last executing test programs: 29m46.747774639s ago: executing program 32 (id=109): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x100022, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c046, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x20000, 0x28000}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x68}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000640)=0x7ff, 0x12) 29m28.568174914s ago: executing program 33 (id=195): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x802, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x8) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000a3d000/0x2000)=nil, 0x2000, 0x100000e, 0x10, r0, 0x44ed7000) socket(0x10, 0x2, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x3000007, 0x88010, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key(&(0x7f00000005c0)='asymmetric\x00', 0x0, &(0x7f0000002240)="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", 0x559, r4) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000027c0)={r5, 0x17f}, &(0x7f0000002800)=ANY=[], &(0x7f0000002840)="929835e740d6a600000000000000010100000002000040", 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x80) r6 = perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000000c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0000000500000001"], 0x48) setuid(0xee00) io_uring_setup(0xd23, &(0x7f00000000c0)={0x0, 0x9f2f, 0x2, 0x0, 0x200000ee, 0x0, r6}) 29m18.731133278s ago: executing program 34 (id=241): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x6c, r3, 0x1, 0xfffffffd, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffe00, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @local, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000014}) 26m29.291743331s ago: executing program 35 (id=913): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000f8ffffff18110000000ace61d8c9335bbe086839509fd5f89f8f63a17d6e921b9c8feb0ac8383d206df983156525ab0000acd26fb2390f0b828e0a3b21436fa12f57629dd7c4", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000400000008500000006000000bf91000000000000b7020000010000008500000084000000b70000000000000095e8ff000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = shmget$private(0x0, 0x800000, 0x20, &(0x7f0000173000/0x800000)=nil) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f00000005c0)='.\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={[{@none}, {}]}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) shmctl$SHM_LOCK(r3, 0xb) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x17) r4 = fsopen(&(0x7f00000003c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000004c0)='fd', &(0x7f0000000580)='\x00F\xaa\n5\x10\xa7\\GZ&\x7fd\xe7\x17\xec\xf9yf\x013', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000800)="c1188e99", 0x0, 0x7fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x181002, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000880)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r5, &(0x7f00000008c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000900)={0x0, 0xffffef7b, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000980), &(0x7f0000000a40)=0x4) r7 = syz_open_pts(r5, 0x20800) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000940)=0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_CAPBSET_READ(0x17, 0x22) 23m39.908404829s ago: executing program 36 (id=2146): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00), 0x0, &(0x7f0000002e40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 23m34.667974732s ago: executing program 37 (id=2198): clock_nanosleep(0x2, 0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000440)={0xa, 0x0, 0x7fdfd, @local, 0xe, 0x400}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000540)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000580)=0x6) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x1, 0x0, &(0x7f0000000600)) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x5}, 0x8) recvfrom$inet(r3, &(0x7f0000000680)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000006c0), 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000780)='./md0\x00', 0x2, 0x0) 23m17.988198802s ago: executing program 38 (id=2311): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f00000003c0)={'full'}, 0xfffffdef) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 22m53.748706092s ago: executing program 39 (id=2491): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000340)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000400), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) sendmsg$tipc(r2, &(0x7f0000000440)={&(0x7f0000000480)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}, 0x1}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="9e", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x1) 22m50.177983725s ago: executing program 40 (id=2398): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x2, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xd9, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x4000000000008, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0x4000000e4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x200000000c, 0x8, 0x0, 0x4, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x2000000000000009, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x1000100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]}) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22m31.136627005s ago: executing program 41 (id=2659): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8f5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffe0, 0x2, {{0x4, 0x10, 0x4, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x4890) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 20m32.423299641s ago: executing program 42 (id=3258): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f000001ddc0)) perf_event_open(&(0x7f000001de00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f000001df40)={0x0, 0x0, &(0x7f000001df80)={&(0x7f000001dfc0)=ANY=[@ANYBLOB="1c000000010401000000000300000000020000000500010001000000"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f000001e340)=[{{&(0x7f000001e380)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f000001e3c0)=[{&(0x7f000001e400)}], 0x1}, 0x20000000}], 0x1, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f000001e440)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r4 = add_key$keyring(&(0x7f000001e480), &(0x7f000001e4c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r4}) add_key(0x0, 0x0, &(0x7f000001e640), 0x0, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000280)=0x8, 0x4) bind$inet(r6, &(0x7f0000000300)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000380), &(0x7f00000003c0)=@udp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r5, 0x0, 0x0, 0x1}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f000001e840)={0x0, 0x0, &(0x7f000001e880)={0x0, 0x20}}, 0x20008080) 20m31.05586932s ago: executing program 43 (id=3265): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') pread64(r1, &(0x7f0000000400)=""/172, 0xac, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000006c0)) setpgid(r2, r2) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000800)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f0000000900)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000000940)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000980)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) signalfd4(r4, &(0x7f0000000a80)={[0xf8]}, 0x8, 0x1800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026ae7000fcdbdf2502000000080069005e1ced0308000c0100"], 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x4000040) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000b80)={0x0, 0xffffffffffffff8c, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) 19m59.931888531s ago: executing program 44 (id=3404): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@auto_da_alloc}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f00000009c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0x0, 0xe8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8971, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW2(r3, 0x5437, 0x0) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)='1\x00', 0x1) getdents(r0, &(0x7f0000000980)=""/43, 0x2b) 19m32.304118566s ago: executing program 45 (id=3469): syz_usb_connect(0x3, 0x40, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x810) r1 = syz_create_resource$futex(&(0x7f0000000340)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(r1, 0x86, 0x4, 0x0, 0x0, 0x1000000) r2 = getpgrp(0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write(r3, &(0x7f0000000200)="010000000000000020", 0x9) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8000]}, 0x8, 0x800) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x2, r2}) fcntl$getownex(r4, 0x10, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000094c0)={0x0, 0x0, &(0x7f0000009500)={&(0x7f0000009540)={0x17, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x33, 0x0, "cae22db80c58452486139b8f27f7ed4d06fefe03db952b419cb9482d58985e0e1f12a4d39762c91ff4118ec770841e56c4787763927134711244329bc22de589e14e381e3753ea679774f588a173a5cc"}, 0xd8) 19m28.486933965s ago: executing program 46 (id=3477): prlimit64(0x0, 0xe, &(0x7f0000001800)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="75a1d70300", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x3, 0x4, 0x0, &(0x7f0000001380)='syzkaller\x00', 0x5, 0xc3, &(0x7f00000013c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000014c0), 0x8, 0x10, &(0x7f0000001500), 0x10}, 0x94) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) poll(&(0x7f0000000040), 0x0, 0x9) syz_open_dev$evdev(0x0, 0x0, 0x822b01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) 18m9.244950429s ago: executing program 47 (id=3663): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r5 = io_uring_setup(0x57fe, &(0x7f0000000440)={0x0, 0x6c33, 0x1, 0x26, 0x2a9}) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x7, 0xffff}, &(0x7f0000001580)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000015c0)={0x0, 0x7, 0xfffd, 0x3297, 0x1a2, 0x2}, &(0x7f0000001600)=0x14) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000001640)=@assoc_value={0x0}, &(0x7f0000001680)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000016c0)={r7, 0x9, 0x400, 0xf, 0x2, 0x7}, &(0x7f0000001700)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001740)={0x0, 0x5}, &(0x7f0000001780)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000001a40)={r7, 0x4, 0x6, 0xd3d, 0x0, 0x4}, &(0x7f0000001a80)=0x14) clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff9, 0x7, 0x0, 0xd, 0x7bffffff, 0xfffffffffffffffe, 0x7, 0x200000000000000, 0xbd, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8100000000005a, 0x3, 0x4}) 14m3.587922898s ago: executing program 48 (id=5030): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 13m33.948780478s ago: executing program 49 (id=5458): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x3, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{}, {0x1, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x28) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0x4, 0x4) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090426810000000e0000000000000008000f0001009ece", 0x24) 13m32.860913649s ago: executing program 50 (id=5469): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)='X', 0x34000, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, 0x0, 0x0) 12m54.749571602s ago: executing program 51 (id=5947): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/sda1\x00', &(0x7f0000000b00)='./mnt\x00', &(0x7f0000000b40)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./mnt\x00', 0x149000, 0x19a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000f80)={0x5, 0xffffffffffffffff, 0x8001, 0x7ffb, 0xb, 0x3}) fsync(r0) 12m2.408656615s ago: executing program 52 (id=6382): sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x14, r0, 0x917, 0x0, 0x25dfdbff}, 0x14}}, 0x4) r1 = io_uring_setup(0x527, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x5, 0x2, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) socket$rds(0x15, 0x5, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271c, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x20) socket(0x2a, 0x2, 0x9) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m57.208464015s ago: executing program 53 (id=6403): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x200000000001, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000014010000630000001d13fdff000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07b50f5e6fde6252f1520c"], &(0x7f0000001300)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001340), 0xffffffffffffff1c, 0x10, &(0x7f0000001380), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x28}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) listxattr(&(0x7f0000001980)='./file1\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='configfs\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x9000000e, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0x8, 0x4) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./bus\x00', 0x14552, &(0x7f00000003c0)=ANY=[], 0x7b, 0x11ff, &(0x7f00000019c0)="$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") recvmsg(0xffffffffffffffff, 0x0, 0x6f594395ac22220c) creat(0x0, 0xe0) r1 = open(&(0x7f0000002c00)='./bus\x00', 0x107000, 0x0) fchdir(r1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11m44.909193898s ago: executing program 4 (id=6454): sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x14, r0, 0x917, 0x0, 0x25dfdbff}, 0x14}}, 0x4) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, 0x0) 11m44.623424547s ago: executing program 4 (id=6455): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) mlock(&(0x7f00009b8000/0x1000)=nil, 0x1000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) io_uring_setup(0x386b, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000a40)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000b80)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) dup(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000500)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000580)="ee64", 0x2}], 0x2) 11m43.461126366s ago: executing program 4 (id=6456): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0xfffffffe, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={0x0, 0x11c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x2, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x801, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000240)=[{r1, 0x1010}], 0x1, &(0x7f0000000280), 0x0, 0x0) unshare(0x22020400) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000056c0)=""/4117, &(0x7f0000006700)=0x1015) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000a00), 0x10) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x2) syz_read_part_table(0x407b, &(0x7f0000001640)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x52) 11m42.44008947s ago: executing program 4 (id=6461): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f04000000"], 0x0, 0x28}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001f80), 0x3}, 0xbc8ddc50c9d0a44d, 0xff, 0x2, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_emit_ethernet(0x51, &(0x7f0000001fc0)=ANY=[], 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffff215c214dff86dd607f00ef00042f0000000000000000000000000000000000ff020000000000000000000000000001000088be"], 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002680), 0x40000, 0x0) lseek(r1, 0x4, 0x3) syz_mount_image$msdos(&(0x7f0000002100), &(0x7f0000002140)='./file0\x00', 0x2008854, &(0x7f0000002780)=ANY=[@ANYBLOB="00bb95b182efca1a2874222180ac77a665c50bcab6829eb5440102cb9ccb6b304bd823f1d64c1aa491aae7abb454e98866318185c90981c9137604a27af4dac50991ea683345a989bf2bab1a1935c182e5ccbfe42e2fd6f441488bde4dd3fafa1005d841e935d0c2fbe25c147c045eecd49396598a3b252850b22759cd7f1039214bb99f4fdd4321bc"], 0x1, 0x284, &(0x7f00000021c0)="$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") mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_clone3(&(0x7f00000024c0)={0x23800000, &(0x7f0000002540), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000002580)=0x0) io_submit(r2, 0x2, &(0x7f00000029c0)=[0x0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x7, 0x200, 0xffffffffffffffff, &(0x7f00000028c0)="4f1d6a2d5605fa9831e955cd780200461be50237c306f3b96e7251ddcace3fd4e22b5715a3956c13b680d4714e885011ed883ad1c873259c41815d573756febe3d0007c6fb31b4019e8d2ba95d8bd5bc5dc2980a1f095b55f522815e33bc17a60c3cd9dc3c92926561e6d942a4dbd17521482d995530ddc8c9a0de0f119fc42b2e3ad9d585f8e467c21426083f9dcce472a751c1", 0x94, 0x3ff}]) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2001) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3}, 0xc) 11m41.598295045s ago: executing program 4 (id=6464): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x51, 0x0, 0x1, 0xfffffffe}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, 0xffffffffffffffff, 0x403000) perf_event_open(&(0x7f0000000480)={0x1, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x80, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa4, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x39, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0x4}, 0x50) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x14) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2ec01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpid() ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000740)={0x2, 0x0, @local}, 0x6b) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x4, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f000046a000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000140)=0x101, 0x7, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000680001040000000000000000020000000000000008000100010000000800050001"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000006800010400000000000000000000000000000000080001000300000014000200010000000000000002"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000018000104000000000000000002180000fe0300010000000008000100c000020008001e0003"], 0x2c}}, 0x0) 11m41.436872532s ago: executing program 4 (id=6468): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x10005, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_pidfd_open(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x321081a, &(0x7f0000000140)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000180)="$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") truncate(&(0x7f0000000600)='./file1\x00', 0x8800000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x503) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000001740)='./file0\x00', 0x8c5) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000001780)='./file0\x00', 0x55000061) rename(&(0x7f0000001840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000018c0)='./file0\x00') sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x4008000) syz_mount_image$ext4(&(0x7f0000001680)='ext4\x00', &(0x7f00000016c0)='./file1\x00', 0x1a00404, &(0x7f0000001700), 0x1, 0xbb4, &(0x7f0000002280)="$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") r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002e80)={0x1, &(0x7f0000002ec0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000002f00)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 11m41.397093876s ago: executing program 54 (id=6468): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x10005, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_pidfd_open(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x321081a, &(0x7f0000000140)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000180)="$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") truncate(&(0x7f0000000600)='./file1\x00', 0x8800000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x503) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000001740)='./file0\x00', 0x8c5) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000001780)='./file0\x00', 0x55000061) rename(&(0x7f0000001840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000018c0)='./file0\x00') sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x4008000) syz_mount_image$ext4(&(0x7f0000001680)='ext4\x00', &(0x7f00000016c0)='./file1\x00', 0x1a00404, &(0x7f0000001700), 0x1, 0xbb4, &(0x7f0000002280)="$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") r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002e80)={0x1, &(0x7f0000002ec0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000002f00)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 2m49.257613673s ago: executing program 5 (id=10266): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x6, &(0x7f0000000440)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000480)='GPL\x00', 0x5, 0x29e, &(0x7f00000004c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m49.127339147s ago: executing program 5 (id=10268): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000ec0)='.\x00', 0xa4000271) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f00)={0x1, &(0x7f0000000f40)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 2m49.040675005s ago: executing program 5 (id=10270): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x13100, 0xc8, 0x2, 0x2, 0x0, 0x10001, 0x5, 0x0, 0x7ff, 0x0, 0x81}, 0x0, 0x5, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedd07910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa", @ANYRES32=r0], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) 2m48.885274641s ago: executing program 5 (id=10273): sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b7020000ff0201007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000e40)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffefffb}, 0x8, 0x80000001, 0x0, 0x7, 0x766e0b24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4002000000000037}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000040002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m48.580622682s ago: executing program 5 (id=10282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2m48.397283901s ago: executing program 5 (id=10290): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f0000002840)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000600)='7', 0x1) ptrace(0x10, 0x1) 2m38.917471834s ago: executing program 3 (id=10517): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m38.886764048s ago: executing program 3 (id=10520): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000300140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2m38.56156337s ago: executing program 3 (id=10530): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m38.56108382s ago: executing program 3 (id=10532): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 2m38.537701223s ago: executing program 3 (id=10534): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0xfd, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0xa0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m38.456941121s ago: executing program 3 (id=10540): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r1, {0xb, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x61}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000006c0), 0x56) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r1, 0x42}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)="27030200dc0f14000e0000000025c10200000006125c", 0x16}, {&(0x7f0000000040)="02db0b9ef1cafdabc0356e8eb692d5ce214549d51f0063d6", 0x18}], 0x2}, 0x4005) 2m38.427385154s ago: executing program 55 (id=10540): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r1, {0xb, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x61}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000006c0), 0x56) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r1, 0x42}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)="27030200dc0f14000e0000000025c10200000006125c", 0x16}, {&(0x7f0000000040)="02db0b9ef1cafdabc0356e8eb692d5ce214549d51f0063d6", 0x18}], 0x2}, 0x4005) 2m32.093085008s ago: executing program 56 (id=10290): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f0000002840)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000600)='7', 0x1) ptrace(0x10, 0x1) 2m30.546718965s ago: executing program 8 (id=10668): r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5bceeff800000000000000000000200", 0x17}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x36, 0x30, 0x39, 0x37, 0x30, 0x64, 0x66, 0x36, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000005c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @auto=[0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x64, 0x30, 0x30, 0x49b9b7e4dbfa7a3a, 0x30, 0x66, 0x30, 0x30, 0x63]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x35, 0x30, 0x30, 0x35]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000ac0), &(0x7f0000000b00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000b40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x34}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='N', 0x1, r1) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x33, 0x66, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1f}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e00)={'fscrypt:', @auto=[0x38, 0x31, 0x61, 0x39, 0x66, 0x65, 0x66, 0x36, 0x32, 0x34, 0x65, 0x64, 0x36, 0x36, 0x37, 0x39]}, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff001122ddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @auto=[0x33, 0x5a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000fc0)={0x0, "0011223344552233445566778899aabbccddeefb00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000001040), &(0x7f0000001080)={'fscrypt:', @desc3}, &(0x7f00000010c0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000001240)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 2m30.4969226s ago: executing program 8 (id=10672): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000002"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m30.427842197s ago: executing program 8 (id=10673): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x2, @local, 0xa65f}}, 0x1ff, 0x9}, &(0x7f0000000300)=0x90) 2m30.316923208s ago: executing program 8 (id=10674): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m30.235266367s ago: executing program 8 (id=10678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001940)={'syzkaller1\x00', 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000300)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba"}}, 0x26) 2m30.100777111s ago: executing program 8 (id=10680): openat(0xffffffffffffff9c, &(0x7f0000004e00)='./file1\x00', 0x42, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000004e40)='./file1\x00', &(0x7f0000004e80), 0x0, 0x0, 0x1) llistxattr(&(0x7f0000004ec0)='./file1\x00', &(0x7f0000004f00)=""/38, 0x26) 2m29.927831238s ago: executing program 57 (id=10680): openat(0xffffffffffffff9c, &(0x7f0000004e00)='./file1\x00', 0x42, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000004e40)='./file1\x00', &(0x7f0000004e80), 0x0, 0x0, 0x1) llistxattr(&(0x7f0000004ec0)='./file1\x00', &(0x7f0000004f00)=""/38, 0x26) 2m18.942718855s ago: executing program 7 (id=10927): socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bind$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000280)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) socket$igmp(0x2, 0x3, 0x2) sendto(0xffffffffffffffff, &(0x7f0000000500), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000540)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f0000000580)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000005c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m18.00533884s ago: executing program 7 (id=10948): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) waitid$P_PIDFD(0x3, r1, 0x0, 0x4, 0x0) 2m17.901066131s ago: executing program 7 (id=10951): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x4, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/drm/parameters/debug\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 2m17.8132158s ago: executing program 7 (id=10956): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000007c0)='./file0/../file0\x00', &(0x7f0000000800)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000840)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000d40)='./file0/file0/file0\x00', &(0x7f0000000880)='./file0/file0/file0\x00', 0x0, 0x1a98c2, 0x0) 2m17.750247876s ago: executing program 7 (id=10959): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000380), 0x0}, 0x20) 2m17.21727733s ago: executing program 7 (id=10969): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x24f}, &(0x7f0000001080)=0x8) 2m17.011447081s ago: executing program 58 (id=10969): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x24f}, &(0x7f0000001080)=0x8) 2.054160131s ago: executing program 9 (id=14318): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 1.973027379s ago: executing program 2 (id=14321): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x2000080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000300)='7', 0x1) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f00000004c0)=[{&(0x7f0000000500)={0x0, &(0x7f0000000540)='#', 0x2, 0x1}, 0x0}], 0x0) 1.872912779s ago: executing program 2 (id=14324): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000001180)=ANY=[@ANYRES32=r1], 0x12) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="0c0000000988"}) 1.692473967s ago: executing program 9 (id=14328): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@updpolicy={0xfc, 0x1b, 0x1, 0x4070bd2d, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf803, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x400}, {0x1, 0x6, 0x80}, 0xfffffffc}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x5, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ffc}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) 1.594750217s ago: executing program 9 (id=14331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newlink={0x64, 0x10, 0x19, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8050) 1.56448009s ago: executing program 2 (id=14334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x2000080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000300)='7', 0x1) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f00000004c0)=[{&(0x7f0000000500)={0x0, &(0x7f0000000540)='#', 0x2, 0x1}, 0x0}], 0x0) 1.464352631s ago: executing program 9 (id=14335): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 1.358174671s ago: executing program 2 (id=14337): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x2000200, &(0x7f0000000540), 0x7, 0x504, &(0x7f0000000580)="$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") r0 = syz_clone(0x4004000, 0x0, 0xfffffffffffffe59, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') 1.263732271s ago: executing program 1 (id=14338): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r2, 0x16, 0x0, @val=@perf_event}, 0x18) setsockopt$inet_udp_int(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x80000006, 0x66}]}, 0x10) 1.186369509s ago: executing program 6 (id=14339): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x1, 0x8}]}, 0x80}, 0x1, 0x7}, 0x4) 1.142268453s ago: executing program 1 (id=14340): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) getsockopt(r0, 0x111, 0x1, 0x0, &(0x7f00000000c0)) 1.125694965s ago: executing program 2 (id=14342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000400)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) 1.045159893s ago: executing program 6 (id=14343): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10001) 1.044967063s ago: executing program 1 (id=14344): getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x19, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r2, 0x16, 0x0, @val=@perf_event}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 1.044768253s ago: executing program 6 (id=14345): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x32]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000400)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc1}, &(0x7f0000000700)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @auto=[0x30, 0x30, 0xe, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x5b, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x840}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000900)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x35, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0xc]}, &(0x7f0000000b00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000c00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x34, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d80), &(0x7f0000000dc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000000e00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000f00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x1}, 0x0, 0x0, r0) request_key(&(0x7f0000001000)='asymmetric\x00', &(0x7f0000001040)={'syz', 0x0}, &(0x7f0000001080)='bbr', r0) keyctl$search(0xa, r0, &(0x7f00000010c0)='user\x00', &(0x7f0000001100)={'syz', 0x1}, 0x0) 1.014323237s ago: executing program 1 (id=14346): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1, 0x1}, 0x80, 0x0}}], 0x1, 0x40894) 979.23189ms ago: executing program 9 (id=14347): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x2000080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000300)='7', 0x1) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f00000004c0)=[{&(0x7f0000000500)={0x0, &(0x7f0000000540)='#', 0x2, 0x1}, 0x0}], 0x0) 947.228213ms ago: executing program 6 (id=14349): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000c40)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000d40)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000dc0)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000e00)=@file={0x1}, 0x6e) 864.519132ms ago: executing program 1 (id=14350): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x400}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x204a, 0x4) write$binfmt_script(r0, &(0x7f0000001940)={'#! ', './file0', [], 0xa, "cecb09f41c7dab4325a13f22b8cd90abd1f6e5892dc261ce88727da855"}, 0x28) 851.498733ms ago: executing program 9 (id=14351): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)={0x90000018}) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000280)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)={0x0, 0x22, 0x21}, 0x18) unshare(0x22020600) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x4000004) capset(&(0x7f0000000480)={0x20080522}, &(0x7f00000004c0)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) fcntl$setpipe(r7, 0x407, 0x100000) r8 = openat(r5, &(0x7f00000003c0)='./debug\x00', 0x2, 0x0) pread64(r8, &(0x7f0000000400), 0x100, 0x3f00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x1ff) 724.373976ms ago: executing program 1 (id=14352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000000b80)={'syzkaller0\x00', @random="2b0100004ec6"}) 684.4405ms ago: executing program 6 (id=14353): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x2000200, &(0x7f0000000540), 0x7, 0x504, &(0x7f0000000580)="$eJzs3E9sVMcdAODfe15jA6a4lNLi0mJKq1qtaoOhhUOliqqVemilKOSQHC3bIOIFR7YjxRaCRYrIMULKNYpyzDWHXJMol4RTpFzJMRckFHEBctro7b5d767Xi/+tHezvk9aemZ19M7Pz5u28Ga8D2LOGsx9JxEBEPIiIwxGRtmYYrv56+vjm5LPHNyejVC5f/j7JXhZPsnguqfxM42AeGUkj0reT2hNN5heXZnqjOD2Xx8cWrr8xNr+49Ndr1yeuTl+dvjF+8eL5c2cv/H38b+tvVJvysnY9Gbo1e+L4f1+79//JQi29P//d2I6tMhzD7apS8cetLmyHHWoIJ4VOOf/Z/cqwZtn5n3VXb2X8H46e6Nh5wC5SLpfLfas/XSq3urMiBXhhJdHp2XT7KgJss9oHfXb/W3u0mwjs6870Y8c9ulS9Acra/TR/RJysJKYRMZLfwB/qUvnDUYhXSz98kD2yeKEL6xAAAI0+u1SbCbbM/wYjjjXk+1m+hzIYET+PiCMR8YuIOBoRv4xq3l9FxK9bjt8TEeUO5Q+3xFfOP9OHm2thZ9n87x/53tby/C8ad8EGe/LYoYjahHn6TP6ejERv35VrxemzHcr4/N/fvLsyNSlF3v7a/C97ZOXX5oJ5PR4WWhbopiYWJjbX6mWP7kQMFVrbnxQikvpOQDYFPh4RQ1+8v+bjDjaEr/35oxP1SG9zvue3v+Krk+0K2YKtivKHEX+q9n8pmvp/eecu6bw/OdYfxekzY9lZcKZtGfe/vvtSS1L94M9t/yfftR7uPxc+vZyPrM3L+v9Aw/mfpR1sruJgEpHMLy7NTBSL03Pzqxzo9upl3P32nVXvaTZ6/u9LXqmEa/elb00sLMydjdiX/G9l+vjya2vx7HeUqu0fOd1+/B/JX5O9E7+JiOwk/m1E/C6qd4jDUb59KiJ+HxGnV29+fPmvP7y+8fZ3V9b+qbbXv6b+j+X+X1yayVLnmlImitXLWcRySj3QM3PqwbOh9uWvrf/PV0IjeUr761/StNW+shbtA5t8+wAAAOCFkEbEQMNa0kCk6ehodQ3oaBxIi7PzC39JZt+8MVX9jsBgQ97qenBvUlv/HGyIj7fEz+Xrxu/17K/ERydni1M71Gag6mBlzCfpaP1akKajtS/FbM0SM/BT5is/sHc9b/wfu7dNFQG2nc9/2KvmbjVESqtkKvlLGdid1vL5by0Qdqd247/D33O7YYBdomw4w562nvFfaPr3jvcPd6M+wPYpxMv1cLqjNQG2m/k/7Elr+pL8hgPlvvZP9cfKzNHf+YA9sbFq7G9T1o4EspnVjpS+fyOvqv03hVXzRLq+A/ZFPVA/8kb69Mqm35a0Cyd/Od8fW0PmvvUc+eNtGaftAp2vG+MD3bgaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbL0fAwAA//+1kNRC") r0 = syz_clone(0x4004000, 0x0, 0xfffffffffffffe59, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') 453.185234ms ago: executing program 0 (id=14354): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x8004, &(0x7f0000002d40)={[{@nouser_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noquota}, {@quota}]}, 0x1, 0x7d2, &(0x7f0000000480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f000000aa00)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) setreuid(0xffffffffffffffff, 0xee01) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f000000aa40)=0x62001411) 452.924974ms ago: executing program 2 (id=14355): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') fchdir(r0) exit(0xffff) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, 0x0) mknodat$dm(0xffffffffffffff9c, &(0x7f00000006c0)='./dm0\x00', 0x6180, 0x0) 296.788999ms ago: executing program 6 (id=14356): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xa001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000003c0)="2eab9fbdcb4fe1d5e34e69a76b27dca12f50ff07e49525b4ba2bfb694be45ebb1e0538fdf519d3bd371e9ec718742b0f4f8c577e0e7c6f307ee69b24adc1c309ee55e4f820a2b7529f277f0605003e6bbf75fa24c47262280d7ca3538ade6a9b1d3a7629edd1cc43c3888a1391131acfbc4480a1d7244e828a95bd415900bd91db9383cbd7e0ae9562afe549cad45d00a7b498014cf28522ebd2c14c638200fdb2bbb3f183fc306479756b6125c950a464", 0xb1}, {&(0x7f00000006c0)="b15bad3ed8bd6576a25e0fa9642f29f3c9bf0d843fb5b5d22cbfd7c0de84ef0b0023729d77ddc28af1f121aca76e0297b2c4616626ccccc2682a3d30219265eebc73d62d3b041e", 0x47}], 0x2) 289.88132ms ago: executing program 0 (id=14357): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r0 = syz_io_uring_setup(0xefc, &(0x7f0000000200)={0x0, 0x5961, 0x10000, 0x0, 0x310}, &(0x7f00000002c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, 0x0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x810, &(0x7f0000000400)={[{@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@discard}, {@dioread_nolock}, {@quota}]}, 0x3, 0x498, &(0x7f0000000800)="$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") ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000cc0)={0x8, 0xffffe1aa, 0x7ff, 0x1, 0x9}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='.\x00', 0x0, 0x13e) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000d40)={0x1d2f0, 0x402000, 0xf, 0xadea, 0x800000}) 220.684617ms ago: executing program 0 (id=14358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b40)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in6=@loopback, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x20}, {0x20008, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb475, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 124.894217ms ago: executing program 0 (id=14359): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000500)=""/246, &(0x7f0000000600)=0xf6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c840}, 0x0) 80.661101ms ago: executing program 0 (id=14360): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x32]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000400)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc1}, &(0x7f0000000700)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @auto=[0x30, 0x30, 0xe, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x5b, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x840}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000900)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x35, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a80), &(0x7f0000000ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0xc]}, &(0x7f0000000b00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000c00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x34, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d80), &(0x7f0000000dc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000000e00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000f00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x1}, 0x0, 0x0, r0) request_key(&(0x7f0000001000)='asymmetric\x00', &(0x7f0000001040)={'syz', 0x0}, &(0x7f0000001080)='bbr', r0) keyctl$search(0xa, r0, &(0x7f00000010c0)='user\x00', &(0x7f0000001100)={'syz', 0x1}, 0x0) 0s ago: executing program 0 (id=14361): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000280)) kernel console output (not intermixed with test programs): -gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4037f1fb19 code=0x7ffc0000 [ 1820.061009][ T29] audit: type=1326 audit(1700001505.011:11302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25939 comm="syz.9.13386" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4037f1fb19 code=0x7ffc0000 [ 1820.329507][T25959] FAULT_INJECTION: forcing a failure. [ 1820.329507][T25959] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1820.329551][T25959] CPU: 0 UID: 0 PID: 25959 Comm: syz.1.13392 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1820.329612][T25959] Tainted: [W]=WARN [ 1820.329623][T25959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1820.329643][T25959] Call Trace: [ 1820.329652][T25959] [ 1820.329663][T25959] __dump_stack+0x1d/0x30 [ 1820.329734][T25959] dump_stack_lvl+0x95/0xd0 [ 1820.329760][T25959] dump_stack+0x15/0x1b [ 1820.329787][T25959] should_fail_ex+0x259/0x270 [ 1820.329829][T25959] should_fail+0xb/0x20 [ 1820.329920][T25959] get_futex_key+0x12c/0xc40 [ 1820.329996][T25959] futex_wake+0x89/0x400 [ 1820.330042][T25959] do_futex+0x3f8/0x460 [ 1820.330083][T25959] __se_sys_futex+0x2f6/0x370 [ 1820.330118][T25959] ? do_sigaltstack+0x278/0x390 [ 1820.330186][T25959] __x64_sys_futex+0x78/0x90 [ 1820.330234][T25959] x64_sys_call+0x22e2/0x2550 [ 1820.330275][T25959] do_syscall_64+0x112/0x360 [ 1820.330326][T25959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.330366][T25959] RIP: 0033:0x7f97a253fb19 [ 1820.330399][T25959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1820.330427][T25959] RSP: 002b:00007f97a0f970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1820.330456][T25959] RAX: ffffffffffffffda RBX: 00007f97a27c5fa8 RCX: 00007f97a253fb19 [ 1820.330532][T25959] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f97a27c5fac [ 1820.330553][T25959] RBP: 00007f97a27c5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1820.330573][T25959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1820.330591][T25959] R13: 00007f97a27c6038 R14: 00007ffc39095260 R15: 00007ffc39095348 [ 1820.330621][T25959] [ 1820.341043][T25952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25952 comm=syz.0.13389 [ 1820.672488][T25986] loop2: detected capacity change from 0 to 256 [ 1820.777273][T26000] FAULT_INJECTION: forcing a failure. [ 1820.777273][T26000] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1820.777310][T26000] CPU: 0 UID: 0 PID: 26000 Comm: syz.0.13404 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1820.777412][T26000] Tainted: [W]=WARN [ 1820.777423][T26000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1820.777442][T26000] Call Trace: [ 1820.777451][T26000] [ 1820.777512][T26000] __dump_stack+0x1d/0x30 [ 1820.777545][T26000] dump_stack_lvl+0x95/0xd0 [ 1820.777570][T26000] dump_stack+0x15/0x1b [ 1820.777594][T26000] should_fail_ex+0x259/0x270 [ 1820.777645][T26000] should_fail+0xb/0x20 [ 1820.777693][T26000] get_futex_key+0x12c/0xc40 [ 1820.777753][T26000] futex_wake+0x89/0x400 [ 1820.777857][T26000] do_futex+0x3f8/0x460 [ 1820.777893][T26000] __se_sys_futex+0x2f6/0x370 [ 1820.777926][T26000] ? do_sigaltstack+0x278/0x390 [ 1820.778039][T26000] __x64_sys_futex+0x78/0x90 [ 1820.778067][T26000] x64_sys_call+0x22e2/0x2550 [ 1820.778096][T26000] do_syscall_64+0x112/0x360 [ 1820.778196][T26000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.778229][T26000] RIP: 0033:0x7f718a0efb19 [ 1820.778304][T26000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1820.778332][T26000] RSP: 002b:00007f7188b470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1820.778362][T26000] RAX: ffffffffffffffda RBX: 00007f718a375fa8 RCX: 00007f718a0efb19 [ 1820.778418][T26000] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f718a375fac [ 1820.778438][T26000] RBP: 00007f718a375fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1820.778458][T26000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1820.778477][T26000] R13: 00007f718a376038 R14: 00007ffe6898fa60 R15: 00007ffe6898fb48 [ 1820.778506][T26000] [ 1821.032708][T26004] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26004 comm=syz.0.13405 [ 1821.293162][T26051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26051 comm=syz.2.13419 [ 1821.826887][T26153] xt_hashlimit: size too large, truncated to 1048576 [ 1821.826907][T26153] xt_hashlimit: max too large, truncated to 1048576 [ 1822.128701][T26194] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1822.158498][T26194] md: array md6 already initialised! [ 1822.231368][T26194] md: could not open device unknown-block(1,12). [ 1822.231400][T26194] md: error, md_import_device() returned -6 [ 1822.273027][T26194] md: md6 stopped. [ 1822.353937][T26217] loop6: detected capacity change from 0 to 128 [ 1822.369752][T26217] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1822.374126][T26217] ext4 filesystem being mounted at /587/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1822.423132][T17861] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1822.536453][T26243] FAULT_INJECTION: forcing a failure. [ 1822.536453][T26243] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1822.536503][T26243] CPU: 1 UID: 0 PID: 26243 Comm: syz.0.13498 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1822.536585][T26243] Tainted: [W]=WARN [ 1822.536597][T26243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1822.536619][T26243] Call Trace: [ 1822.536629][T26243] [ 1822.536642][T26243] __dump_stack+0x1d/0x30 [ 1822.536685][T26243] dump_stack_lvl+0x95/0xd0 [ 1822.536725][T26243] dump_stack+0x15/0x1b [ 1822.536760][T26243] should_fail_ex+0x259/0x270 [ 1822.536866][T26243] should_fail+0xb/0x20 [ 1822.536908][T26243] get_futex_key+0x12c/0xc40 [ 1822.536958][T26243] futex_wake+0x89/0x400 [ 1822.537010][T26243] do_futex+0x3f8/0x460 [ 1822.537050][T26243] __se_sys_futex+0x2f6/0x370 [ 1822.537121][T26243] ? do_sigaltstack+0xff/0x390 [ 1822.537277][T26243] __x64_sys_futex+0x78/0x90 [ 1822.537318][T26243] x64_sys_call+0x22e2/0x2550 [ 1822.537367][T26243] do_syscall_64+0x112/0x360 [ 1822.537492][T26243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.537528][T26243] RIP: 0033:0x7f718a0efb19 [ 1822.537555][T26243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1822.537585][T26243] RSP: 002b:00007f7188b470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1822.537679][T26243] RAX: ffffffffffffffda RBX: 00007f718a375fa8 RCX: 00007f718a0efb19 [ 1822.537757][T26243] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f718a375fac [ 1822.537774][T26243] RBP: 00007f718a375fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1822.537793][T26243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1822.537813][T26243] R13: 00007f718a376038 R14: 00007ffe6898fa60 R15: 00007ffe6898fb48 [ 1822.537933][T26243] [ 1822.635512][T26249] loop6: detected capacity change from 0 to 256 [ 1822.752772][T26249] FAT-fs (loop6): codepage cp874 not found [ 1822.915725][T26276] loop9: detected capacity change from 0 to 256 [ 1822.921699][T26263] loop6: detected capacity change from 0 to 1024 [ 1822.946998][T26263] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1822.963205][T26263] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #3: block 1: comm syz.6.13506: lblock 1 mapped to illegal pblock 1 (length 1) [ 1822.963251][T26263] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1822.965214][T26263] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.13506: Failed to acquire dquot type 0 [ 1822.965244][T26263] loop6: lost filesystem error report for type 5 error -117 [ 1822.965373][T26263] EXT4-fs error (device loop6): ext4_free_blocks:6717: comm syz.6.13506: Freeing blocks not in datazone - block = 0, count = 4096 [ 1822.965482][T26263] loop6: lost filesystem error report for type 5 error -117 [ 1822.965654][T26263] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.13506: Invalid inode bitmap blk 0 in block_group 0 [ 1822.965698][T26263] loop6: lost filesystem error report for type 5 error -117 [ 1822.965850][T26263] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 1822.965869][T26263] loop6: lost filesystem error report for type 5 error -117 [ 1822.966064][T26263] EXT4-fs (loop6): 1 orphan inode deleted [ 1822.966577][T26263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1823.019558][ T4762] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:128: lblock 1 mapped to illegal pblock 1 (length 1) [ 1823.025859][ T4762] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:128: Failed to release dquot type 0 [ 1823.100274][T26276] FAT-fs (loop9): codepage cp775 not found [ 1823.142232][T17861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1823.188920][T26286] FAULT_INJECTION: forcing a failure. [ 1823.188920][T26286] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1823.188963][T26286] CPU: 1 UID: 0 PID: 26286 Comm: syz.2.13511 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1823.189005][T26286] Tainted: [W]=WARN [ 1823.189026][T26286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1823.189044][T26286] Call Trace: [ 1823.189054][T26286] [ 1823.189069][T26286] __dump_stack+0x1d/0x30 [ 1823.189109][T26286] dump_stack_lvl+0x95/0xd0 [ 1823.189140][T26286] dump_stack+0x15/0x1b [ 1823.189243][T26286] should_fail_ex+0x259/0x270 [ 1823.189285][T26286] should_fail+0xb/0x20 [ 1823.189322][T26286] get_futex_key+0x12c/0xc40 [ 1823.189405][T26286] futex_wake+0x89/0x400 [ 1823.189448][T26286] do_futex+0x3f8/0x460 [ 1823.189483][T26286] __se_sys_futex+0x2f6/0x370 [ 1823.189567][T26286] ? do_sigaltstack+0xff/0x390 [ 1823.189604][T26286] __x64_sys_futex+0x78/0x90 [ 1823.189638][T26286] x64_sys_call+0x22e2/0x2550 [ 1823.189676][T26286] do_syscall_64+0x112/0x360 [ 1823.189738][T26286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.189770][T26286] RIP: 0033:0x7f3dae7cfb19 [ 1823.189792][T26286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1823.189820][T26286] RSP: 002b:00007f3dad21f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1823.189848][T26286] RAX: ffffffffffffffda RBX: 00007f3daea55fa8 RCX: 00007f3dae7cfb19 [ 1823.189865][T26286] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3daea55fac [ 1823.189936][T26286] RBP: 00007f3daea55fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1823.189994][T26286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1823.190008][T26286] R13: 00007f3daea56038 R14: 00007fffe3934ea0 R15: 00007fffe3934f88 [ 1823.190032][T26286] [ 1823.392879][T26294] syzkaller0: entered promiscuous mode [ 1823.392989][T26294] syzkaller0: entered allmulticast mode [ 1823.420963][T26294] tipc: Enabling of bearer rejected, failed to enable media [ 1823.640418][T26335] loop2: detected capacity change from 0 to 1024 [ 1823.645570][T26335] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1823.688222][T26335] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #3: block 1: comm syz.2.13522: lblock 1 mapped to illegal pblock 1 (length 1) [ 1823.688275][T26335] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1823.688629][T26335] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.13522: Failed to acquire dquot type 0 [ 1823.688661][T26335] loop2: lost filesystem error report for type 5 error -117 [ 1823.690057][T26335] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.13522: Freeing blocks not in datazone - block = 0, count = 4096 [ 1823.690097][T26335] loop2: lost filesystem error report for type 5 error -117 [ 1823.690278][T26335] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.13522: Invalid inode bitmap blk 0 in block_group 0 [ 1823.690332][T26335] loop2: lost filesystem error report for type 5 error -117 [ 1823.690415][T26335] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 1823.690484][T26335] loop2: lost filesystem error report for type 5 error -117 [ 1823.690567][T26335] EXT4-fs (loop2): 1 orphan inode deleted [ 1823.691066][T26335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1823.708782][ T5128] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:158: lblock 1 mapped to illegal pblock 1 (length 1) [ 1823.708957][ T5128] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:158: Failed to release dquot type 0 [ 1823.734328][T17714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1823.884523][T26348] FAULT_INJECTION: forcing a failure. [ 1823.884523][T26348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1823.884567][T26348] CPU: 0 UID: 0 PID: 26348 Comm: syz.2.13531 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1823.884636][T26348] Tainted: [W]=WARN [ 1823.884648][T26348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1823.884667][T26348] Call Trace: [ 1823.884677][T26348] [ 1823.884688][T26348] __dump_stack+0x1d/0x30 [ 1823.884725][T26348] dump_stack_lvl+0x95/0xd0 [ 1823.884758][T26348] dump_stack+0x15/0x1b [ 1823.884820][T26348] should_fail_ex+0x259/0x270 [ 1823.884902][T26348] should_fail+0xb/0x20 [ 1823.884933][T26348] should_fail_usercopy+0x1a/0x20 [ 1823.885004][T26348] _copy_from_user+0x1c/0xb0 [ 1823.885046][T26348] __sys_bpf+0x1e2/0xc50 [ 1823.885081][T26348] ? do_futex+0x2e0/0x460 [ 1823.885125][T26348] __x64_sys_bpf+0x69/0x80 [ 1823.885165][T26348] x64_sys_call+0xf26/0x2550 [ 1823.885204][T26348] do_syscall_64+0x112/0x360 [ 1823.885378][T26348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.885444][T26348] RIP: 0033:0x7f3dae7cfb19 [ 1823.885462][T26348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1823.885482][T26348] RSP: 002b:00007f3dad21f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1823.885505][T26348] RAX: ffffffffffffffda RBX: 00007f3daea55fa0 RCX: 00007f3dae7cfb19 [ 1823.885525][T26348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1823.885543][T26348] RBP: 00007f3dae867b70 R08: 0000000000000000 R09: 0000000000000000 [ 1823.885602][T26348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1823.885621][T26348] R13: 00007f3daea56038 R14: 00007f3daea55fa0 R15: 00007fffe3934f88 [ 1823.885650][T26348] [ 1824.173947][T26364] loop2: detected capacity change from 0 to 1024 [ 1824.183690][T26364] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1824.197982][T26364] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #3: block 1: comm syz.2.13538: lblock 1 mapped to illegal pblock 1 (length 1) [ 1824.198079][T26364] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1824.198162][T26364] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.13538: Failed to acquire dquot type 0 [ 1824.198257][T26364] loop2: lost filesystem error report for type 5 error -117 [ 1824.198504][T26364] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.13538: Freeing blocks not in datazone - block = 0, count = 4096 [ 1824.198542][T26364] loop2: lost filesystem error report for type 5 error -117 [ 1824.198769][T26364] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.13538: Invalid inode bitmap blk 0 in block_group 0 [ 1824.199034][T26364] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 1824.199214][T26364] EXT4-fs (loop2): 1 orphan inode deleted [ 1824.199570][T26364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1824.227490][ T4762] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:128: lblock 1 mapped to illegal pblock 1 (length 1) [ 1824.227917][ T4762] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:128: Failed to release dquot type 0 [ 1824.283933][T17714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1824.417953][T26366] rxe_eth0 speed is unknown, defaulting to 1000 [ 1824.460277][T26366] lo speed is unknown, defaulting to 1000 [ 1824.503466][T26366] lo speed is unknown, defaulting to 1000 [ 1824.589159][T26389] FAULT_INJECTION: forcing a failure. [ 1824.589159][T26389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1824.589285][T26389] CPU: 0 UID: 0 PID: 26389 Comm: syz.0.13543 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1824.589373][T26389] Tainted: [W]=WARN [ 1824.589384][T26389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1824.589403][T26389] Call Trace: [ 1824.589413][T26389] [ 1824.589458][T26389] __dump_stack+0x1d/0x30 [ 1824.589495][T26389] dump_stack_lvl+0x95/0xd0 [ 1824.589528][T26389] dump_stack+0x15/0x1b [ 1824.589558][T26389] should_fail_ex+0x259/0x270 [ 1824.589661][T26389] should_fail+0xb/0x20 [ 1824.589689][T26389] should_fail_usercopy+0x1a/0x20 [ 1824.589748][T26389] _copy_from_user+0x1c/0xb0 [ 1824.589788][T26389] __sys_bpf+0x1e2/0xc50 [ 1824.589871][T26389] ? do_futex+0x2e0/0x460 [ 1824.589939][T26389] __x64_sys_bpf+0x69/0x80 [ 1824.589962][T26389] x64_sys_call+0xf26/0x2550 [ 1824.590001][T26389] do_syscall_64+0x112/0x360 [ 1824.590087][T26389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.590120][T26389] RIP: 0033:0x7f718a0efb19 [ 1824.590185][T26389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.590257][T26389] RSP: 002b:00007f7188b47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1824.590287][T26389] RAX: ffffffffffffffda RBX: 00007f718a375fa0 RCX: 00007f718a0efb19 [ 1824.590308][T26389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1824.590327][T26389] RBP: 00007f718a187b70 R08: 0000000000000000 R09: 0000000000000000 [ 1824.590347][T26389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1824.590365][T26389] R13: 00007f718a376038 R14: 00007f718a375fa0 R15: 00007ffe6898fb48 [ 1824.590400][T26389] [ 1824.896371][T26405] loop2: detected capacity change from 0 to 1024 [ 1824.897114][T26405] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1824.900039][T26405] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #3: block 1: comm syz.2.13549: lblock 1 mapped to illegal pblock 1 (length 1) [ 1824.900154][T26405] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1824.900239][T26405] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.13549: Failed to acquire dquot type 0 [ 1824.900590][T26405] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.13549: Freeing blocks not in datazone - block = 0, count = 4096 [ 1824.901115][T26405] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.13549: Invalid inode bitmap blk 0 in block_group 0 [ 1824.901416][T26405] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 1824.901693][T26405] EXT4-fs (loop2): 1 orphan inode deleted [ 1824.902656][T26405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1824.944169][T22322] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1824.947164][T22322] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 0 [ 1824.966947][T26366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.967053][T26366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.967394][T26366] bridge_slave_0: entered allmulticast mode [ 1824.972841][T26366] bridge_slave_0: entered promiscuous mode [ 1825.008054][T26366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.008168][T26366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.008641][T26366] bridge_slave_1: entered allmulticast mode [ 1825.015089][T26366] bridge_slave_1: entered promiscuous mode [ 1825.042422][T17714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.133840][T26366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1825.143027][T26366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1825.144860][T26417] syzkaller0: entered promiscuous mode [ 1825.144880][T26417] syzkaller0: entered allmulticast mode [ 1825.175779][T26417] tipc: Enabling of bearer rejected, failed to enable media [ 1825.204180][T26366] team0: Port device team_slave_0 added [ 1825.207165][T26366] team0: Port device team_slave_1 added [ 1825.235518][T26423] FAULT_INJECTION: forcing a failure. [ 1825.235518][T26423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1825.235554][T26423] CPU: 1 UID: 0 PID: 26423 Comm: syz.1.13555 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1825.235591][T26423] Tainted: [W]=WARN [ 1825.235604][T26423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1825.235623][T26423] Call Trace: [ 1825.235709][T26423] [ 1825.235717][T26423] __dump_stack+0x1d/0x30 [ 1825.235761][T26423] dump_stack_lvl+0x95/0xd0 [ 1825.235830][T26423] dump_stack+0x15/0x1b [ 1825.235932][T26423] should_fail_ex+0x259/0x270 [ 1825.235973][T26423] should_fail+0xb/0x20 [ 1825.236015][T26423] should_fail_usercopy+0x1a/0x20 [ 1825.236098][T26423] _copy_from_user+0x1c/0xb0 [ 1825.236188][T26423] __sys_bpf+0x1e2/0xc50 [ 1825.236216][T26423] ? do_futex+0x2e0/0x460 [ 1825.236258][T26423] __x64_sys_bpf+0x69/0x80 [ 1825.236279][T26423] x64_sys_call+0xf26/0x2550 [ 1825.236385][T26423] do_syscall_64+0x112/0x360 [ 1825.236436][T26423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.236549][T26423] RIP: 0033:0x7f97a253fb19 [ 1825.236579][T26423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1825.236600][T26423] RSP: 002b:00007f97a0f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1825.236622][T26423] RAX: ffffffffffffffda RBX: 00007f97a27c5fa0 RCX: 00007f97a253fb19 [ 1825.236638][T26423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1825.236654][T26423] RBP: 00007f97a25d7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1825.236668][T26423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.236682][T26423] R13: 00007f97a27c6038 R14: 00007f97a27c5fa0 R15: 00007ffc39095348 [ 1825.236704][T26423] [ 1825.237985][T26366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1825.237999][T26366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1825.238029][T26366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1825.243282][T26366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1825.243303][T26366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1825.243405][T26366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1825.549407][T26428] FAULT_INJECTION: forcing a failure. [ 1825.549407][T26428] name failslab, interval 1, probability 0, space 0, times 0 [ 1825.549491][T26428] CPU: 0 UID: 0 PID: 26428 Comm: syz.9.13557 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1825.549523][T26428] Tainted: [W]=WARN [ 1825.549532][T26428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1825.549607][T26428] Call Trace: [ 1825.549615][T26428] [ 1825.549624][T26428] __dump_stack+0x1d/0x30 [ 1825.549652][T26428] dump_stack_lvl+0x95/0xd0 [ 1825.549736][T26428] dump_stack+0x15/0x1b [ 1825.549765][T26428] should_fail_ex+0x259/0x270 [ 1825.549802][T26428] should_failslab+0x8c/0xb0 [ 1825.549840][T26428] kmem_cache_alloc_bulk_noprof+0x40/0x3d0 [ 1825.549911][T26428] bpf_test_run_xdp_live+0xeeb/0x1330 [ 1825.549935][T26428] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1825.549975][T26428] ? bpf_test_run_xdp_live+0x436/0x1330 [ 1825.550079][T26428] bpf_prog_test_run_xdp+0x559/0x9e0 [ 1825.550161][T26428] ? __rcu_read_unlock+0x4e/0x70 [ 1825.550277][T26428] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1825.550310][T26428] bpf_prog_test_run+0x208/0x340 [ 1825.550340][T26428] __sys_bpf+0x914/0xc50 [ 1825.550367][T26428] ? do_futex+0x2e0/0x460 [ 1825.550449][T26428] __x64_sys_bpf+0x69/0x80 [ 1825.550470][T26428] x64_sys_call+0xf26/0x2550 [ 1825.550644][T26428] do_syscall_64+0x112/0x360 [ 1825.550684][T26428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.550718][T26428] RIP: 0033:0x7f4037f1fb19 [ 1825.550803][T26428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1825.550828][T26428] RSP: 002b:00007f403696f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1825.550852][T26428] RAX: ffffffffffffffda RBX: 00007f40381a5fa0 RCX: 00007f4037f1fb19 [ 1825.550869][T26428] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 1825.550884][T26428] RBP: 00007f4037fb7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1825.550970][T26428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1825.550985][T26428] R13: 00007f40381a6038 R14: 00007f40381a5fa0 R15: 00007ffdf66ca028 [ 1825.551008][T26428] [ 1825.686779][T26366] hsr_slave_0: entered promiscuous mode [ 1825.691603][T26366] hsr_slave_1: entered promiscuous mode [ 1825.692632][T26366] debugfs: 'hsr0' already exists in 'hsr' [ 1825.692682][T26366] Cannot create hsr debugfs directory [ 1825.831762][T26438] loop9: detected capacity change from 0 to 1024 [ 1825.835219][T26438] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1825.866891][T26438] EXT4-fs error (device loop9): ext4_map_blocks:951: inode #3: block 1: comm syz.9.13560: lblock 1 mapped to illegal pblock 1 (length 1) [ 1825.866936][T26438] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1825.867590][T26438] __quota_error: 86 callbacks suppressed [ 1825.867679][T26438] Quota error (device loop9): write_blk: dquota write failed [ 1825.867699][T26438] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1825.867793][T26438] EXT4-fs error (device loop9): ext4_acquire_dquot:7120: comm syz.9.13560: Failed to acquire dquot type 0 [ 1825.868038][T26438] EXT4-fs error (device loop9): ext4_free_blocks:6717: comm syz.9.13560: Freeing blocks not in datazone - block = 0, count = 4096 [ 1825.868362][T26438] EXT4-fs error (device loop9): ext4_read_inode_bitmap:141: comm syz.9.13560: Invalid inode bitmap blk 0 in block_group 0 [ 1825.868487][T26438] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 1825.869280][T26438] EXT4-fs (loop9): 1 orphan inode deleted [ 1825.869849][T26438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1825.886439][ T5128] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:158: lblock 1 mapped to illegal pblock 1 (length 1) [ 1825.886980][ T5128] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1825.887081][ T5128] EXT4-fs error (device loop9): ext4_release_dquot:7156: comm kworker/u8:158: Failed to release dquot type 0 [ 1825.993087][T20964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1826.059981][T26447] FAULT_INJECTION: forcing a failure. [ 1826.059981][T26447] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.060060][T26447] CPU: 0 UID: 0 PID: 26447 Comm: syz.9.13563 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1826.060105][T26447] Tainted: [W]=WARN [ 1826.060117][T26447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1826.060136][T26447] Call Trace: [ 1826.060147][T26447] [ 1826.060235][T26447] __dump_stack+0x1d/0x30 [ 1826.060275][T26447] dump_stack_lvl+0x95/0xd0 [ 1826.060309][T26447] dump_stack+0x15/0x1b [ 1826.060351][T26447] should_fail_ex+0x259/0x270 [ 1826.060393][T26447] ? security_prepare_creds+0x52/0x120 [ 1826.060423][T26447] should_failslab+0x8c/0xb0 [ 1826.060529][T26447] __kmalloc_noprof+0xb6/0x4b0 [ 1826.060576][T26447] ? security_prepare_creds+0x52/0x120 [ 1826.060605][T26447] ? kmem_cache_alloc_noprof+0x1d7/0x3d0 [ 1826.060698][T26447] security_prepare_creds+0x52/0x120 [ 1826.060802][T26447] prepare_creds+0x385/0x550 [ 1826.060851][T26447] __se_sys_keyctl+0x389/0xb70 [ 1826.060889][T26447] ? __se_sys_futex+0x2f6/0x370 [ 1826.061001][T26447] ? xfd_validate_state+0x45/0xf0 [ 1826.061048][T26447] __x64_sys_keyctl+0x67/0x80 [ 1826.061084][T26447] x64_sys_call+0x1fe0/0x2550 [ 1826.061190][T26447] do_syscall_64+0x112/0x360 [ 1826.061256][T26447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.061288][T26447] RIP: 0033:0x7f4037f1fb19 [ 1826.061312][T26447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.061366][T26447] RSP: 002b:00007f403696f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1826.061396][T26447] RAX: ffffffffffffffda RBX: 00007f40381a5fa0 RCX: 00007f4037f1fb19 [ 1826.061416][T26447] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 1826.061434][T26447] RBP: 00007f4037fb7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1826.061453][T26447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1826.061501][T26447] R13: 00007f40381a6038 R14: 00007f40381a5fa0 R15: 00007ffdf66ca028 [ 1826.061530][T26447] [ 1826.182331][T26366] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.190318][T26451] syzkaller0: entered promiscuous mode [ 1826.190345][T26451] syzkaller0: entered allmulticast mode [ 1826.192661][T26451] tipc: Enabling of bearer rejected, failed to enable media [ 1826.211518][T26366] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.260807][ T29] audit: type=1326 audit(1700001510.678:11377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.0.13566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a0efb19 code=0x7ffc0000 [ 1826.260931][ T29] audit: type=1326 audit(1700001510.678:11378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.0.13566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a0efb19 code=0x7ffc0000 [ 1826.261035][ T29] audit: type=1326 audit(1700001510.688:11379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.0.13566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f718a0efb19 code=0x7ffc0000 [ 1826.261201][ T29] audit: type=1326 audit(1700001510.688:11380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.0.13566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a0efb19 code=0x7ffc0000 [ 1826.261299][ T29] audit: type=1326 audit(1700001510.688:11381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.0.13566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a0efb19 code=0x7ffc0000 [ 1826.261482][ T29] audit: type=1326 audit(1700001510.688:11382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.0.13566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f718a0efb19 code=0x7ffc0000 [ 1826.261580][ T29] audit: type=1326 audit(1700001510.688:11383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.0.13566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718a0efb19 code=0x7ffc0000 [ 1826.314573][T26456] FAULT_INJECTION: forcing a failure. [ 1826.314573][T26456] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1826.314696][T26456] CPU: 1 UID: 0 PID: 26456 Comm: syz.2.13567 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1826.314806][T26456] Tainted: [W]=WARN [ 1826.314828][T26456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1826.314947][T26456] Call Trace: [ 1826.315026][T26456] [ 1826.315057][T26456] __dump_stack+0x1d/0x30 [ 1826.315161][T26456] dump_stack_lvl+0x95/0xd0 [ 1826.315253][T26456] dump_stack+0x15/0x1b [ 1826.315329][T26456] should_fail_ex+0x259/0x270 [ 1826.315499][T26456] should_fail+0xb/0x20 [ 1826.315592][T26456] get_futex_key+0x12c/0xc40 [ 1826.315707][T26456] futex_wake+0x89/0x400 [ 1826.315810][T26456] ? __sys_bpf+0xaba/0xc50 [ 1826.315933][T26456] do_futex+0x3f8/0x460 [ 1826.316029][T26456] __se_sys_futex+0x2f6/0x370 [ 1826.316180][T26456] __x64_sys_futex+0x78/0x90 [ 1826.316274][T26456] x64_sys_call+0x22e2/0x2550 [ 1826.316447][T26456] do_syscall_64+0x112/0x360 [ 1826.316574][T26456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.316645][T26456] RIP: 0033:0x7f3dae7cfb19 [ 1826.316709][T26456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.316825][T26456] RSP: 002b:00007f3dad21f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1826.316899][T26456] RAX: ffffffffffffffda RBX: 00007f3daea55fa8 RCX: 00007f3dae7cfb19 [ 1826.316958][T26456] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3daea55fac [ 1826.317066][T26456] RBP: 00007f3daea55fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1826.317119][T26456] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1826.317181][T26456] R13: 00007f3daea56038 R14: 00007fffe3934ea0 R15: 00007fffe3934f88 [ 1826.317265][T26456] [ 1826.500784][T26366] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.633021][T26366] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.933943][T26366] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1826.936264][T26366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1826.937239][T26366] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1826.939692][T26366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1826.940345][T26366] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1826.963457][T26366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1826.986763][T26366] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1827.008710][T26366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1827.552945][T26366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.598193][T26499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1827.615484][ T5128] bond1: (slave vlan2): link status definitely down, disabling slave [ 1827.615663][ T5128] bond1: now running without any active interface! [ 1827.654641][T26366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.665729][T20875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.665773][T20875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1827.686086][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.686129][ T4762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1827.999418][T26366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1828.215054][T26366] veth0_vlan: entered promiscuous mode [ 1828.227553][T26366] veth1_vlan: entered promiscuous mode [ 1828.257196][T26366] veth0_macvtap: entered promiscuous mode [ 1828.259795][T26366] veth1_macvtap: entered promiscuous mode [ 1828.268084][T26366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.270067][T26366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1828.349022][T22322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.349390][T22322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.349640][T22322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.349698][T22322] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.971194][T26585] loop6: detected capacity change from 0 to 2048 [ 1828.989799][T26585] EXT4-fs warning (device loop6): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 1828.989975][T26585] EXT4-fs (loop6): mount failed [ 1829.134658][T26602] FAULT_INJECTION: forcing a failure. [ 1829.134658][T26602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1829.134704][T26602] CPU: 1 UID: 0 PID: 26602 Comm: syz.1.13614 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1829.134782][T26602] Tainted: [W]=WARN [ 1829.134793][T26602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1829.134811][T26602] Call Trace: [ 1829.134821][T26602] [ 1829.134832][T26602] __dump_stack+0x1d/0x30 [ 1829.134933][T26602] dump_stack_lvl+0x95/0xd0 [ 1829.134962][T26602] dump_stack+0x15/0x1b [ 1829.134992][T26602] should_fail_ex+0x259/0x270 [ 1829.135033][T26602] should_fail+0xb/0x20 [ 1829.135079][T26602] should_fail_usercopy+0x1a/0x20 [ 1829.135118][T26602] _copy_from_user+0x1c/0xb0 [ 1829.135150][T26602] __sys_bpf+0x1e2/0xc50 [ 1829.135175][T26602] ? do_futex+0x2e0/0x460 [ 1829.135275][T26602] __x64_sys_bpf+0x69/0x80 [ 1829.135295][T26602] x64_sys_call+0xf26/0x2550 [ 1829.135435][T26602] do_syscall_64+0x112/0x360 [ 1829.135472][T26602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.135496][T26602] RIP: 0033:0x7f97a253fb19 [ 1829.135517][T26602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.135624][T26602] RSP: 002b:00007f97a0f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1829.135658][T26602] RAX: ffffffffffffffda RBX: 00007f97a27c5fa0 RCX: 00007f97a253fb19 [ 1829.135679][T26602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1829.135754][T26602] RBP: 00007f97a25d7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1829.135772][T26602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1829.135789][T26602] R13: 00007f97a27c6038 R14: 00007f97a27c5fa0 R15: 00007ffc39095348 [ 1829.135813][T26602] [ 1829.400258][T26624] loop6: detected capacity change from 0 to 512 [ 1829.412406][T26624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1829.421027][T26624] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 63 (only 1 groups) [ 1829.457054][T26366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1829.510374][T26636] FAULT_INJECTION: forcing a failure. [ 1829.510374][T26636] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1829.510416][T26636] CPU: 1 UID: 0 PID: 26636 Comm: syz.2.13630 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1829.510458][T26636] Tainted: [W]=WARN [ 1829.510466][T26636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1829.510482][T26636] Call Trace: [ 1829.510492][T26636] [ 1829.510502][T26636] __dump_stack+0x1d/0x30 [ 1829.510607][T26636] dump_stack_lvl+0x95/0xd0 [ 1829.510711][T26636] dump_stack+0x15/0x1b [ 1829.510778][T26636] should_fail_ex+0x259/0x270 [ 1829.510811][T26636] should_fail+0xb/0x20 [ 1829.510848][T26636] get_futex_key+0x12c/0xc40 [ 1829.510942][T26636] futex_wake+0x89/0x400 [ 1829.510981][T26636] ? __sys_bpf+0xaba/0xc50 [ 1829.511012][T26636] do_futex+0x3f8/0x460 [ 1829.511107][T26636] __se_sys_futex+0x2f6/0x370 [ 1829.511206][T26636] __x64_sys_futex+0x78/0x90 [ 1829.511240][T26636] x64_sys_call+0x22e2/0x2550 [ 1829.511341][T26636] do_syscall_64+0x112/0x360 [ 1829.511390][T26636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.511443][T26636] RIP: 0033:0x7f3dae7cfb19 [ 1829.511467][T26636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.511509][T26636] RSP: 002b:00007f3dad21f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1829.511536][T26636] RAX: ffffffffffffffda RBX: 00007f3daea55fa8 RCX: 00007f3dae7cfb19 [ 1829.511558][T26636] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3daea55fac [ 1829.511577][T26636] RBP: 00007f3daea55fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1829.511621][T26636] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1829.511640][T26636] R13: 00007f3daea56038 R14: 00007fffe3934ea0 R15: 00007fffe3934f88 [ 1829.511669][T26636] [ 1830.198523][T26659] loop2: detected capacity change from 0 to 256 [ 1830.232352][T26659] FAT-fs (loop2): IO charset cp1255 not found [ 1830.608995][T26687] loop9: detected capacity change from 0 to 2048 [ 1830.613643][T26687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1830.649078][T26687] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1830.652219][T26687] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.13650: bg 0: block 2: invalid block bitmap [ 1830.652451][T26687] EXT4-fs (loop9): Remounting filesystem read-only [ 1830.652481][T26687] EXT4-fs warning (device loop9): ext4_xattr_inode_lookup_create:1613: inode #18: comm syz.9.13650: cleanup dec ref error -117 [ 1830.715449][T20964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1831.069947][T26729] loop9: detected capacity change from 0 to 512 [ 1831.088346][T26729] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.13666: bg 0: block 5: invalid block bitmap [ 1831.088389][T26729] fserror_report: 10 callbacks suppressed [ 1831.088404][T26729] loop9: lost filesystem error report for type 5 error -117 [ 1831.088579][T26729] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 1831.088619][T26729] loop9: lost filesystem error report for type 5 error -117 [ 1831.088761][T26729] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.13666: invalid indirect mapped block 3 (level 2) [ 1831.088800][T26729] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1831.088985][T26729] EXT4-fs (loop9): 1 orphan inode deleted [ 1831.089008][T26729] EXT4-fs (loop9): 1 truncate cleaned up [ 1831.089490][T26729] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1831.141312][T26735] syzkaller0: entered promiscuous mode [ 1831.141384][T26735] syzkaller0: entered allmulticast mode [ 1831.148802][T26735] tipc: Enabling of bearer rejected, failed to enable media [ 1831.220510][T26738] FAULT_INJECTION: forcing a failure. [ 1831.220510][T26738] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.220551][T26738] CPU: 0 UID: 0 PID: 26738 Comm: syz.1.13668 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1831.220591][T26738] Tainted: [W]=WARN [ 1831.220600][T26738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1831.220687][T26738] Call Trace: [ 1831.220697][T26738] [ 1831.220750][T26738] __dump_stack+0x1d/0x30 [ 1831.220786][T26738] dump_stack_lvl+0x95/0xd0 [ 1831.220897][T26738] dump_stack+0x15/0x1b [ 1831.220966][T26738] should_fail_ex+0x259/0x270 [ 1831.221003][T26738] ? do_getname+0x2e/0x1c0 [ 1831.221033][T26738] should_failslab+0x8c/0xb0 [ 1831.221151][T26738] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 1831.221191][T26738] ? do_getname+0x2e/0x1c0 [ 1831.221265][T26738] do_getname+0x2e/0x1c0 [ 1831.221291][T26738] getname_flags+0x1d/0x30 [ 1831.221321][T26738] do_mq_open+0xb6/0x4d0 [ 1831.221350][T26738] ? __se_sys_futex+0x2f6/0x370 [ 1831.221418][T20964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1831.221457][T26738] __x64_sys_mq_open+0xcb/0x100 [ 1831.221487][T26738] x64_sys_call+0x70f/0x2550 [ 1831.221516][T26738] do_syscall_64+0x112/0x360 [ 1831.221567][T26738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.221682][T26738] RIP: 0033:0x7f97a253fb19 [ 1831.221707][T26738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.221735][T26738] RSP: 002b:00007f97a0f76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1831.221757][T26738] RAX: ffffffffffffffda RBX: 00007f97a27c6090 RCX: 00007f97a253fb19 [ 1831.221773][T26738] RDX: 0000000000000051 RSI: 0000000000000080 RDI: 0000000000000000 [ 1831.221829][T26738] RBP: 00007f97a25d7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1831.221913][T26738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1831.221929][T26738] R13: 00007f97a27c6128 R14: 00007f97a27c6090 R15: 00007ffc39095348 [ 1831.221954][T26738] [ 1831.723532][T26779] device-mapper: table: 252:18: integrity: unknown target type [ 1831.723553][T26779] device-mapper: ioctl: error adding target to table [ 1831.762742][T26787] syzkaller0: entered promiscuous mode [ 1831.762768][T26787] syzkaller0: entered allmulticast mode [ 1831.785258][T26789] loop9: detected capacity change from 0 to 1024 [ 1831.791011][T26792] netlink: 'syz.0.13693': attribute type 21 has an invalid length. [ 1831.791037][T26792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13693'. [ 1831.794775][T26789] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1831.805595][T26789] EXT4-fs error (device loop9): ext4_map_blocks:951: inode #3: block 1: comm syz.9.13692: lblock 1 mapped to illegal pblock 1 (length 1) [ 1831.805727][T26789] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1831.807605][T26789] __quota_error: 26 callbacks suppressed [ 1831.807658][T26789] Quota error (device loop9): write_blk: dquota write failed [ 1831.807710][T26789] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1831.807809][T26789] EXT4-fs error (device loop9): ext4_acquire_dquot:7120: comm syz.9.13692: Failed to acquire dquot type 0 [ 1831.807904][T26789] loop9: lost filesystem error report for type 5 error -117 [ 1831.810278][T26792] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1831.811600][T26789] EXT4-fs error (device loop9): ext4_free_blocks:6717: comm syz.9.13692: Freeing blocks not in datazone - block = 0, count = 4096 [ 1831.811697][T26789] loop9: lost filesystem error report for type 5 error -117 [ 1831.812117][T26789] EXT4-fs error (device loop9): ext4_read_inode_bitmap:141: comm syz.9.13692: Invalid inode bitmap blk 0 in block_group 0 [ 1831.812202][T26789] loop9: lost filesystem error report for type 5 error -117 [ 1831.812408][T26789] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 1831.812707][T26789] loop9: lost filesystem error report for type 5 error -117 [ 1831.816726][T26789] EXT4-fs (loop9): 1 orphan inode deleted [ 1831.816896][ C1] EXT4-fs (loop9): error count since last fsck: 5 [ 1831.816954][ C1] EXT4-fs (loop9): initial error at time 1700001515: ext4_map_blocks:951: inode 3: block 1 [ 1831.817081][ C1] EXT4-fs (loop9): last error at time 1700001515: ext4_free_inode:363 [ 1831.823155][T26789] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1831.830917][ T3636] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:82: lblock 1 mapped to illegal pblock 1 (length 1) [ 1831.831458][ T3636] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1831.831517][ T3636] EXT4-fs error (device loop9): ext4_release_dquot:7156: comm kworker/u8:82: Failed to release dquot type 0 [ 1832.004195][T20964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1832.227793][T26828] FAULT_INJECTION: forcing a failure. [ 1832.227793][T26828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1832.227827][T26828] CPU: 0 UID: 0 PID: 26828 Comm: syz.1.13709 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1832.227932][T26828] Tainted: [W]=WARN [ 1832.227940][T26828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1832.227954][T26828] Call Trace: [ 1832.227962][T26828] [ 1832.227971][T26828] __dump_stack+0x1d/0x30 [ 1832.228055][T26828] dump_stack_lvl+0x95/0xd0 [ 1832.228088][T26828] dump_stack+0x15/0x1b [ 1832.228128][T26828] should_fail_ex+0x259/0x270 [ 1832.228160][T26828] should_fail+0xb/0x20 [ 1832.228189][T26828] should_fail_usercopy+0x1a/0x20 [ 1832.228232][T26828] _copy_to_user+0x20/0xa0 [ 1832.228283][T26828] bpf_verifier_vlog+0x2c5/0x5a0 [ 1832.228420][T26828] btf_verifier_log+0xb2/0xf0 [ 1832.228454][T26828] ? __btf_verifier_log+0x7f/0xb0 [ 1832.228517][T26828] btf_func_proto_log+0x2ef/0x4a0 [ 1832.228555][T26828] __btf_verifier_log_type+0x275/0x330 [ 1832.228592][T26828] ? sort+0x6a/0xa0 [ 1832.228681][T26828] btf_func_proto_check_meta+0xcd/0x100 [ 1832.228758][T26828] btf_parse_type_sec+0x284/0x15b0 [ 1832.228872][T26828] ? __kvmalloc_node_noprof+0x30d/0x5b0 [ 1832.228925][T26828] ? btf_parse_hdr+0x43a/0x440 [ 1832.228957][T26828] ? btf_parse_str_sec+0x1ae/0x1b0 [ 1832.229004][T26828] btf_new_fd+0x2ec/0x6a0 [ 1832.229092][T26828] bpf_btf_load+0x116/0x130 [ 1832.229124][T26828] __sys_bpf+0xbee/0xc50 [ 1832.229156][T26828] ? do_futex+0x2e0/0x460 [ 1832.229198][T26828] __x64_sys_bpf+0x69/0x80 [ 1832.229303][T26828] x64_sys_call+0xf26/0x2550 [ 1832.229342][T26828] do_syscall_64+0x112/0x360 [ 1832.229391][T26828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.229424][T26828] RIP: 0033:0x7f97a253fb19 [ 1832.229449][T26828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1832.229477][T26828] RSP: 002b:00007f97a0f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1832.229507][T26828] RAX: ffffffffffffffda RBX: 00007f97a27c5fa0 RCX: 00007f97a253fb19 [ 1832.229528][T26828] RDX: 0000000000000028 RSI: 0000200000000440 RDI: 0000000000000012 [ 1832.229561][T26828] RBP: 00007f97a25d7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1832.229580][T26828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1832.229599][T26828] R13: 00007f97a27c6038 R14: 00007f97a27c5fa0 R15: 00007ffc39095348 [ 1832.229635][T26828] [ 1832.494288][T26840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13714'. [ 1832.508520][T26842] FAULT_INJECTION: forcing a failure. [ 1832.508520][T26842] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.508564][T26842] CPU: 1 UID: 0 PID: 26842 Comm: syz.9.13712 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1832.508643][T26842] Tainted: [W]=WARN [ 1832.508701][T26842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1832.508717][T26842] Call Trace: [ 1832.508733][T26842] [ 1832.508744][T26842] __dump_stack+0x1d/0x30 [ 1832.508779][T26842] dump_stack_lvl+0x95/0xd0 [ 1832.508809][T26842] dump_stack+0x15/0x1b [ 1832.508839][T26842] should_fail_ex+0x259/0x270 [ 1832.508911][T26842] ? do_getname+0x2e/0x1c0 [ 1832.508951][T26842] should_failslab+0x8c/0xb0 [ 1832.508997][T26842] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 1832.509042][T26842] ? do_getname+0x2e/0x1c0 [ 1832.509071][T26842] do_getname+0x2e/0x1c0 [ 1832.509160][T26842] getname_flags+0x1d/0x30 [ 1832.509190][T26842] do_mq_open+0xb6/0x4d0 [ 1832.509246][T26842] ? __se_sys_futex+0x2f6/0x370 [ 1832.509282][T26842] __x64_sys_mq_open+0xcb/0x100 [ 1832.509352][T26842] x64_sys_call+0x70f/0x2550 [ 1832.509380][T26842] do_syscall_64+0x112/0x360 [ 1832.509488][T26842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.509518][T26842] RIP: 0033:0x7f4037f1fb19 [ 1832.509541][T26842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1832.509569][T26842] RSP: 002b:00007f403694e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1832.509618][T26842] RAX: ffffffffffffffda RBX: 00007f40381a6090 RCX: 00007f4037f1fb19 [ 1832.509640][T26842] RDX: 0000000000000051 RSI: 0000000000000080 RDI: 0000000000000000 [ 1832.509657][T26842] RBP: 00007f4037fb7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1832.509671][T26842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1832.509685][T26842] R13: 00007f40381a6128 R14: 00007f40381a6090 R15: 00007ffdf66ca028 [ 1832.509707][T26842] [ 1832.909237][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13726'. [ 1832.997392][ T3636] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.073294][ T3636] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.113882][ T3636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.153488][ T3636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.218354][ T3636] dvmrp1: left allmulticast mode [ 1833.261199][T26906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13739'. [ 1833.364151][ T3636] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1833.364182][ T3636] bridge1 (unregistering): left promiscuous mode [ 1833.383309][ T3636] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1833.393018][ T3636] bond0 (unregistering): Released all slaves [ 1833.400827][ T3636] bond1 (unregistering): Released all slaves [ 1833.407445][ T3636] bond2 (unregistering): Released all slaves [ 1833.519328][T26881] rxe_eth0 speed is unknown, defaulting to 1000 [ 1833.561243][ T3636] 0: left promiscuous mode [ 1833.585686][T26927] syzkaller0: entered promiscuous mode [ 1833.585720][T26927] syzkaller0: entered allmulticast mode [ 1833.589474][T26881] lo speed is unknown, defaulting to 1000 [ 1833.638056][ T3636] tipc: Left network mode [ 1833.668416][T26881] lo speed is unknown, defaulting to 1000 [ 1833.756827][T26960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13754'. [ 1833.847571][ T29] audit: type=1400 audit(1700001517.740:11409): avc: denied { write } for pid=26946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1833.900261][ T29] audit: type=1400 audit(1700001517.786:11410): avc: denied { write } for pid=26972 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1833.965346][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1834.048210][ T3636] hsr_slave_0: left promiscuous mode [ 1834.065396][ T3636] hsr_slave_1: left promiscuous mode [ 1834.076016][ T3636] veth1_macvtap: left promiscuous mode [ 1834.076050][ T3636] veth0_macvtap: left promiscuous mode [ 1834.076133][ T3636] veth1_vlan: left promiscuous mode [ 1834.076175][ T3636] veth0_vlan: left promiscuous mode [ 1834.211723][T26995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13766'. [ 1834.257389][T27002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13768'. [ 1834.311024][T27007] FAULT_INJECTION: forcing a failure. [ 1834.311024][T27007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1834.311066][T27007] CPU: 0 UID: 0 PID: 27007 Comm: syz.9.13770 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1834.311101][T27007] Tainted: [W]=WARN [ 1834.311188][T27007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1834.311217][T27007] Call Trace: [ 1834.311226][T27007] [ 1834.311237][T27007] __dump_stack+0x1d/0x30 [ 1834.311269][T27007] dump_stack_lvl+0x95/0xd0 [ 1834.311294][T27007] dump_stack+0x15/0x1b [ 1834.311412][T27007] should_fail_ex+0x259/0x270 [ 1834.311450][T27007] should_fail+0xb/0x20 [ 1834.311524][T27007] should_fail_usercopy+0x1a/0x20 [ 1834.311561][T27007] _copy_from_user+0x1c/0xb0 [ 1834.311671][T27007] __sys_bpf+0x1e2/0xc50 [ 1834.311700][T27007] ? do_futex+0x2e0/0x460 [ 1834.311735][T27007] __x64_sys_bpf+0x69/0x80 [ 1834.311757][T27007] x64_sys_call+0xf26/0x2550 [ 1834.311850][T27007] do_syscall_64+0x112/0x360 [ 1834.311888][T27007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.311918][T27007] RIP: 0033:0x7f4037f1fb19 [ 1834.312006][T27007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.312027][T27007] RSP: 002b:00007f403696f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1834.312050][T27007] RAX: ffffffffffffffda RBX: 00007f40381a5fa0 RCX: 00007f4037f1fb19 [ 1834.312071][T27007] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 1834.312090][T27007] RBP: 00007f4037fb7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1834.312109][T27007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1834.312213][T27007] R13: 00007f40381a6038 R14: 00007f40381a5fa0 R15: 00007ffdf66ca028 [ 1834.312265][T27007] [ 1834.559469][T27014] loop9: detected capacity change from 0 to 1024 [ 1834.580185][T27014] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1834.602086][T27014] EXT4-fs error (device loop9): ext4_map_blocks:951: inode #3: block 1: comm syz.9.13773: lblock 1 mapped to illegal pblock 1 (length 1) [ 1834.602135][T27014] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1834.602388][T27014] Quota error (device loop9): write_blk: dquota write failed [ 1834.602410][T27014] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1834.602471][T27014] EXT4-fs error (device loop9): ext4_acquire_dquot:7120: comm syz.9.13773: Failed to acquire dquot type 0 [ 1834.602502][T27014] loop9: lost filesystem error report for type 5 error -117 [ 1834.602742][T27014] EXT4-fs error (device loop9): ext4_free_blocks:6717: comm syz.9.13773: Freeing blocks not in datazone - block = 0, count = 4096 [ 1834.602777][T27014] loop9: lost filesystem error report for type 5 error -117 [ 1834.602938][T27014] EXT4-fs error (device loop9): ext4_read_inode_bitmap:141: comm syz.9.13773: Invalid inode bitmap blk 0 in block_group 0 [ 1834.603061][T27014] loop9: lost filesystem error report for type 5 error -117 [ 1834.603231][T27014] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 1834.603257][T27014] loop9: lost filesystem error report for type 5 error -117 [ 1834.603364][T27014] EXT4-fs (loop9): 1 orphan inode deleted [ 1834.603830][T27014] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1834.638577][ T4762] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:128: lblock 1 mapped to illegal pblock 1 (length 1) [ 1834.644416][ T4762] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1834.644529][ T4762] EXT4-fs error (device loop9): ext4_release_dquot:7156: comm kworker/u8:128: Failed to release dquot type 0 [ 1834.747098][T20964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1834.849220][T27038] netlink: 16 bytes leftover after parsing attributes in process `syz.9.13777'. [ 1834.877872][T27043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13781'. [ 1834.893274][T26881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.893347][T26881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.909778][T26881] bridge_slave_0: entered allmulticast mode [ 1834.910237][T26881] bridge_slave_0: entered promiscuous mode [ 1834.924670][T26881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.924715][T26881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.924852][T26881] bridge_slave_1: entered allmulticast mode [ 1834.925516][T26881] bridge_slave_1: entered promiscuous mode [ 1834.965751][T26881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1834.967156][T26881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1834.985509][T27048] FAULT_INJECTION: forcing a failure. [ 1834.985509][T27048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1834.985629][T27048] CPU: 1 UID: 0 PID: 27048 Comm: syz.9.13782 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1834.985767][T27048] Tainted: [W]=WARN [ 1834.985797][T27048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1834.985848][T27048] Call Trace: [ 1834.985872][T27048] [ 1834.985904][T27048] __dump_stack+0x1d/0x30 [ 1834.986036][T27048] dump_stack_lvl+0x95/0xd0 [ 1834.986126][T27048] dump_stack+0x15/0x1b [ 1834.986201][T27048] should_fail_ex+0x259/0x270 [ 1834.986389][T27048] should_fail+0xb/0x20 [ 1834.986482][T27048] should_fail_usercopy+0x1a/0x20 [ 1834.986619][T27048] _copy_from_user+0x1c/0xb0 [ 1834.986740][T27048] __sys_bpf+0x1e2/0xc50 [ 1834.986834][T27048] ? do_futex+0x2e0/0x460 [ 1834.986973][T27048] __x64_sys_bpf+0x69/0x80 [ 1834.987075][T27048] x64_sys_call+0xf26/0x2550 [ 1834.987177][T27048] do_syscall_64+0x112/0x360 [ 1834.987296][T27048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.987405][T27048] RIP: 0033:0x7f4037f1fb19 [ 1834.987467][T27048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.987600][T27048] RSP: 002b:00007f403696f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1834.987637][T27048] RAX: ffffffffffffffda RBX: 00007f40381a5fa0 RCX: 00007f4037f1fb19 [ 1834.987657][T27048] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 1834.987677][T27048] RBP: 00007f4037fb7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1834.987704][T27048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1834.987723][T27048] R13: 00007f40381a6038 R14: 00007f40381a5fa0 R15: 00007ffdf66ca028 [ 1834.987829][T27048] [ 1835.137013][T26881] team0: Port device team_slave_0 added [ 1835.154435][T26881] team0: Port device team_slave_1 added [ 1835.212110][T26881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1835.212130][T26881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1835.212235][T26881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1835.215517][T26881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1835.215537][T26881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1835.215613][T26881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1835.327997][ T29] audit: type=1400 audit(1700001519.097:11411): avc: denied { write } for pid=27039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1835.346113][T26881] hsr_slave_0: entered promiscuous mode [ 1835.347222][T26881] hsr_slave_1: entered promiscuous mode [ 1835.350366][T26881] debugfs: 'hsr0' already exists in 'hsr' [ 1835.350417][T26881] Cannot create hsr debugfs directory [ 1835.397000][ T29] audit: type=1400 audit(1700001519.171:11412): avc: denied { write } for pid=27074 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1835.455661][T27081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13791'. [ 1835.464367][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1835.576668][T27094] ip_tables: iptables: counters copy to user failed while replacing table [ 1835.819332][T27127] loop9: detected capacity change from 0 to 512 [ 1835.837634][T27127] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.13805: bg 0: block 5: invalid block bitmap [ 1835.839408][T27127] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 1835.842428][T27127] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.13805: invalid indirect mapped block 3 (level 2) [ 1835.842479][T27127] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1835.843931][T27127] EXT4-fs (loop9): 1 orphan inode deleted [ 1835.843958][T27127] EXT4-fs (loop9): 1 truncate cleaned up [ 1835.845380][T27127] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1835.975954][T26881] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1835.986574][T26881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1835.990268][T20964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1835.991238][T26881] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1836.018309][T26881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1836.019156][T26881] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1836.036578][T26881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1836.037337][T26881] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1836.050353][T26881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1836.136736][T26881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1836.149215][T26881] 8021q: adding VLAN 0 to HW filter on device team0 [ 1836.158822][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.158862][ T4768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.186585][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.186624][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1836.225929][T26881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1836.308308][T27178] loop9: detected capacity change from 0 to 512 [ 1836.323043][T27178] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.13815: bg 0: block 5: invalid block bitmap [ 1836.323299][T27178] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 1836.323393][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 1836.323412][ C0] EXT4-fs (loop9): initial error at time 1700001520: ext4_validate_block_bitmap:436 [ 1836.323441][ C0] EXT4-fs (loop9): last error at time 1700001520: ext4_mb_clear_bb:6678 [ 1836.336104][T27178] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.13815: invalid indirect mapped block 3 (level 2) [ 1836.336149][T27178] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1836.337248][T27178] EXT4-fs (loop9): 1 orphan inode deleted [ 1836.337299][T27178] EXT4-fs (loop9): 1 truncate cleaned up [ 1836.337852][T27178] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1836.476120][T20964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1836.548973][T26881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1836.578967][T27206] FAULT_INJECTION: forcing a failure. [ 1836.578967][T27206] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.579010][T27206] CPU: 1 UID: 0 PID: 27206 Comm: syz.9.13817 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1836.579053][T27206] Tainted: [W]=WARN [ 1836.579063][T27206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1836.579082][T27206] Call Trace: [ 1836.579111][T27206] [ 1836.579121][T27206] __dump_stack+0x1d/0x30 [ 1836.579157][T27206] dump_stack_lvl+0x95/0xd0 [ 1836.579217][T27206] dump_stack+0x15/0x1b [ 1836.579241][T27206] should_fail_ex+0x259/0x270 [ 1836.579276][T27206] ? do_getname+0x2e/0x1c0 [ 1836.579305][T27206] should_failslab+0x8c/0xb0 [ 1836.579395][T27206] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 1836.579437][T27206] ? do_getname+0x2e/0x1c0 [ 1836.579468][T27206] do_getname+0x2e/0x1c0 [ 1836.579573][T27206] getname_flags+0x1d/0x30 [ 1836.579596][T27206] do_mq_open+0xb6/0x4d0 [ 1836.579626][T27206] ? __se_sys_futex+0x2f6/0x370 [ 1836.579667][T27206] __x64_sys_mq_open+0xcb/0x100 [ 1836.579773][T27206] x64_sys_call+0x70f/0x2550 [ 1836.579810][T27206] do_syscall_64+0x112/0x360 [ 1836.579850][T27206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.579916][T27206] RIP: 0033:0x7f4037f1fb19 [ 1836.579938][T27206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1836.579958][T27206] RSP: 002b:00007f403694e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1836.580021][T27206] RAX: ffffffffffffffda RBX: 00007f40381a6090 RCX: 00007f4037f1fb19 [ 1836.580042][T27206] RDX: 0000000000000051 RSI: 0000000000000080 RDI: 0000000000000000 [ 1836.580062][T27206] RBP: 00007f4037fb7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1836.580081][T27206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1836.580100][T27206] R13: 00007f40381a6128 R14: 00007f40381a6090 R15: 00007ffdf66ca028 [ 1836.580163][T27206] [ 1836.940667][T26881] veth0_vlan: entered promiscuous mode [ 1836.953399][T26881] veth1_vlan: entered promiscuous mode [ 1836.989781][T26881] veth0_macvtap: entered promiscuous mode [ 1837.002589][T26881] veth1_macvtap: entered promiscuous mode [ 1837.106726][T26881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1837.122221][T26881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1837.147662][ T4762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.148281][ T4762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.148432][ T4762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.148644][ T4762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.272207][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1837.272225][ T29] audit: type=1400 audit(1700001520.869:11421): avc: denied { write } for pid=27253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1837.272259][ T29] audit: type=1400 audit(1700001520.888:11422): avc: denied { write } for pid=27271 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1837.476293][T27287] loop6: detected capacity change from 0 to 1024 [ 1837.481671][T27287] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1837.503276][T27287] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #3: block 1: comm syz.6.13835: lblock 1 mapped to illegal pblock 1 (length 1) [ 1837.503339][T27287] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1837.503595][T27287] Quota error (device loop6): write_blk: dquota write failed [ 1837.503618][T27287] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1837.503664][T27287] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.13835: Failed to acquire dquot type 0 [ 1837.503694][T27287] fserror_report: 4 callbacks suppressed [ 1837.503708][T27287] loop6: lost filesystem error report for type 5 error -117 [ 1837.503951][T27287] EXT4-fs error (device loop6): ext4_free_blocks:6717: comm syz.6.13835: Freeing blocks not in datazone - block = 0, count = 4096 [ 1837.504078][T27287] loop6: lost filesystem error report for type 5 error -117 [ 1837.504376][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 1837.504396][ C1] EXT4-fs (loop6): initial error at time 1700001521: ext4_map_blocks:951: inode 3: block 1 [ 1837.504448][ C1] EXT4-fs (loop6): last error at time 1700001521: ext4_acquire_dquot:7120 [ 1837.517011][T27287] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.13835: Invalid inode bitmap blk 0 in block_group 0 [ 1837.517194][T27287] loop6: lost filesystem error report for type 5 error -117 [ 1837.521050][T27287] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 1837.521123][T27287] loop6: lost filesystem error report for type 5 error -117 [ 1837.521410][T27287] EXT4-fs (loop6): 1 orphan inode deleted [ 1837.522584][T27287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1837.529762][ T4762] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:128: lblock 1 mapped to illegal pblock 1 (length 1) [ 1837.530179][ T4762] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1837.530339][ T4762] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:128: Failed to release dquot type 0 [ 1837.616521][T26366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1837.723815][T27296] loop9: detected capacity change from 0 to 2048 [ 1837.726147][T27296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1837.748002][T27296] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1837.752716][T27296] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.13839: bg 0: block 2: invalid block bitmap [ 1837.752966][T27296] EXT4-fs (loop9): Remounting filesystem read-only [ 1837.753077][T27296] EXT4-fs warning (device loop9): ext4_xattr_inode_lookup_create:1613: inode #18: comm syz.9.13839: cleanup dec ref error -28 [ 1837.816205][T20964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1837.953867][T27333] FAULT_INJECTION: forcing a failure. [ 1837.953867][T27333] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.953945][T27333] CPU: 1 UID: 0 PID: 27333 Comm: syz.2.13849 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1837.954013][T27333] Tainted: [W]=WARN [ 1837.954023][T27333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1837.954040][T27333] Call Trace: [ 1837.954048][T27333] [ 1837.954057][T27333] __dump_stack+0x1d/0x30 [ 1837.954087][T27333] dump_stack_lvl+0x95/0xd0 [ 1837.954119][T27333] dump_stack+0x15/0x1b [ 1837.954198][T27333] should_fail_ex+0x259/0x270 [ 1837.954291][T27333] ? do_getname+0x2e/0x1c0 [ 1837.954329][T27333] should_failslab+0x8c/0xb0 [ 1837.954376][T27333] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 1837.954490][T27333] ? do_getname+0x2e/0x1c0 [ 1837.954526][T27333] do_getname+0x2e/0x1c0 [ 1837.954557][T27333] getname_flags+0x1d/0x30 [ 1837.954588][T27333] do_mq_open+0xb6/0x4d0 [ 1837.954692][T27333] ? __se_sys_futex+0x2f6/0x370 [ 1837.954734][T27333] __x64_sys_mq_open+0xcb/0x100 [ 1837.954825][T27333] x64_sys_call+0x70f/0x2550 [ 1837.954865][T27333] do_syscall_64+0x112/0x360 [ 1837.954988][T27333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.955021][T27333] RIP: 0033:0x7f468256fb19 [ 1837.955050][T27333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1837.955076][T27333] RSP: 002b:00007f4680fa6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1837.955159][T27333] RAX: ffffffffffffffda RBX: 00007f46827f6090 RCX: 00007f468256fb19 [ 1837.955177][T27333] RDX: 0000000000000051 RSI: 0000000000000080 RDI: 0000000000000000 [ 1837.955195][T27333] RBP: 00007f4682607b70 R08: 0000000000000000 R09: 0000000000000000 [ 1837.955239][T27333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1837.955258][T27333] R13: 00007f46827f6128 R14: 00007f46827f6090 R15: 00007ffc996cc918 [ 1837.955287][T27333] [ 1838.302949][T27361] FAULT_INJECTION: forcing a failure. [ 1838.302949][T27361] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.303027][T27361] CPU: 0 UID: 0 PID: 27361 Comm: syz.0.13866 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1838.303060][T27361] Tainted: [W]=WARN [ 1838.303068][T27361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1838.303108][T27361] Call Trace: [ 1838.303117][T27361] [ 1838.303128][T27361] __dump_stack+0x1d/0x30 [ 1838.303163][T27361] dump_stack_lvl+0x95/0xd0 [ 1838.303196][T27361] dump_stack+0x15/0x1b [ 1838.303233][T27361] should_fail_ex+0x259/0x270 [ 1838.303305][T27361] ? __send_signal_locked+0x1ca/0x7a0 [ 1838.303346][T27361] should_failslab+0x8c/0xb0 [ 1838.303423][T27361] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 1838.303483][T27361] ? __send_signal_locked+0x1ca/0x7a0 [ 1838.303535][T27361] __send_signal_locked+0x1ca/0x7a0 [ 1838.303641][T27361] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 1838.303673][T27361] do_notify_parent+0x55f/0x600 [ 1838.303701][T27361] release_task+0x9af/0xb80 [ 1838.303814][T27361] do_exit+0xd51/0x14f0 [ 1838.303899][T27361] do_group_exit+0xfe/0x140 [ 1838.303941][T27361] ? get_signal+0xe03/0xf10 [ 1838.303964][T27361] get_signal+0xe0a/0xf10 [ 1838.304022][T27361] arch_do_signal_or_restart+0x96/0x480 [ 1838.304071][T27361] exit_to_user_mode_loop+0x15d/0x8c0 [ 1838.304109][T27361] do_syscall_64+0x212/0x360 [ 1838.304175][T27361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.304200][T27361] RIP: 0033:0x7f718a0efb19 [ 1838.304219][T27361] Code: Unable to access opcode bytes at 0x7f718a0efaef. [ 1838.304229][T27361] RSP: 002b:00007f7188b470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1838.304256][T27361] RAX: 0000000000000001 RBX: 00007f718a375fa8 RCX: 00007f718a0efb19 [ 1838.304294][T27361] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f718a375fac [ 1838.304309][T27361] RBP: 00007f718a375fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1838.304325][T27361] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1838.304343][T27361] R13: 00007f718a376038 R14: 00007ffe6898fa60 R15: 00007ffe6898fb48 [ 1838.304366][T27361] [ 1838.319236][T27359] __nla_validate_parse: 1 callbacks suppressed [ 1838.319381][T27359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13865'. [ 1838.724460][T27394] loop6: detected capacity change from 0 to 2048 [ 1838.725382][T27394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1838.749173][T27400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13884'. [ 1838.768030][T27394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1838.769518][T27394] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.13881: bg 0: block 2: invalid block bitmap [ 1838.769815][T27394] EXT4-fs (loop6): Remounting filesystem read-only [ 1838.769901][T27394] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1613: inode #18: comm syz.6.13881: cleanup dec ref error -28 [ 1838.820971][T26366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1839.217322][T27463] syzkaller0: entered promiscuous mode [ 1839.217373][T27463] syzkaller0: entered allmulticast mode [ 1839.386708][T27470] erspan0: entered promiscuous mode [ 1839.395030][ T29] audit: type=1326 audit(1700001522.854:11423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27471 comm="syz.9.13915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4037f1fb19 code=0x7ffc0000 [ 1839.395074][ T29] audit: type=1326 audit(1700001522.854:11424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27471 comm="syz.9.13915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4037f1fb19 code=0x7ffc0000 [ 1839.453715][ T29] audit: type=1326 audit(1700001522.863:11425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27471 comm="syz.9.13915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4037f1fb19 code=0x7ffc0000 [ 1839.453763][ T29] audit: type=1326 audit(1700001522.863:11426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27471 comm="syz.9.13915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4037f1fb19 code=0x7ffc0000 [ 1839.453795][ T29] audit: type=1326 audit(1700001522.863:11427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27471 comm="syz.9.13915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4037f1fb19 code=0x7ffc0000 [ 1839.808006][T27501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13926'. [ 1839.989962][T27490] syzkaller0: entered promiscuous mode [ 1839.990013][T27490] syzkaller0: entered allmulticast mode [ 1840.189631][T27527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13938'. [ 1840.190302][T27527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1840.274391][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13944'. [ 1840.274416][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13944'. [ 1840.378273][T27558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13952'. [ 1840.446033][T27565] loop6: detected capacity change from 0 to 512 [ 1840.546585][T27565] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1840.546752][T27565] FAT-fs (loop6): Filesystem has been set read-only [ 1840.924198][T27574] bond1: entered allmulticast mode [ 1840.926108][T27574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1840.973442][T27578] macvlan2: entered promiscuous mode [ 1840.974765][T27578] macvlan2: entered allmulticast mode [ 1841.005900][T27578] bond1: entered promiscuous mode [ 1841.006253][T27578] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1841.027486][T27578] bond1: left promiscuous mode [ 1841.121666][T27590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13965'. [ 1841.219130][T27594] loop2: detected capacity change from 0 to 1024 [ 1841.235675][T27594] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1841.253832][T27594] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #3: block 1: comm syz.2.13967: lblock 1 mapped to illegal pblock 1 (length 1) [ 1841.253934][T27594] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1841.254091][T27594] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.13967: Failed to acquire dquot type 0 [ 1841.254124][T27594] loop2: lost filesystem error report for type 5 error -117 [ 1841.255612][T27594] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.13967: Freeing blocks not in datazone - block = 0, count = 4096 [ 1841.255653][T27594] loop2: lost filesystem error report for type 5 error -117 [ 1841.255917][T27594] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.13967: Invalid inode bitmap blk 0 in block_group 0 [ 1841.255951][T27594] loop2: lost filesystem error report for type 5 error -117 [ 1841.256041][T27594] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 1841.256141][T27594] loop2: lost filesystem error report for type 5 error -117 [ 1841.256218][T27594] EXT4-fs (loop2): 1 orphan inode deleted [ 1841.256775][T27594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1841.297210][T20875] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1841.300043][T20875] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:1: Failed to release dquot type 0 [ 1841.530481][T26881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1841.608307][T27626] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13979'. [ 1841.876560][T27639] loop9: detected capacity change from 0 to 1024 [ 1841.887372][T27639] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1841.889398][T27639] EXT4-fs error (device loop9): ext4_map_blocks:951: inode #3: block 1: comm syz.9.13984: lblock 1 mapped to illegal pblock 1 (length 1) [ 1841.889447][T27639] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1841.889597][T27639] EXT4-fs error (device loop9): ext4_acquire_dquot:7120: comm syz.9.13984: Failed to acquire dquot type 0 [ 1841.889651][T27639] loop9: lost filesystem error report for type 5 error -117 [ 1841.890021][T27639] EXT4-fs error (device loop9): ext4_free_blocks:6717: comm syz.9.13984: Freeing blocks not in datazone - block = 0, count = 4096 [ 1841.890073][T27639] loop9: lost filesystem error report for type 5 error -117 [ 1841.890268][T27639] EXT4-fs error (device loop9): ext4_read_inode_bitmap:141: comm syz.9.13984: Invalid inode bitmap blk 0 in block_group 0 [ 1841.890351][T27639] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 1841.890537][T27639] EXT4-fs (loop9): 1 orphan inode deleted [ 1841.890948][T27639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1842.120535][T22322] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1842.120664][T22322] EXT4-fs error (device loop9): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 0 [ 1842.121722][T20964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1842.238068][T27661] FAULT_INJECTION: forcing a failure. [ 1842.238068][T27661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1842.238181][T27661] CPU: 0 UID: 0 PID: 27661 Comm: syz.9.13993 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1842.238227][T27661] Tainted: [W]=WARN [ 1842.238238][T27661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1842.238256][T27661] Call Trace: [ 1842.238266][T27661] [ 1842.238319][T27661] __dump_stack+0x1d/0x30 [ 1842.238351][T27661] dump_stack_lvl+0x95/0xd0 [ 1842.238381][T27661] dump_stack+0x15/0x1b [ 1842.238486][T27661] should_fail_ex+0x259/0x270 [ 1842.238553][T27661] should_fail+0xb/0x20 [ 1842.238585][T27661] should_fail_usercopy+0x1a/0x20 [ 1842.238628][T27661] _copy_to_user+0x20/0xa0 [ 1842.238664][T27661] bpf_vlog_reverse_ubuf+0x265/0x360 [ 1842.238772][T27661] bpf_vlog_finalize+0xf2/0x200 [ 1842.238844][T27661] bpf_log_attr_finalize+0x33/0x100 [ 1842.238881][T27661] btf_new_fd+0x34a/0x6a0 [ 1842.238930][T27661] bpf_btf_load+0x116/0x130 [ 1842.238963][T27661] __sys_bpf+0xbee/0xc50 [ 1842.239045][T27661] ? do_futex+0x2e0/0x460 [ 1842.239197][T27661] __x64_sys_bpf+0x69/0x80 [ 1842.239218][T27661] x64_sys_call+0xf26/0x2550 [ 1842.239256][T27661] do_syscall_64+0x112/0x360 [ 1842.239374][T27661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.239403][T27661] RIP: 0033:0x7f4037f1fb19 [ 1842.239428][T27661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1842.239448][T27661] RSP: 002b:00007f403696f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1842.239477][T27661] RAX: ffffffffffffffda RBX: 00007f40381a5fa0 RCX: 00007f4037f1fb19 [ 1842.239498][T27661] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 1842.239519][T27661] RBP: 00007f4037fb7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1842.239539][T27661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1842.239600][T27661] R13: 00007f40381a6038 R14: 00007f40381a5fa0 R15: 00007ffdf66ca028 [ 1842.239629][T27661] [ 1842.546473][T27683] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14003'. [ 1842.704899][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1842.704950][ T29] audit: type=1326 audit(1700001525.919:11458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.2.14011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468256fb19 code=0x7ffc0000 [ 1842.706046][ T29] audit: type=1326 audit(1700001525.919:11459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.2.14011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468256fb19 code=0x7ffc0000 [ 1842.706379][ T29] audit: type=1326 audit(1700001525.919:11460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.2.14011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f468256fb19 code=0x7ffc0000 [ 1842.706632][ T29] audit: type=1326 audit(1700001525.919:11461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.2.14011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468256fb19 code=0x7ffc0000 [ 1842.706672][ T29] audit: type=1326 audit(1700001525.919:11462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.2.14011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468256fb19 code=0x7ffc0000 [ 1842.706828][ T29] audit: type=1326 audit(1700001525.919:11463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.2.14011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468256fb19 code=0x7ffc0000 [ 1842.707098][ T29] audit: type=1326 audit(1700001525.919:11464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.2.14011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f468256fb19 code=0x7ffc0000 [ 1842.708997][ T29] audit: type=1326 audit(1700001525.919:11465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.2.14011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f468256fb19 code=0x7ffc0000 [ 1843.295059][T27760] xt_hashlimit: size too large, truncated to 1048576 [ 1843.295080][T27760] xt_hashlimit: max too large, truncated to 1048576 [ 1843.370657][T27764] loop6: detected capacity change from 0 to 1024 [ 1843.373120][T27764] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1843.393616][T27764] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #3: block 1: comm syz.6.14038: lblock 1 mapped to illegal pblock 1 (length 1) [ 1843.393730][T27764] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1843.393865][T27764] Quota error (device loop6): write_blk: dquota write failed [ 1843.393916][T27764] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1843.394008][T27764] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.14038: Failed to acquire dquot type 0 [ 1843.394038][T27764] fserror_report: 2 callbacks suppressed [ 1843.394103][T27764] loop6: lost filesystem error report for type 5 error -117 [ 1843.394369][T27764] EXT4-fs error (device loop6): ext4_free_blocks:6717: comm syz.6.14038: Freeing blocks not in datazone - block = 0, count = 4096 [ 1843.394444][T27764] loop6: lost filesystem error report for type 5 error -117 [ 1843.394575][T27764] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.14038: Invalid inode bitmap blk 0 in block_group 0 [ 1843.394669][T27764] loop6: lost filesystem error report for type 5 error -117 [ 1843.394748][T27764] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 1843.394771][T27764] loop6: lost filesystem error report for type 5 error -117 [ 1843.394877][T27764] EXT4-fs (loop6): 1 orphan inode deleted [ 1843.395264][T27764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1843.424298][ T4768] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:134: lblock 1 mapped to illegal pblock 1 (length 1) [ 1843.424877][ T4768] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:134: Failed to release dquot type 0 [ 1843.468654][T26366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1843.693358][T27784] X25: unknown 09 in state 3 [ 1844.338472][T27856] loop9: detected capacity change from 0 to 2048 [ 1844.346153][T27856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1844.383836][T27856] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1844.426103][T20964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1844.603631][T27878] syzkaller0: entered promiscuous mode [ 1844.603653][T27878] syzkaller0: entered allmulticast mode [ 1844.612726][T27878] tipc: Enabled bearer , priority 0 [ 1844.617877][T27877] tipc: Resetting bearer [ 1844.637905][T27877] tipc: Disabling bearer [ 1844.793352][T27883] __nla_validate_parse: 2 callbacks suppressed [ 1844.793389][T27883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14076'. [ 1844.956131][T27892] loop2: detected capacity change from 0 to 2048 [ 1844.959178][T27892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1845.005032][T27892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1845.038599][T26881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1845.093239][T27910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14088'. [ 1845.109765][T27907] syzkaller0: entered promiscuous mode [ 1845.109794][T27907] syzkaller0: entered allmulticast mode [ 1845.113833][T27907] tipc: Started in network mode [ 1845.113871][T27907] tipc: Node identity 8ef59e79dcc1, cluster identity 4711 [ 1845.113945][T27907] tipc: Enabled bearer , priority 0 [ 1845.126947][T27907] tipc: Resetting bearer [ 1845.157509][T27905] tipc: Resetting bearer [ 1845.159332][T27905] tipc: Disabling bearer [ 1845.255380][T27923] loop6: detected capacity change from 0 to 128 [ 1845.271702][T27923] FAT-fs (loop6): bogus sectors per cluster 0 [ 1845.271722][T27923] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1845.271763][T27923] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1845.415874][T27940] syzkaller0: entered promiscuous mode [ 1845.415900][T27940] syzkaller0: entered allmulticast mode [ 1845.418830][T27940] tipc: Enabled bearer , priority 0 [ 1845.420995][T27940] tipc: Resetting bearer [ 1845.422547][T27939] tipc: Resetting bearer [ 1845.423446][T27942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14102'. [ 1845.431569][T27939] tipc: Disabling bearer [ 1845.557709][T27957] loop6: detected capacity change from 0 to 2048 [ 1845.558314][T27957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1845.584028][T27957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1845.629557][T26366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1845.665795][T27965] bond1: entered allmulticast mode [ 1845.666044][T27965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1845.691300][T27965] macvlan2: entered promiscuous mode [ 1845.691327][T27965] macvlan2: entered allmulticast mode [ 1845.692127][T27965] bond1: entered promiscuous mode [ 1845.692478][T27965] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1845.710722][T27973] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14116'. [ 1845.736668][T27965] bond1: left promiscuous mode [ 1845.760974][T27977] syzkaller0: entered promiscuous mode [ 1845.761010][T27977] syzkaller0: entered allmulticast mode [ 1845.763755][T27977] tipc: Enabled bearer , priority 0 [ 1845.765724][T27977] tipc: Resetting bearer [ 1845.766621][T27976] tipc: Resetting bearer [ 1845.768634][T27976] tipc: Disabling bearer [ 1845.894944][T27989] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 1845.915133][T27987] loop6: detected capacity change from 0 to 512 [ 1845.962146][T27987] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.14123: bg 0: block 5: invalid block bitmap [ 1845.962182][T27987] loop6: lost filesystem error report for type 5 error -117 [ 1845.963441][T27987] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 1845.963550][T27987] loop6: lost filesystem error report for type 5 error -117 [ 1845.964711][T27987] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #11: comm syz.6.14123: invalid indirect mapped block 3 (level 2) [ 1845.964749][T27987] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1845.964816][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 1845.964838][ C1] EXT4-fs (loop6): initial error at time 1700001528: ext4_validate_block_bitmap:436 [ 1845.964862][ C1] EXT4-fs (loop6): last error at time 1700001528: ext4_mb_clear_bb:6678 [ 1845.968520][T27987] EXT4-fs (loop6): 1 orphan inode deleted [ 1845.968576][T27987] EXT4-fs (loop6): 1 truncate cleaned up [ 1845.972723][T27987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1846.114635][T26366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1846.241887][T27996] X25: unknown 09 in state 3 [ 1846.295323][T28007] vhci_hcd vhci_hcd.0: invalid port number 23 [ 1846.295381][T28007] vhci_hcd vhci_hcd.0: invalid port number 23 [ 1846.453544][T28014] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14132'. [ 1847.086041][T28071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14148'. [ 1847.421229][T28117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14160'. [ 1847.588450][T28140] netlink: 112 bytes leftover after parsing attributes in process `syz.1.14166'. [ 1847.653998][T28147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14168'. [ 1847.771434][T28155] loop2: detected capacity change from 0 to 1024 [ 1847.773277][T28155] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1847.793049][T28155] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #3: block 1: comm syz.2.14171: lblock 1 mapped to illegal pblock 1 (length 1) [ 1847.793091][T28155] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1847.793176][T28155] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.14171: Failed to acquire dquot type 0 [ 1847.793288][T28155] loop2: lost filesystem error report for type 5 error -117 [ 1847.793485][T28155] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.14171: Freeing blocks not in datazone - block = 0, count = 4096 [ 1847.793594][T28155] loop2: lost filesystem error report for type 5 error -117 [ 1847.793761][T28155] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.14171: Invalid inode bitmap blk 0 in block_group 0 [ 1847.793795][T28155] loop2: lost filesystem error report for type 5 error -117 [ 1847.793922][T28155] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 1847.793947][T28155] loop2: lost filesystem error report for type 5 error -117 [ 1847.794020][T28155] EXT4-fs (loop2): 1 orphan inode deleted [ 1847.794435][T28155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1847.820495][T22322] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1847.822658][T22322] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 0 [ 1847.949574][T26881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1848.143795][T28172] loop2: detected capacity change from 0 to 2048 [ 1848.145419][T28172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1848.167847][T28172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1848.189972][T26881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1848.236148][T28181] loop6: detected capacity change from 0 to 512 [ 1848.250453][T28181] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1848.275318][T28181] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1848.375612][T28192] syzkaller0: entered promiscuous mode [ 1848.375639][T28192] syzkaller0: entered allmulticast mode [ 1848.378481][T28192] tipc: Enabled bearer , priority 0 [ 1848.380505][T28192] tipc: Resetting bearer [ 1848.492269][T28191] tipc: Resetting bearer [ 1848.493805][T28191] tipc: Disabling bearer [ 1848.816122][T28216] loop6: detected capacity change from 0 to 8192 [ 1849.312498][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1849.312514][ T29] audit: type=1326 audit(1700001532.011:11480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28266 comm="syz.1.14220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a253fb19 code=0x7ffc0000 [ 1849.312553][ T29] audit: type=1326 audit(1700001532.011:11481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28266 comm="syz.1.14220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a253fb19 code=0x7ffc0000 [ 1849.315772][ T29] audit: type=1326 audit(1700001532.021:11482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28266 comm="syz.1.14220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f97a253fb19 code=0x7ffc0000 [ 1849.315820][ T29] audit: type=1326 audit(1700001532.021:11483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28266 comm="syz.1.14220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a253fb19 code=0x7ffc0000 [ 1849.315859][ T29] audit: type=1326 audit(1700001532.021:11484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28266 comm="syz.1.14220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a253fb19 code=0x7ffc0000 [ 1849.317502][ T29] audit: type=1326 audit(1700001532.021:11485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28266 comm="syz.1.14220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f97a253fb19 code=0x7ffc0000 [ 1849.317604][ T29] audit: type=1326 audit(1700001532.021:11486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28266 comm="syz.1.14220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a253fb19 code=0x7ffc0000 [ 1849.317683][ T29] audit: type=1326 audit(1700001532.021:11487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28266 comm="syz.1.14220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a253fb19 code=0x7ffc0000 [ 1849.317713][ T29] audit: type=1326 audit(1700001532.021:11488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28266 comm="syz.1.14220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f97a253fb19 code=0x7ffc0000 [ 1849.317748][ T29] audit: type=1326 audit(1700001532.021:11489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28266 comm="syz.1.14220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a253fb19 code=0x7ffc0000 [ 1849.933646][T28295] syzkaller0: entered promiscuous mode [ 1849.933701][T28295] syzkaller0: entered allmulticast mode [ 1849.953443][T28295] tipc: Started in network mode [ 1849.953486][T28295] tipc: Node identity 6ede8766d7a6, cluster identity 4711 [ 1849.953543][T28295] tipc: Enabled bearer , priority 0 [ 1849.957662][T28295] tipc: Resetting bearer [ 1849.961958][T28294] tipc: Resetting bearer [ 1849.997526][T28294] tipc: Disabling bearer [ 1850.386424][T28328] loop2: detected capacity change from 0 to 1024 [ 1850.404457][T28328] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1850.488565][T28328] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #3: block 1: comm syz.2.14245: lblock 1 mapped to illegal pblock 1 (length 1) [ 1850.488727][T28328] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1850.489001][T28328] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.14245: Failed to acquire dquot type 0 [ 1850.489126][T28328] loop2: lost filesystem error report for type 5 error -117 [ 1850.491150][T28328] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.14245: Freeing blocks not in datazone - block = 0, count = 4096 [ 1850.491210][T28328] loop2: lost filesystem error report for type 5 error -117 [ 1850.491987][T28328] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.14245: Invalid inode bitmap blk 0 in block_group 0 [ 1850.492152][T28328] loop2: lost filesystem error report for type 5 error -117 [ 1850.494807][T28328] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 1850.494911][T28328] loop2: lost filesystem error report for type 5 error -117 [ 1850.495317][T28328] EXT4-fs (loop2): 1 orphan inode deleted [ 1850.496378][T28328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1850.523228][T22322] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1850.523814][T22322] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:3: Failed to release dquot type 0 [ 1850.651830][T26881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1850.671386][T28335] syzkaller0: entered promiscuous mode [ 1850.671408][T28335] syzkaller0: entered allmulticast mode [ 1850.673821][T28335] tipc: Enabled bearer , priority 0 [ 1850.675754][T28335] tipc: Resetting bearer [ 1850.688890][T28334] tipc: Resetting bearer [ 1850.711692][T28334] tipc: Disabling bearer [ 1850.810692][T28345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14252'. [ 1850.810715][T28345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14252'. [ 1851.007147][T28364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14260'. [ 1851.024090][T28357] loop2: detected capacity change from 0 to 1024 [ 1851.030322][T28357] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1851.036695][T28357] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #3: block 1: comm syz.2.14258: lblock 1 mapped to illegal pblock 1 (length 1) [ 1851.036839][T28357] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1851.037231][T28357] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.14258: Failed to acquire dquot type 0 [ 1851.037323][T28357] loop2: lost filesystem error report for type 5 error -117 [ 1851.039656][T28357] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.14258: Freeing blocks not in datazone - block = 0, count = 4096 [ 1851.039768][T28357] loop2: lost filesystem error report for type 5 error -117 [ 1851.040440][T28357] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.14258: Invalid inode bitmap blk 0 in block_group 0 [ 1851.040542][T28357] loop2: lost filesystem error report for type 5 error -117 [ 1851.040752][T28357] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 1851.040822][T28357] loop2: lost filesystem error report for type 5 error -117 [ 1851.041180][T28357] EXT4-fs (loop2): 1 orphan inode deleted [ 1851.042275][T28357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1851.086989][ T3636] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:82: lblock 1 mapped to illegal pblock 1 (length 1) [ 1851.100666][ T3636] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:82: Failed to release dquot type 0 [ 1851.202294][T26881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.451448][T28384] loop9: detected capacity change from 0 to 512 [ 1851.477887][T28384] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.14269: bg 0: block 5: invalid block bitmap [ 1851.477991][T28384] loop9: lost filesystem error report for type 5 error -117 [ 1851.478207][T28384] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 1851.478237][T28384] loop9: lost filesystem error report for type 5 error -117 [ 1851.478840][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 1851.478864][ C1] EXT4-fs (loop9): initial error at time 1700001534: ext4_validate_block_bitmap:436 [ 1851.478891][ C1] EXT4-fs (loop9): last error at time 1700001534: ext4_mb_clear_bb:6678 [ 1851.482079][T28384] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.14269: invalid indirect mapped block 3 (level 2) [ 1851.482248][T28384] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1851.483077][T28384] EXT4-fs (loop9): 1 orphan inode deleted [ 1851.483146][T28384] EXT4-fs (loop9): 1 truncate cleaned up [ 1851.489263][T28384] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1851.659754][T20964] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.726095][T28392] netlink: 16 bytes leftover after parsing attributes in process `syz.9.14272'. [ 1852.754345][T28371] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1852.807772][T28419] loop2: detected capacity change from 0 to 512 [ 1852.822068][T28419] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.14282: bg 0: block 5: invalid block bitmap [ 1852.822571][T28419] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 1852.822717][T28419] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.14282: invalid indirect mapped block 3 (level 2) [ 1852.822828][T28419] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1852.823034][T28419] EXT4-fs (loop2): 1 orphan inode deleted [ 1852.823054][T28419] EXT4-fs (loop2): 1 truncate cleaned up [ 1852.823568][T28419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1852.981939][T26881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.031681][T28428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14284'. [ 1853.178406][T28436] X25: unknown 09 in state 3 [ 1853.206784][T28451] loop2: detected capacity change from 0 to 512 [ 1853.225383][T28451] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.14295: bg 0: block 5: invalid block bitmap [ 1853.226912][T28451] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 1853.227130][T28451] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.14295: invalid indirect mapped block 3 (level 2) [ 1853.227200][T28451] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1853.227614][T28451] EXT4-fs (loop2): 1 orphan inode deleted [ 1853.227636][T28451] EXT4-fs (loop2): 1 truncate cleaned up [ 1853.228129][T28451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1853.338586][T26881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.708833][T28504] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14305'. [ 1853.775149][T28502] rxe_eth0 speed is unknown, defaulting to 1000 [ 1853.791904][T28509] X25: unknown 09 in state 3 [ 1853.888584][T28517] loop2: detected capacity change from 0 to 512 [ 1853.902996][T28517] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.14309: bg 0: block 5: invalid block bitmap [ 1853.903251][T28517] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 1853.903430][T28517] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.14309: invalid indirect mapped block 3 (level 2) [ 1853.903469][T28517] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1853.903763][T28517] EXT4-fs (loop2): 1 orphan inode deleted [ 1853.903796][T28517] EXT4-fs (loop2): 1 truncate cleaned up [ 1853.904963][T28517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1853.905046][T28516] vlan2: entered promiscuous mode [ 1853.905062][T28516] dummy0: entered promiscuous mode [ 1853.905168][T28516] vlan2: entered allmulticast mode [ 1853.905187][T28516] dummy0: entered allmulticast mode [ 1853.944115][T28514] bridge0: port 1(ip6gretap0) entered blocking state [ 1853.944271][T28514] bridge0: port 1(ip6gretap0) entered disabled state [ 1853.944638][T28514] ip6gretap0: entered allmulticast mode [ 1853.947557][T28514] ip6gretap0: entered promiscuous mode [ 1853.948187][T28514] bridge0: port 1(ip6gretap0) entered blocking state [ 1853.948292][T28514] bridge0: port 1(ip6gretap0) entered forwarding state [ 1853.960430][T28502] lo speed is unknown, defaulting to 1000 [ 1854.074792][T28502] lo speed is unknown, defaulting to 1000 [ 1854.133726][T26881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1854.175030][T28525] syzkaller0: entered promiscuous mode [ 1854.175089][T28525] syzkaller0: entered allmulticast mode [ 1854.188196][T28525] tipc: Enabled bearer , priority 0 [ 1854.206236][T28525] tipc: Resetting bearer [ 1854.224106][T28524] tipc: Resetting bearer [ 1854.228807][T28524] tipc: Disabling bearer [ 1854.282523][T28539] FAULT_INJECTION: forcing a failure. [ 1854.282523][T28539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1854.282564][T28539] CPU: 1 UID: 0 PID: 28539 Comm: syz.2.14321 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1854.282632][T28539] Tainted: [W]=WARN [ 1854.282642][T28539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1854.282660][T28539] Call Trace: [ 1854.282669][T28539] [ 1854.282680][T28539] __dump_stack+0x1d/0x30 [ 1854.282715][T28539] dump_stack_lvl+0x95/0xd0 [ 1854.282756][T28539] dump_stack+0x15/0x1b [ 1854.282822][T28539] should_fail_ex+0x259/0x270 [ 1854.282863][T28539] should_fail+0xb/0x20 [ 1854.282921][T28539] should_fail_usercopy+0x1a/0x20 [ 1854.282961][T28539] _copy_to_user+0x20/0xa0 [ 1854.283066][T28539] io_query+0x25f/0x6c0 [ 1854.283106][T28539] __se_sys_io_uring_register+0x3ef/0x13c0 [ 1854.283213][T28539] ? xfd_validate_state+0x45/0xf0 [ 1854.283257][T28539] ? restore_fpregs_from_fpstate+0x61/0x110 [ 1854.283306][T28539] __x64_sys_io_uring_register+0x55/0x70 [ 1854.283403][T28539] x64_sys_call+0x1ff6/0x2550 [ 1854.283441][T28539] do_syscall_64+0x112/0x360 [ 1854.283494][T28539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.283575][T28539] RIP: 0033:0x7f468256fb19 [ 1854.283615][T28539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1854.283682][T28539] RSP: 002b:00007f4680fc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1854.283711][T28539] RAX: ffffffffffffffda RBX: 00007f46827f5fa0 RCX: 00007f468256fb19 [ 1854.283739][T28539] RDX: 00002000000004c0 RSI: 0000000000000023 RDI: ffffffffffffffff [ 1854.283759][T28539] RBP: 00007f4682607b70 R08: 0000000000000000 R09: 0000000000000000 [ 1854.283777][T28539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1854.283838][T28539] R13: 00007f46827f6038 R14: 00007f46827f5fa0 R15: 00007ffc996cc918 [ 1854.283867][T28539] [ 1854.520722][T28550] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1854.520767][T28550] SELinux: failed to load policy [ 1854.551207][T28545] bridge0: port 3(ip6gretap0) entered blocking state [ 1854.558886][T28545] bridge0: port 3(ip6gretap0) entered disabled state [ 1854.559296][T28545] ip6gretap0: entered allmulticast mode [ 1854.582611][T28553] netlink: 60 bytes leftover after parsing attributes in process `syz.9.14328'. [ 1854.594973][T28554] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14327'. [ 1854.595047][T28554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14327'. [ 1854.611425][T28545] ip6gretap0: entered promiscuous mode [ 1854.611976][T28545] bridge0: port 3(ip6gretap0) entered blocking state [ 1854.612112][T28545] bridge0: port 3(ip6gretap0) entered forwarding state [ 1854.695105][T28564] syzkaller0: entered promiscuous mode [ 1854.695130][T28564] syzkaller0: entered allmulticast mode [ 1854.709265][T28564] tipc: Enabled bearer , priority 0 [ 1854.711235][T28564] tipc: Resetting bearer [ 1854.713134][T28563] tipc: Resetting bearer [ 1854.713568][T28568] FAULT_INJECTION: forcing a failure. [ 1854.713568][T28568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1854.713619][T28568] CPU: 0 UID: 0 PID: 28568 Comm: syz.2.14334 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1854.713725][T28568] Tainted: [W]=WARN [ 1854.713736][T28568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1854.713754][T28568] Call Trace: [ 1854.713762][T28568] [ 1854.713772][T28568] __dump_stack+0x1d/0x30 [ 1854.713810][T28568] dump_stack_lvl+0x95/0xd0 [ 1854.713843][T28568] dump_stack+0x15/0x1b [ 1854.713941][T28568] should_fail_ex+0x259/0x270 [ 1854.713974][T28568] should_fail+0xb/0x20 [ 1854.714002][T28568] should_fail_usercopy+0x1a/0x20 [ 1854.714059][T28568] _copy_to_user+0x20/0xa0 [ 1854.714111][T28568] io_query+0x25f/0x6c0 [ 1854.714155][T28568] __se_sys_io_uring_register+0x3ef/0x13c0 [ 1854.714310][T28568] __x64_sys_io_uring_register+0x55/0x70 [ 1854.714341][T28568] x64_sys_call+0x1ff6/0x2550 [ 1854.714375][T28568] do_syscall_64+0x112/0x360 [ 1854.714547][T28568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.714580][T28568] RIP: 0033:0x7f468256fb19 [ 1854.714600][T28568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1854.714621][T28568] RSP: 002b:00007f4680fc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1854.714644][T28568] RAX: ffffffffffffffda RBX: 00007f46827f5fa0 RCX: 00007f468256fb19 [ 1854.714660][T28568] RDX: 00002000000004c0 RSI: 0000000000000023 RDI: ffffffffffffffff [ 1854.714684][T28568] RBP: 00007f4682607b70 R08: 0000000000000000 R09: 0000000000000000 [ 1854.714699][T28568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1854.714785][T28568] R13: 00007f46827f6038 R14: 00007f46827f5fa0 R15: 00007ffc996cc918 [ 1854.714808][T28568] [ 1854.932429][T28563] tipc: Disabling bearer [ 1854.946805][T28574] loop2: detected capacity change from 0 to 512 [ 1854.953796][T28574] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.14337: bg 0: block 5: invalid block bitmap [ 1854.954275][T28574] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 1854.954685][T28574] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.14337: invalid indirect mapped block 3 (level 2) [ 1854.954787][T28574] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1854.955250][T28574] EXT4-fs (loop2): 1 orphan inode deleted [ 1854.955310][T28574] EXT4-fs (loop2): 1 truncate cleaned up [ 1854.959487][T28574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1855.118217][T26881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.127970][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1855.127991][ T29] audit: type=1400 audit(1700001537.384:11507): avc: denied { getopt } for pid=28581 comm="syz.1.14340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1855.296959][T28604] FAULT_INJECTION: forcing a failure. [ 1855.296959][T28604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1855.297001][T28604] CPU: 1 UID: 0 PID: 28604 Comm: syz.9.14347 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1855.297033][T28604] Tainted: [W]=WARN [ 1855.297041][T28604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1855.297131][T28604] Call Trace: [ 1855.297140][T28604] [ 1855.297150][T28604] __dump_stack+0x1d/0x30 [ 1855.297187][T28604] dump_stack_lvl+0x95/0xd0 [ 1855.297221][T28604] dump_stack+0x15/0x1b [ 1855.297308][T28604] should_fail_ex+0x259/0x270 [ 1855.297343][T28604] should_fail+0xb/0x20 [ 1855.297382][T28604] should_fail_usercopy+0x1a/0x20 [ 1855.297465][T28604] _copy_from_user+0x1c/0xb0 [ 1855.297568][T28604] io_query+0x396/0x6c0 [ 1855.297612][T28604] __se_sys_io_uring_register+0x3ef/0x13c0 [ 1855.297649][T28604] ? __se_sys_futex+0x2f6/0x370 [ 1855.297679][T28604] ? xfd_validate_state+0x45/0xf0 [ 1855.297751][T28604] ? restore_fpregs_from_fpstate+0x61/0x110 [ 1855.297786][T28604] __x64_sys_io_uring_register+0x55/0x70 [ 1855.297833][T28604] x64_sys_call+0x1ff6/0x2550 [ 1855.297941][T28604] do_syscall_64+0x112/0x360 [ 1855.297988][T28604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.298012][T28604] RIP: 0033:0x7f4037f1fb19 [ 1855.298029][T28604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1855.298093][T28604] RSP: 002b:00007f403696f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1855.298165][T28604] RAX: ffffffffffffffda RBX: 00007f40381a5fa0 RCX: 00007f4037f1fb19 [ 1855.298185][T28604] RDX: 00002000000004c0 RSI: 0000000000000023 RDI: ffffffffffffffff [ 1855.298276][T28604] RBP: 00007f4037fb7b70 R08: 0000000000000000 R09: 0000000000000000 [ 1855.298295][T28604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1855.298315][T28604] R13: 00007f40381a6038 R14: 00007f40381a5fa0 R15: 00007ffdf66ca028 [ 1855.298345][T28604] [ 1855.545003][T28618] syzkaller0: entered promiscuous mode [ 1855.545041][T28618] syzkaller0: entered allmulticast mode [ 1855.547810][T28618] tipc: Enabled bearer , priority 0 [ 1855.550349][T28618] tipc: Resetting bearer [ 1855.570884][T28620] loop6: detected capacity change from 0 to 512 [ 1855.663505][T28620] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.14353: bg 0: block 5: invalid block bitmap [ 1855.664071][T28620] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 1855.664383][T28620] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #11: comm syz.6.14353: invalid indirect mapped block 3 (level 2) [ 1855.664436][T28620] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1855.665058][T28620] EXT4-fs (loop6): 1 orphan inode deleted [ 1855.665076][T28620] EXT4-fs (loop6): 1 truncate cleaned up [ 1855.665996][T28620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1856.093258][T28617] tipc: Resetting bearer [ 1856.106027][T28617] tipc: Disabling bearer [ 1856.115457][ T29] audit: type=1400 audit(1700001538.270:11508): avc: denied { getopt } for pid=28635 comm="syz.0.14359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1856.198145][T26366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1856.222079][ T2979] ================================================================== [ 1856.222118][ T2979] BUG: KCSAN: data-race in d_make_discardable / lookup_fast [ 1856.222167][ T2979] [ 1856.222174][ T2979] write to 0xffff888106d4b600 of 4 bytes by task 26904 on cpu 0: [ 1856.222194][ T2979] d_make_discardable+0x4f/0x90 [ 1856.222222][ T2979] simple_unlink+0x68/0x80 [ 1856.222241][ T2979] shmem_unlink+0x12d/0x140 [ 1856.222261][ T2979] vfs_unlink+0x1c3/0x4a0 [ 1856.222284][ T2979] filename_unlinkat+0x1db/0x400 [ 1856.222310][ T2979] __se_sys_unlink+0x2b/0xe0 [ 1856.222334][ T2979] __x64_sys_unlink+0x1f/0x30 [ 1856.222359][ T2979] x64_sys_call+0x18ee/0x2550 [ 1856.222396][ T2979] do_syscall_64+0x112/0x360 [ 1856.222438][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.222465][ T2979] [ 1856.222471][ T2979] read to 0xffff888106d4b600 of 4 bytes by task 2979 on cpu 1: [ 1856.222487][ T2979] lookup_fast+0xf1/0x320 [ 1856.222513][ T2979] path_lookupat+0x120/0x4c0 [ 1856.222544][ T2979] filename_lookup+0x18f/0x390 [ 1856.222577][ T2979] do_readlinkat+0x74/0x2f0 [ 1856.222613][ T2979] __x64_sys_readlink+0x47/0x60 [ 1856.222646][ T2979] x64_sys_call+0x1d41/0x2550 [ 1856.222682][ T2979] do_syscall_64+0x112/0x360 [ 1856.222723][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.222748][ T2979] [ 1856.222754][ T2979] value changed: 0x08300080 -> 0x00004080 [ 1856.222770][ T2979] [ 1856.222776][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 1856.222795][ T2979] CPU: 1 UID: 0 PID: 2979 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1856.222830][ T2979] Tainted: [W]=WARN [ 1856.222839][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1856.222856][ T2979] ================================================================== [ 1856.244324][ T29] audit: type=1400 audit(1700001538.408:11509): avc: denied { write } for pid=28640 comm="syz.6.14356" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1856.245085][T28641] random: crng reseeded on system resumption [ 1856.246282][ T29] audit: type=1400 audit(1700001538.408:11510): avc: denied { open } for pid=28640 comm="syz.6.14356" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1