T16] preempt_schedule+0xa7/0xb0 [ 461.610848][ T16] ? __cfi_preempt_schedule+0x10/0x10 [ 461.616191][ T16] ? autoremove_wake_function+0x37/0x110 [ 461.621813][ T16] preempt_schedule_thunk+0x16/0x18 [ 461.626989][ T16] _raw_spin_unlock_irqrestore+0x6f/0x80 [ 461.632599][ T16] __wake_up+0x11b/0x190 [ 461.636820][ T16] ? __cfi___wake_up+0x10/0x10 [ 461.641562][ T16] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 461.646993][ T16] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 461.652771][ T16] ? finish_swait+0x17d/0x1b0 [ 461.657430][ T16] rcu_exp_sel_wait_wake+0x1a29/0x1e40 [ 461.662873][ T16] ? show_rcu_gp_kthreads+0x2600/0x2600 [ 461.668484][ T16] ? _raw_spin_lock_irq+0x8f/0xe0 [ 461.673486][ T16] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 461.679021][ T16] ? preempt_schedule_thunk+0x16/0x18 [ 461.684405][ T16] wait_rcu_exp_gp+0x33/0x40 [ 461.688972][ T16] kthread_worker_fn+0x3bf/0x770 [ 461.693883][ T16] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 461.699155][ T16] kthread+0x281/0x320 [ 461.703195][ T16] ? __cfi_kthread_worker_fn+0x10/0x10 [ 461.708627][ T16] ? __cfi_kthread+0x10/0x10 [ 461.713190][ T16] ret_from_fork+0x1f/0x30 [ 461.717584][ T16] [ 461.720574][ T16] Modules linked in: [ 461.724446][ T16] ---[ end trace 0000000000000000 ]--- [ 461.730047][ T16] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 461.736174][ T16] Code: 80 3c 30 00 74 05 e8 f4 86 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 461.755753][ T16] RSP: 0018:ffffc90000107930 EFLAGS: 00010096 [ 461.761790][ T16] RAX: 1ffff110220d9a36 RBX: ffff8881106cd1a8 RCX: ffff88813d8f3cc0 [ 461.769735][ T16] RDX: ffff888100322880 RSI: 0000000000000001 RDI: ffffc90000e1f000 [ 461.777680][ T16] RBP: ffffc90000107970 R08: 0000000000000000 R09: fffffbfff0ee4f16 [ 461.785622][ T16] R10: 00000000b720eca3 R11: 1ffffffff0ee4f15 R12: 0000000000000001 [ 461.793567][ T16] R13: ffff8881106cd1a8 R14: dffffc0000000000 R15: ffffffff81714650 [ 461.801517][ T16] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 461.810431][ T16] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.816999][ T16] CR2: 0000000000000000 CR3: 0000000120ef5000 CR4: 00000000003506a0 [ 461.824955][ T16] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 461.832898][ T16] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 461.840848][ T16] Kernel panic - not syncing: Fatal exception [ 462.948946][ T16] Shutting down cpus with NMI [ 462.953831][ T16] Kernel Offset: disabled [ 462.958140][ T16] Rebooting in 86400 seconds..