last executing test programs: 1.449616902s ago: executing program 0 (id=2463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6d, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b005) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0xf, 0x4, 0x0, &(0x7f0000000180)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r7, 0x4, 0x75, 0x5, 0x7f, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x15}, 0x7, 0x40, 0x1, 0x4}}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8009}, 0x0) 1.447841732s ago: executing program 0 (id=2465): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x28000ca, &(0x7f0000000680)=ANY=[@ANYBLOB='uni_xlate=0,check=strict,nnonumtail=1,discard,nonumtail=0,rodir,utf8=1,utf8=1,shortname=winnt,shortname=winnt,nfs,nnonumt]il=1,nnonumtail=1,uni_xlate=1,utf8=1,check=strict,iocharset=ascii,uni_xlate=1,\x00'], 0x97, 0x2a9, &(0x7f0000002300)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c756e026d652c7472616e73"]) 1.406725145s ago: executing program 0 (id=2466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10004, 0x9, 0x1}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'dvmrp1\x00', 0x2}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) r8 = memfd_create(&(0x7f0000000480)='\x9d#\x00%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xaa\x8d\x83;\xeb\xf1\xd0\xce\xe5\x19\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x01\x00\x00\x00&0\xdd\xcbC\x15\xfcp\x11\xda|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\x04\xa0\x05}\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12F\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\x00\x00\x00\x00\x00\x00\x00\x04\t0\xaf\\H\x06x-\x01\x13\xa0\xf9\xe8\xdf;\xb9\x03\x00^!\xc2\xff\xac\xb8\xac\xc5\n4\xe7\xd5\xf5@L\b\xd3\x88\xc7\xb2G\f^B\xfeR/\xd7\xf9a[Y\xe0;5!r\x92?FB\xde\xa0>0\xdc\xa6\xbf\xce\xd6?\x1f%7>i\x8d\xd0Nw=,\xcc<\v\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\xf5+\x1c\'\x06\x00\xd1\xc9k:\x9d\x18cP\x14\xb6\x91AT\xb5w\xe71\xf3\xf8]\xc4\xa6+\xb6\xdcZ\xf2\x82*f\x0etDt\xbf\xa4)\x8e<%\xbcijzt\xf7\x7fN\x8fR\n>\xa0\t\ae\x8d~\xa3!\"\xec&\x83\xec\xac\x01\a\xe9\x17\x0f\xce\x9f}4\xf3P\fx\xa3/]E\xd3\xdbc\xa9\x9d$T\a\x83\n$r\xcf\xf5\xaa\x19\xe2\xb2~\xa3N\x03\x90K\xf7\x9fR_y\x80t\xa2\"!5\xf1R\x90~iLeNm\x9c\\Wv\xe5\xbbK \xc2\xa7wx\xd7\xe1P\a\'<\xa2\x02\x84\xb7\x15\x99\xb4\x85\x9b\xe4\a\xc4\xbe\xe9\xd7~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\xa1\x95\x8d\xad\x13\x10G\x99 !>\x01BS\x01w\xfc\xba\x1cu\x9d\x1aB\xaam\xddc\x1a`\xaflVlj\xb8G\xeb\xbe\a\xe4\xf38\xfba\xe8\xaf\xaa\x19\xa08\x0e\x80\xe2\x17\xde\x81\xd9fi\xca\xfa5\xb9\xf01{\xf5\xd4;Tj\xe7\xef\xfc\xdfAv\xd4\x9a\x83\xa5^\xbd\xa9\xb3\x9cE\xf3\x00Kg\x8aa\xd9|\xaa\xaa2\xf0/\\J\xc7\x13\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x12280, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) fallocate(r8, 0x0, 0x0, 0x2400001) fcntl$addseals(r8, 0x409, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r11, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4080e916cb26184501fcccee394279aac2fd003252a9ceb0aedc39030000000000000047b5b0d8abd68d88ed4462e802444ff101658cca52e38108000000826b787d799bc023a53e018f5e94bf888d1d11cb0afdf8da29b20ff0ac3f38bcd2c4ce54032518b4244bf3f907ba2af29819248b87c316cf14f21201c71f02d6d3f8d5c9ac1ee7430b6e4bdd87ac9e8312d54a1692f91a5690aab1374a2c5a0bdc8d8906c7a84d3f6c5bec80a9d4c579a4ba5a899fb8798f6ddec488d41b2573a59f1f6144f3cf7bcbcdd6a78b30a5559452f1a9129c24750d45f7d676820c8290c0be651d072bfe7081", @ANYRES16=r6, @ANYBLOB="000428bd7000fddbdf25190000000c00018008000300010000001400018008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000a40)={'tunl0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'veth1_vlan\x00'}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r12, 0x1, 0x6}, 0x10) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRESHEX=r4, @ANYRES32=r2, @ANYBLOB="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", @ANYRES8=r11], 0x170}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 833.793148ms ago: executing program 2 (id=2473): r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x180) sendfile(r0, r1, 0x0, 0xe066) (fail_nth: 6) 814.35304ms ago: executing program 2 (id=2476): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x28000ca, &(0x7f0000000680)=ANY=[@ANYBLOB='uni_xlate=0,check=strict,nnonumtail=1,discard,nonumtail=0,rodir,utf8=1,utf8=1,shortname=winnt,shortname=winnt,nfs,nnonumt]il=1,nnonumtail=1,uni_xlate=1,utf8=1,check=strict,iocharset=ascii,uni_xlate=1,\x00'], 0x97, 0x2a9, &(0x7f0000002300)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c756e026d652c7472616e73"]) 761.622283ms ago: executing program 0 (id=2477): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000e6000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}}, 0x0) 761.178733ms ago: executing program 4 (id=2478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x6917, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x3d8}, &(0x7f00000008c0)=0x0, &(0x7f0000000880)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f400850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r9) statx(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0, &(0x7f0000000540)) syz_clone3(&(0x7f0000000580)={0x2000000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 747.632625ms ago: executing program 0 (id=2479): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000402, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) read$usbfs(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000020000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0xf, 0x0, 0xfffffee8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYRESHEX=r0], 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x0, 0xe, 0x16, &(0x7f0000000340)="2e5c531a06e06368a2d9efc06d91", &(0x7f00000003c0)=""/22, 0x92, 0x0, 0xdd, 0xf7, &(0x7f0000000540)="819ffd591b1b96cfedef63618ad7839e6b40ab082ebfb8b2f9931cb7dbb3feebd1e306f6967de6f140a8eab009fe3a54dab7f03a397711beada62d17fae42916a26f613e0901656d15f2eb98b60c8a56eccd7a25967c73732506e0724544f3e628d974342f60df3be6e447c4bf5511819500a4175ff4f2b50b61425e93e233114eb854c856fb043305ef66b46572e2b95d95842fddea426a95d91d1334e5944e93585215815ceb8dba1b630958cab2c5e447c942d03614000b698d302581a6d4eb5e48e004b714ab283c1346cd26a5114db63086bd7ce3684018ffc510", &(0x7f00000006c0)="b332bc4e4d00c60eeb7fd1ffa98058aac6b5a0d580c38d36d2521832c009c4a36189364471febe74e8541445b293460fe8885cb3d3013535b0e550de13876584c0a64891db261692fe71a8457f30bcdb7f317595a5ce0b1b3db946008e281af448987d2e3fcd16194c9930f0db41cef992bbbf3d9c33833a166c23db38214b194353124a00059ad9ad4c8e3b5a5366866438a2f9c4d5bd44059116fd57fc7f6e39c077cb2e82f3f074b777fde4140c05bae1c2632add644a65fae935cc1ffb399b13115daa4dd8822c53af76a0cabb44f30511b3ca53a90a11b0ebe507e6c49700448c898ad664809a04cf35c2ae0fff7db87125e77e11", 0x2, 0x0, 0x80}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000040)=0x400) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$inet6(0xa, 0x3, 0x3c) creat(&(0x7f0000000280)='./file0\x00', 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r11, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1, 0x0, r12}}, 0x40) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="0002020100000000ff3602000000000000000000000000cdb0"], 0x18) 725.966446ms ago: executing program 2 (id=2480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000980020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='workqueue_activate_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 697.031638ms ago: executing program 2 (id=2481): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000000000000007000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000500000000060015000600000018001680140003"], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800087}, 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10890) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10890) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 632.749843ms ago: executing program 2 (id=2483): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 632.000773ms ago: executing program 4 (id=2484): prctl$PR_MCE_KILL(0x21, 0x1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008900000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe9c, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe88, 0x1, [@m_pedit={0xe84, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x7, 0x6, "731ba5"}, {0xc}, {0xc}}}]}]}, 0xe9c}}, 0x0) 618.576984ms ago: executing program 0 (id=2485): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed100e, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}], [{@obj_role={'obj_role', 0x3d, 'wlan0\x00'}}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") quotactl$Q_GETQUOTA(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="01080000", @ANYRES32], 0x28}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f00000000c0)={0x8, 0x4, 0x6, 0x6, 0x12, "99e6c8c1aaf60a52"}) timer_create(0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$TCSETSF(r5, 0x5409, 0x0) syz_read_part_table(0x4044, &(0x7f0000004040)="$eJzszjFKxGAUBODJavBHtrCwE1aDIFvGziq3yAVyBmsLcxPL4AEsBS9mJRJNExBR9vu6x5uBCf/Sy/C8f0uumoxtm5Qkxwux9jb1adlkm+T++7uffmMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwx5RV6eEi40OXu21STpI8HqXudlXOkyZnH6nXz8JmVu9T/cBkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCw1OviT9cZu12VkjQ3X5+XC4X97Oqn1QMBAAAAAIB3duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTiQAQAAABDmb51H+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYKQAA//8fog11") syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 557.673188ms ago: executing program 2 (id=2487): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000c400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = dup2(r1, r1) fcntl$setstatus(r2, 0x4, 0x2400) r3 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x1241, 0x0, 0x1000000, 0x2}, &(0x7f0000000140), &(0x7f0000000100)) dup2(r3, r2) socket$inet_sctp(0x2, 0x1, 0x84) r4 = eventfd2(0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r6 = dup3(r5, r4, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) readv(r4, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/9, 0x9}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0xffffffff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000b00)={0x0, "d73e74604b6f2e362fca248057cf0b52"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000fdffffff0000000000000002"], 0x48) 557.356848ms ago: executing program 4 (id=2488): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r0 = getuid() setreuid(r0, 0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x1) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) (async) r6 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) (async) io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0) (async) write(r9, &(0x7f0000000200)='~', 0x1) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x5f, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0) 549.277099ms ago: executing program 4 (id=2489): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x5, 0x403, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000ac0)={[{@stripe={'stripe', 0x3d, 0x1}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@noinit_itable}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_eq}, {@uid_lt}, {@fowner_lt}]}, 0xfc, 0x550, &(0x7f0000000340)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") 487.131084ms ago: executing program 4 (id=2490): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x28000ca, &(0x7f0000000680)=ANY=[@ANYBLOB='uni_xlate=0,check=strict,nnonumtail=1,discard,nonumtail=0,rodir,utf8=1,utf8=1,shortname=winnt,shortname=winnt,nfs,nnonumt]il=1,nnonumtail=1,uni_xlate=1,utf8=1,check=strict,iocharset=ascii,uni_xlate=1,\x00'], 0x97, 0x2a9, &(0x7f0000002300)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c756e026d652c7472616e73"]) 478.629054ms ago: executing program 3 (id=2492): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000ac0)={[{@stripe={'stripe', 0x3d, 0x1}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@noinit_itable}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_eq}, {@uid_lt}, {@fowner_lt}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") (fail_nth: 6) 478.293924ms ago: executing program 4 (id=2493): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x0, @remote, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c80517411192341d0000000000000000290000e003000000000000"], 0x5c8}, 0x0) recvmmsg(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000001400)=[{&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/172, 0xac}, {&(0x7f0000001340)=""/173, 0xad}], 0x5, &(0x7f0000001480)=""/65, 0x41}, 0x53b3}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)=""/15, 0xf}, {&(0x7f0000001540)=""/21, 0x15}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/145, 0x91}, 0x2}, {{&(0x7f0000002680)=@un=@abs, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002700)=""/43, 0x2b}, {&(0x7f0000002740)=""/208, 0xd0}, {&(0x7f0000002840)=""/23, 0x17}, {&(0x7f0000002880)=""/45, 0x2d}, {&(0x7f00000028c0)=""/72, 0x48}, {&(0x7f0000002940)=""/123, 0x7b}, {&(0x7f00000029c0)=""/25, 0x19}, {&(0x7f0000002a00)=""/31, 0x1f}, {&(0x7f0000002a40)=""/122, 0x7a}], 0x9}, 0xf1}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002b80)=""/102, 0x66}], 0x1, &(0x7f0000002c40)=""/69, 0x45}, 0x7}], 0x4, 0x40000082, 0x0) 394.483981ms ago: executing program 1 (id=2496): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7b, 0x12, r2, 0x1080000000000) close_range(r1, 0xffffffffffffffff, 0x0) 393.756691ms ago: executing program 1 (id=2497): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) io_setup(0x7, &(0x7f0000001200)=0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x12, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) io_destroy(r1) 215.744434ms ago: executing program 3 (id=2498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unshare(0x22020400) syz_io_uring_setup(0xd3, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x924, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000d80)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000080000000000000e020000dafc12c589db53d4f7691bce0700010000000b000000000000010000000051000e0004000000000000070000000000002e6130002a1155886225e715e3ac007430e17289fed413df76a54dbaa5f1702ba46c795e8d885cef7a0c1e6181813278467847507efb61963907dfda652d493a640ef86b71f5f647d93fccc1bccffb1a0ce9220502e46f20b0fce02bf3eff10f0bffe6f75bb0e788400e3fbfa862528e5862cb01a49a9757dc118d6627901b5a95de87a8bd"], &(0x7f0000000640)=""/254, 0x4a, 0xfe, 0x1, 0x5}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x6, &(0x7f0000000240)=@raw=[@map_fd={0x18, 0xa}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x92, &(0x7f0000000500)=""/146, 0x0, 0x0, '\x00', 0x0, 0x7, r5, 0x8, &(0x7f0000000740)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x0, 0x3, 0x80}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000840)=[r0, r6, r0], 0x0, 0x10, 0x7}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@data_journal}, {@nombcache}, {@block_validity}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r7 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r7, 0x400, 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 214.973374ms ago: executing program 3 (id=2508): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7b, 0x12, r2, 0x1080000000000) close_range(r1, 0xffffffffffffffff, 0x0) 177.434817ms ago: executing program 1 (id=2499): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "865703b7e43b34e4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close(r1) 176.407927ms ago: executing program 3 (id=2510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x6917, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x3d8}, &(0x7f00000008c0)=0x0, &(0x7f0000000880)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f400850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r9) statx(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0, &(0x7f0000000540)) syz_clone3(&(0x7f0000000580)={0x2000000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) 146.503629ms ago: executing program 1 (id=2500): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1450, 0x1250, 0x5802, 0x294, 0x0, 0x294, 0x1380, 0x325, 0x378, 0x1380, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'pimreg0\x00', 'macsec0\x00'}, 0x0, 0x1228, 0x1250, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}}, @common=@frag={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "865703b7e43b34e4"}, 0x28) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 105.124782ms ago: executing program 1 (id=2501): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x800, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000002e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mq_notify(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x6, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) syz_clone3(&(0x7f0000000440)={0x80, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r2, r2, r2, 0x0, r2], 0x5}, 0x58) pipe(&(0x7f00000001c0)) 90.948483ms ago: executing program 3 (id=2502): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) io_setup(0x7, &(0x7f0000001200)=0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x12, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r8, 0x40107446, 0x0) io_destroy(r1) 1.24463ms ago: executing program 3 (id=2503): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f00000000c0)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@nouid32}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x84182, 0x0) ftruncate(r7, 0x2007ffb) preadv2(r7, &(0x7f0000000400)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x9) sendmsg$TIPC_NL_LINK_GET(r4, 0x0, 0x20000008) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2}, 0x90) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000008180)='./file0\x00', 0x198101c, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x1, 0x8150, &(0x7f0000018440)="$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") 0s ago: executing program 1 (id=2515): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000402, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) read$usbfs(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000020000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0xf, 0x0, 0xfffffee8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYRESHEX=r0], 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x0, 0xe, 0x16, &(0x7f0000000340)="2e5c531a06e06368a2d9efc06d91", &(0x7f00000003c0)=""/22, 0x92, 0x0, 0xdd, 0xf7, &(0x7f0000000540)="819ffd591b1b96cfedef63618ad7839e6b40ab082ebfb8b2f9931cb7dbb3feebd1e306f6967de6f140a8eab009fe3a54dab7f03a397711beada62d17fae42916a26f613e0901656d15f2eb98b60c8a56eccd7a25967c73732506e0724544f3e628d974342f60df3be6e447c4bf5511819500a4175ff4f2b50b61425e93e233114eb854c856fb043305ef66b46572e2b95d95842fddea426a95d91d1334e5944e93585215815ceb8dba1b630958cab2c5e447c942d03614000b698d302581a6d4eb5e48e004b714ab283c1346cd26a5114db63086bd7ce3684018ffc510", &(0x7f00000006c0)="b332bc4e4d00c60eeb7fd1ffa98058aac6b5a0d580c38d36d2521832c009c4a36189364471febe74e8541445b293460fe8885cb3d3013535b0e550de13876584c0a64891db261692fe71a8457f30bcdb7f317595a5ce0b1b3db946008e281af448987d2e3fcd16194c9930f0db41cef992bbbf3d9c33833a166c23db38214b194353124a00059ad9ad4c8e3b5a5366866438a2f9c4d5bd44059116fd57fc7f6e39c077cb2e82f3f074b777fde4140c05bae1c2632add644a65fae935cc1ffb399b13115daa4dd8822c53af76a0cabb44f30511b3ca53a90a11b0ebe507e6c49700448c898ad664809a04cf35c2ae0fff7db87125e77e11", 0x2, 0x0, 0x80}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000040)=0x400) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$inet6(0xa, 0x3, 0x3c) creat(&(0x7f0000000280)='./file0\x00', 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r11, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1, 0x0, r12}}, 0x40) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="0002020100000000ff3602000000000000000000000000cdb0"], 0x18) kernel console output (not intermixed with test programs): interval 1, probability 0, space 0, times 0 [ 207.536951][T10982] CPU: 1 UID: 0 PID: 10982 Comm: syz.4.1911 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 207.547747][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 207.557860][T10982] Call Trace: [ 207.561157][T10982] [ 207.564107][T10982] dump_stack_lvl+0xf2/0x150 [ 207.568772][T10982] dump_stack+0x15/0x20 [ 207.572992][T10982] should_fail_ex+0x229/0x230 [ 207.577798][T10982] should_fail+0xb/0x10 [ 207.581980][T10982] should_fail_usercopy+0x1a/0x20 [ 207.587028][T10982] _copy_from_user+0x1e/0xd0 [ 207.591711][T10982] copy_msghdr_from_user+0x54/0x2a0 [ 207.597002][T10982] __sys_sendmmsg+0x22a/0x500 [ 207.601851][T10982] __x64_sys_sendmmsg+0x57/0x70 [ 207.606734][T10982] x64_sys_call+0xa49/0x2d60 [ 207.611368][T10982] do_syscall_64+0xc9/0x1c0 [ 207.615904][T10982] ? clear_bhb_loop+0x55/0xb0 [ 207.620663][T10982] ? clear_bhb_loop+0x55/0xb0 [ 207.625376][T10982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.631325][T10982] RIP: 0033:0x7f5127869eb9 [ 207.635796][T10982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.655436][T10982] RSP: 002b:00007f51264e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.663883][T10982] RAX: ffffffffffffffda RBX: 00007f5127a05f80 RCX: 00007f5127869eb9 [ 207.671958][T10982] RDX: 0000000000000002 RSI: 0000000020004a40 RDI: 0000000000000009 [ 207.679961][T10982] RBP: 00007f51264e1090 R08: 0000000000000000 R09: 0000000000000000 [ 207.687942][T10982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.695933][T10982] R13: 0000000000000000 R14: 00007f5127a05f80 R15: 00007ffddb3c89f8 [ 207.703919][T10982] [ 207.721642][T10900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.778672][T10990] loop4: detected capacity change from 0 to 128 [ 207.896572][T10900] veth0_vlan: entered promiscuous mode [ 207.918515][T10900] veth1_vlan: entered promiscuous mode [ 207.971505][T10900] veth0_macvtap: entered promiscuous mode [ 207.987703][T10900] veth1_macvtap: entered promiscuous mode [ 208.010691][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.021230][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.031100][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.041567][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.051506][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.062209][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.072130][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.082620][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.092495][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.102948][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.122126][T10900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.149515][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.160055][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.169971][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.180459][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.190391][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.200837][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.210670][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.221151][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.231197][T10900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.241719][T10900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.299205][T10900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.327440][T10900] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.336314][T10900] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.345035][T10900] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.353867][T10900] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.411836][T11020] loop1: detected capacity change from 0 to 512 [ 208.420051][T11020] EXT4-fs: dax option not supported [ 208.453462][T11023] loop3: detected capacity change from 0 to 512 [ 208.478363][T11023] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.546156][T11023] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1917: Directory hole found for htree leaf block 0 [ 208.583778][T11028] loop3: detected capacity change from 0 to 256 [ 208.590555][T11028] vfat: Unknown parameter 'nnonumtail' [ 208.600097][T11028] 9pnet_fd: Insufficient options for proto=fd [ 208.770926][T11037] loop4: detected capacity change from 0 to 128 [ 208.796888][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 208.796906][ T29] audit: type=1326 audit(1725158576.021:20528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11034 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 208.845428][ T29] audit: type=1326 audit(1725158576.051:20529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11034 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 208.869261][ T29] audit: type=1326 audit(1725158576.051:20530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11034 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 208.893025][ T29] audit: type=1326 audit(1725158576.051:20531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11034 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 208.916759][ T29] audit: type=1326 audit(1725158576.051:20532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11034 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 208.932699][T11042] loop1: detected capacity change from 0 to 256 [ 208.940379][ T29] audit: type=1326 audit(1725158576.051:20533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11034 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 208.952622][T11042] vfat: Unknown parameter 'ÿ' [ 208.970421][ T29] audit: type=1326 audit(1725158576.051:20534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11034 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 208.999145][ T29] audit: type=1326 audit(1725158576.051:20535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11034 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 209.004591][T11045] loop1: detected capacity change from 0 to 256 [ 209.023040][ T29] audit: type=1326 audit(1725158576.051:20536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11034 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 209.032635][T11045] vfat: Unknown parameter 'ÿ' [ 209.053105][ T29] audit: type=1326 audit(1725158576.051:20537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11034 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 209.065923][T11046] loop3: detected capacity change from 0 to 512 [ 209.120025][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1927'. [ 209.167924][T11051] loop2: detected capacity change from 0 to 512 [ 209.187860][T11051] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.236266][T11060] loop0: detected capacity change from 0 to 256 [ 209.243782][T11060] vfat: Unknown parameter 'nnonumtail' [ 209.254769][T11060] 9pnet_fd: Insufficient options for proto=fd [ 209.279959][T11051] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.1929: Directory hole found for htree leaf block 0 [ 209.409419][T11070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1933'. [ 209.480924][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1934'. [ 209.509377][T11071] loop4: detected capacity change from 0 to 1024 [ 209.607126][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1937'. [ 209.622750][T11082] FAULT_INJECTION: forcing a failure. [ 209.622750][T11082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.635862][T11082] CPU: 0 UID: 0 PID: 11082 Comm: syz.2.1937 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 209.646758][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 209.656837][T11082] Call Trace: [ 209.660134][T11082] [ 209.663108][T11082] dump_stack_lvl+0xf2/0x150 [ 209.667737][T11082] dump_stack+0x15/0x20 [ 209.671912][T11082] should_fail_ex+0x229/0x230 [ 209.676673][T11082] should_fail+0xb/0x10 [ 209.680840][T11082] should_fail_usercopy+0x1a/0x20 [ 209.685888][T11082] _copy_from_user+0x1e/0xd0 [ 209.690509][T11082] __sys_bpf+0x14e/0x7a0 [ 209.694780][T11082] __x64_sys_bpf+0x43/0x50 [ 209.699232][T11082] x64_sys_call+0x2625/0x2d60 [ 209.703978][T11082] do_syscall_64+0xc9/0x1c0 [ 209.708503][T11082] ? clear_bhb_loop+0x55/0xb0 [ 209.713203][T11082] ? clear_bhb_loop+0x55/0xb0 [ 209.717964][T11082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.723905][T11082] RIP: 0033:0x7f24ab909eb9 [ 209.728337][T11082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.736585][T11058] loop3: detected capacity change from 0 to 32768 [ 209.747951][T11082] RSP: 002b:00007f24aa581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.748046][T11082] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab909eb9 [ 209.770932][T11082] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000015 [ 209.778922][T11082] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 209.786932][T11082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.794929][T11082] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 209.802996][T11082] [ 209.851164][T11058] loop3: p1 p3 < > [ 210.422430][T11096] loop1: detected capacity change from 0 to 256 [ 210.429579][T11096] vfat: Unknown parameter 'nnonumtail' [ 210.438553][T11096] 9pnet_fd: Insufficient options for proto=fd [ 210.466457][T11098] loop1: detected capacity change from 0 to 128 [ 210.551376][T11100] loop4: detected capacity change from 0 to 512 [ 210.581032][T11100] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.660244][T11100] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1943: Directory hole found for htree leaf block 0 [ 210.717861][T11111] FAULT_INJECTION: forcing a failure. [ 210.717861][T11111] name failslab, interval 1, probability 0, space 0, times 0 [ 210.730741][T11111] CPU: 1 UID: 0 PID: 11111 Comm: syz.4.1947 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 210.741550][T11111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 210.751618][T11111] Call Trace: [ 210.754892][T11111] [ 210.757864][T11111] dump_stack_lvl+0xf2/0x150 [ 210.762465][T11111] dump_stack+0x15/0x20 [ 210.766622][T11111] should_fail_ex+0x229/0x230 [ 210.771375][T11111] ? audit_log_start+0x34c/0x6b0 [ 210.776318][T11111] should_failslab+0x8f/0xb0 [ 210.780935][T11111] kmem_cache_alloc_noprof+0x4c/0x290 [ 210.786332][T11111] audit_log_start+0x34c/0x6b0 [ 210.791140][T11111] ? idr_replace+0xf1/0x120 [ 210.795705][T11111] audit_seccomp+0x4b/0x130 [ 210.800283][T11111] __seccomp_filter+0x6fa/0x1180 [ 210.805245][T11111] ? __perf_event_task_sched_out+0x111/0xfe0 [ 210.811325][T11111] __secure_computing+0x9f/0x1c0 [ 210.816357][T11111] syscall_trace_enter+0xd1/0x1f0 [ 210.821396][T11111] do_syscall_64+0xaa/0x1c0 [ 210.826007][T11111] ? clear_bhb_loop+0x55/0xb0 [ 210.830698][T11111] ? clear_bhb_loop+0x55/0xb0 [ 210.835379][T11111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.841314][T11111] RIP: 0033:0x7f51278688fc [ 210.845779][T11111] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 210.865518][T11111] RSP: 002b:00007f51264e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.874038][T11111] RAX: ffffffffffffffda RBX: 00007f5127a05f80 RCX: 00007f51278688fc [ 210.882009][T11111] RDX: 000000000000000f RSI: 00007f51264e10a0 RDI: 0000000000000005 [ 210.890002][T11111] RBP: 00007f51264e1090 R08: 0000000000000000 R09: 0000000000000000 [ 210.897972][T11111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.905979][T11111] R13: 0000000000000000 R14: 00007f5127a05f80 R15: 00007ffddb3c89f8 [ 210.914004][T11111] [ 210.998866][T11118] loop2: detected capacity change from 0 to 512 [ 211.006376][T11118] EXT4-fs: Ignoring removed orlov option [ 211.023224][T11118] EXT4-fs (loop2): 1 truncate cleaned up [ 211.038860][T11118] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.1948: Directory hole found for htree leaf block 0 [ 211.053073][T11121] loop1: detected capacity change from 0 to 512 [ 211.059967][T11121] EXT4-fs: Ignoring removed orlov option [ 211.069992][T11118] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.1948: Directory hole found for htree leaf block 0 [ 211.071868][T11123] loop0: detected capacity change from 0 to 256 [ 211.086138][T11121] EXT4-fs (loop1): 1 truncate cleaned up [ 211.105231][T11123] vfat: Unknown parameter 'nnonumtail' [ 211.108158][T11121] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1951: Directory hole found for htree leaf block 0 [ 211.125099][T11121] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1951: Directory hole found for htree leaf block 0 [ 211.129173][T11123] 9pnet_fd: Insufficient options for proto=fd [ 211.150064][T11121] FAULT_INJECTION: forcing a failure. [ 211.150064][T11121] name failslab, interval 1, probability 0, space 0, times 0 [ 211.162986][T11121] CPU: 1 UID: 0 PID: 11121 Comm: syz.1.1951 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 211.174095][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 211.184200][T11121] Call Trace: [ 211.187483][T11121] [ 211.190419][T11121] dump_stack_lvl+0xf2/0x150 [ 211.195076][T11121] dump_stack+0x15/0x20 [ 211.199241][T11121] should_fail_ex+0x229/0x230 [ 211.203948][T11121] ? getname_flags+0x81/0x3b0 [ 211.208685][T11121] should_failslab+0x8f/0xb0 [ 211.213385][T11121] kmem_cache_alloc_noprof+0x4c/0x290 [ 211.218782][T11121] getname_flags+0x81/0x3b0 [ 211.223423][T11121] user_path_at+0x26/0x110 [ 211.227849][T11121] __se_sys_inotify_add_watch+0x116/0x800 [ 211.233663][T11121] ? fput+0x13b/0x180 [ 211.237655][T11121] ? ksys_write+0x178/0x1b0 [ 211.242175][T11121] __x64_sys_inotify_add_watch+0x43/0x50 [ 211.247845][T11121] x64_sys_call+0x2acb/0x2d60 [ 211.252597][T11121] do_syscall_64+0xc9/0x1c0 [ 211.257260][T11121] ? clear_bhb_loop+0x55/0xb0 [ 211.261947][T11121] ? clear_bhb_loop+0x55/0xb0 [ 211.266730][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.272650][T11121] RIP: 0033:0x7f6913489eb9 [ 211.277073][T11121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.296708][T11121] RSP: 002b:00007f6912107038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 211.305137][T11121] RAX: ffffffffffffffda RBX: 00007f6913625f80 RCX: 00007f6913489eb9 [ 211.313118][T11121] RDX: 00000000a4000960 RSI: 0000000020000180 RDI: 0000000000000005 [ 211.321095][T11121] RBP: 00007f6912107090 R08: 0000000000000000 R09: 0000000000000000 [ 211.329073][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.337051][T11121] R13: 0000000000000000 R14: 00007f6913625f80 R15: 00007ffef5d68018 [ 211.345042][T11121] [ 211.474231][T11138] loop4: detected capacity change from 0 to 512 [ 211.474755][T11138] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 211.508501][T11127] loop2: detected capacity change from 0 to 1024 [ 211.516317][T11138] EXT4-fs (loop4): invalid journal inode [ 211.522834][T11138] EXT4-fs (loop4): can't get journal size [ 211.551772][T11138] EXT4-fs (loop4): 1 truncate cleaned up [ 211.630270][T11138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1957'. [ 211.692318][T11150] loop0: detected capacity change from 0 to 512 [ 211.737025][T11150] EXT4-fs: Ignoring removed orlov option [ 211.779170][T11150] EXT4-fs (loop0): 1 truncate cleaned up [ 211.877820][T11150] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.1956: Directory hole found for htree leaf block 0 [ 211.927196][T11150] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.1956: Directory hole found for htree leaf block 0 [ 212.079794][T11165] loop3: detected capacity change from 0 to 512 [ 212.092656][T11165] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.190783][T11165] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1960: Directory hole found for htree leaf block 0 [ 212.277072][T11191] loop3: detected capacity change from 0 to 128 [ 212.290276][T11191] Process accounting resumed [ 212.547239][T11202] loop1: detected capacity change from 0 to 256 [ 212.574324][T11205] loop2: detected capacity change from 0 to 256 [ 212.581271][T11205] vfat: Unknown parameter 'nnonumtail' [ 212.607688][T11205] 9pnet_fd: Insufficient options for proto=fd [ 212.641885][T11213] loop2: detected capacity change from 0 to 512 [ 212.667113][T11217] loop4: detected capacity change from 0 to 512 [ 212.680504][T11215] loop0: detected capacity change from 0 to 512 [ 212.687962][T11215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.688877][T11219] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1973'. [ 212.694988][T11215] EXT4-fs: Mount option(s) incompatible with ext2 [ 212.723130][T11217] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.819220][T11229] FAULT_INJECTION: forcing a failure. [ 212.819220][T11229] name failslab, interval 1, probability 0, space 0, times 0 [ 212.829665][T11217] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1972: Directory hole found for htree leaf block 0 [ 212.831949][T11229] CPU: 1 UID: 0 PID: 11229 Comm: syz.0.1974 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 212.855444][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 212.865520][T11229] Call Trace: [ 212.868810][T11229] [ 212.871762][T11229] dump_stack_lvl+0xf2/0x150 [ 212.876696][T11229] dump_stack+0x15/0x20 [ 212.880897][T11229] should_fail_ex+0x229/0x230 [ 212.885621][T11229] ? audit_log_d_path+0x96/0x250 [ 212.890644][T11229] should_failslab+0x8f/0xb0 [ 212.895313][T11229] __kmalloc_cache_noprof+0x4b/0x2a0 [ 212.900634][T11229] audit_log_d_path+0x96/0x250 [ 212.905416][T11229] ? get_file_rcu+0xf4/0x110 [ 212.910050][T11229] ? __rcu_read_unlock+0x4e/0x70 [ 212.915004][T11229] audit_log_d_path_exe+0x45/0x80 [ 212.920097][T11229] audit_log_task+0x155/0x180 [ 212.924787][T11229] audit_seccomp+0x68/0x130 [ 212.929344][T11229] __seccomp_filter+0x6fa/0x1180 [ 212.934501][T11229] ? random_recv_done+0xab/0xe0 [ 212.939442][T11229] ? __pfx_random_recv_done+0x10/0x10 [ 212.944821][T11229] ? vring_interrupt+0x157/0x180 [ 212.949799][T11229] ? __pfx_vring_interrupt+0x10/0x10 [ 212.955111][T11229] ? __handle_irq_event_percpu+0x457/0x490 [ 212.960939][T11229] __secure_computing+0x9f/0x1c0 [ 212.965955][T11229] syscall_trace_enter+0xd1/0x1f0 [ 212.971088][T11229] do_syscall_64+0xaa/0x1c0 [ 212.975621][T11229] ? clear_bhb_loop+0x55/0xb0 [ 212.980301][T11229] ? clear_bhb_loop+0x55/0xb0 [ 212.984982][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.990964][T11229] RIP: 0033:0x7f62b31a9eb9 [ 212.995399][T11229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.015071][T11229] RSP: 002b:00007f62b1e27038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 213.023584][T11229] RAX: ffffffffffffffda RBX: 00007f62b3345f80 RCX: 00007f62b31a9eb9 [ 213.031659][T11229] RDX: 0000000000000000 RSI: 0000000020004740 RDI: ffffffffffffffff [ 213.039633][T11229] RBP: 00007f62b1e27090 R08: 0000000000001200 R09: 0000000000000000 [ 213.047671][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.055645][T11229] R13: 0000000000000000 R14: 00007f62b3345f80 R15: 00007ffff03eb288 [ 213.063656][T11229] [ 213.375110][T11226] loop2: detected capacity change from 0 to 32768 [ 213.426132][T11226] loop2: p1 p3 < > [ 213.439501][T11252] loop1: detected capacity change from 0 to 1024 [ 213.669613][T11266] loop0: detected capacity change from 0 to 512 [ 213.700218][T11266] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.778980][T11266] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.1986: Directory hole found for htree leaf block 0 [ 213.864518][T11271] pim6reg1: entered promiscuous mode [ 213.870173][T11271] pim6reg1: entered allmulticast mode [ 213.922436][T11271] loop0: detected capacity change from 0 to 2048 [ 213.940010][ T29] kauditd_printk_skb: 668 callbacks suppressed [ 213.940043][ T29] audit: type=1326 audit(1725158581.161:21204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.1.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f691348899f code=0x7ffc0000 [ 213.982683][ T29] audit: type=1400 audit(1725158581.201:21205): avc: denied { bind } for pid=11270 comm="syz.0.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.169054][T11276] veth0_vlan: entered allmulticast mode [ 214.207007][ T29] audit: type=1326 audit(1725158581.431:21206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11278 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b31a9eb9 code=0x7ffc0000 [ 214.230828][ T29] audit: type=1326 audit(1725158581.431:21207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11278 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f62b31a9eb9 code=0x7ffc0000 [ 214.254440][ T29] audit: type=1326 audit(1725158581.431:21208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11278 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b31a9eb9 code=0x7ffc0000 [ 214.279041][ T29] audit: type=1326 audit(1725158581.451:21209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11278 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f62b31a9eb9 code=0x7ffc0000 [ 214.303017][ T29] audit: type=1326 audit(1725158581.451:21210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11278 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b31a9eb9 code=0x7ffc0000 [ 214.326660][ T29] audit: type=1326 audit(1725158581.451:21211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11278 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b31a9eb9 code=0x7ffc0000 [ 214.350732][ T29] audit: type=1326 audit(1725158581.501:21212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11278 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f62b31a9eb9 code=0x7ffc0000 [ 214.374607][ T29] audit: type=1326 audit(1725158581.501:21213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11278 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62b31a9eb9 code=0x7ffc0000 [ 214.399734][T11277] veth0_vlan: left promiscuous mode [ 214.408026][T11277] veth0_vlan: entered promiscuous mode [ 214.602976][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1995'. [ 214.742204][T11306] loop1: detected capacity change from 0 to 512 [ 214.773617][T11306] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.844513][T11306] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.2000: Directory hole found for htree leaf block 0 [ 214.914705][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 215.640655][T11351] loop1: detected capacity change from 0 to 1024 [ 215.708949][T11354] loop4: detected capacity change from 0 to 512 [ 215.790041][T11354] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.004512][T11354] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2012: Directory hole found for htree leaf block 0 [ 216.109504][T11367] loop3: detected capacity change from 0 to 256 [ 216.131152][T11368] FAULT_INJECTION: forcing a failure. [ 216.131152][T11368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.144293][T11368] CPU: 0 UID: 0 PID: 11368 Comm: syz.4.2015 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 216.146489][T11367] vfat: Unknown parameter 'nnonumtail' [ 216.155060][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.155076][T11368] Call Trace: [ 216.155094][T11368] [ 216.155104][T11368] dump_stack_lvl+0xf2/0x150 [ 216.181415][T11368] dump_stack+0x15/0x20 [ 216.185690][T11368] should_fail_ex+0x229/0x230 [ 216.185792][T11368] should_fail+0xb/0x10 [ 216.185814][T11368] should_fail_usercopy+0x1a/0x20 [ 216.185842][T11368] _copy_from_user+0x1e/0xd0 [ 216.185894][T11368] copy_msghdr_from_user+0x54/0x2a0 [ 216.185942][T11368] __sys_recvmsg+0x16c/0x280 [ 216.186053][T11368] __x64_sys_recvmsg+0x46/0x50 [ 216.186083][T11368] x64_sys_call+0xb84/0x2d60 [ 216.186165][T11368] do_syscall_64+0xc9/0x1c0 [ 216.186193][T11368] ? clear_bhb_loop+0x55/0xb0 [ 216.186217][T11368] ? clear_bhb_loop+0x55/0xb0 [ 216.186239][T11368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.186357][T11368] RIP: 0033:0x7f5127869eb9 [ 216.186394][T11368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.186419][T11368] RSP: 002b:00007f51264e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 216.186443][T11368] RAX: ffffffffffffffda RBX: 00007f5127a05f80 RCX: 00007f5127869eb9 [ 216.186492][T11368] RDX: 0000000000000102 RSI: 0000000020000440 RDI: 0000000000000006 [ 216.186508][T11368] RBP: 00007f51264e1090 R08: 0000000000000000 R09: 0000000000000000 [ 216.186583][T11368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.250333][T11367] 9pnet_fd: Insufficient options for proto=fd [ 216.268173][T11368] R13: 0000000000000000 R14: 00007f5127a05f80 R15: 00007ffddb3c89f8 [ 216.268207][T11368] [ 216.392811][T11382] loop4: detected capacity change from 0 to 128 [ 216.418444][T11382] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 216.602919][T11392] loop0: detected capacity change from 0 to 512 [ 216.785979][T11400] loop4: detected capacity change from 0 to 512 [ 216.819063][T11400] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.013190][T11400] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2026: Directory hole found for htree leaf block 0 [ 217.298594][T11412] loop4: detected capacity change from 0 to 256 [ 217.307601][T11413] loop1: detected capacity change from 0 to 128 [ 217.319823][T11412] vfat: Unknown parameter 'nnonumtail' [ 217.320938][T11397] loop0: detected capacity change from 0 to 32768 [ 217.333475][T11413] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 217.335164][T11412] 9pnet_fd: Insufficient options for proto=fd [ 217.344787][T11415] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2030'. [ 217.370703][T11397] loop0: p1 p3 < > [ 217.412005][T11419] loop4: detected capacity change from 0 to 128 [ 217.427145][T11415] loop2: detected capacity change from 0 to 256 [ 217.427439][T11419] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 217.447727][T11419] FAULT_INJECTION: forcing a failure. [ 217.447727][T11419] name failslab, interval 1, probability 0, space 0, times 0 [ 217.460486][T11419] CPU: 1 UID: 0 PID: 11419 Comm: syz.4.2033 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 217.471266][T11419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.481408][T11419] Call Trace: [ 217.484692][T11419] [ 217.487684][T11419] dump_stack_lvl+0xf2/0x150 [ 217.492363][T11419] dump_stack+0x15/0x20 [ 217.496624][T11419] should_fail_ex+0x229/0x230 [ 217.501382][T11419] ? getname_flags+0x81/0x3b0 [ 217.506094][T11419] should_failslab+0x8f/0xb0 [ 217.510705][T11419] kmem_cache_alloc_noprof+0x4c/0x290 [ 217.516110][T11419] getname_flags+0x81/0x3b0 [ 217.520780][T11419] __x64_sys_renameat2+0x61/0xa0 [ 217.525749][T11419] x64_sys_call+0x2cf1/0x2d60 [ 217.530463][T11419] do_syscall_64+0xc9/0x1c0 [ 217.534988][T11419] ? clear_bhb_loop+0x55/0xb0 [ 217.539732][T11419] ? clear_bhb_loop+0x55/0xb0 [ 217.544496][T11419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.550454][T11419] RIP: 0033:0x7f5127869eb9 [ 217.554874][T11419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.574490][T11419] RSP: 002b:00007f51264e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 217.582920][T11419] RAX: ffffffffffffffda RBX: 00007f5127a05f80 RCX: 00007f5127869eb9 [ 217.590981][T11419] RDX: 0000000000000005 RSI: 0000000020000140 RDI: 0000000000000005 [ 217.598956][T11419] RBP: 00007f51264e1090 R08: 0000000000000000 R09: 0000000000000000 [ 217.606943][T11419] R10: 0000000020000980 R11: 0000000000000246 R12: 0000000000000001 [ 217.614930][T11419] R13: 0000000000000000 R14: 00007f5127a05f80 R15: 00007ffddb3c89f8 [ 217.622914][T11419] [ 217.711341][T11424] loop4: detected capacity change from 0 to 512 [ 217.743207][T11425] loop2: detected capacity change from 0 to 128 [ 217.751447][T11425] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 217.758961][T11424] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.764633][T11425] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 217.778806][T11425] FAT-fs (loop2): Filesystem has been set read-only [ 217.863601][T11441] loop2: detected capacity change from 0 to 128 [ 217.864964][T11424] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2038: Directory hole found for htree leaf block 0 [ 217.870627][T11441] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 217.903382][T11441] FAULT_INJECTION: forcing a failure. [ 217.903382][T11441] name failslab, interval 1, probability 0, space 0, times 0 [ 217.916138][T11441] CPU: 0 UID: 0 PID: 11441 Comm: syz.2.2041 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 217.926923][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.937020][T11441] Call Trace: [ 217.940314][T11441] [ 217.943319][T11441] dump_stack_lvl+0xf2/0x150 [ 217.944720][T11446] loop1: detected capacity change from 0 to 256 [ 217.947977][T11441] dump_stack+0x15/0x20 [ 217.948006][T11441] should_fail_ex+0x229/0x230 [ 217.948039][T11441] ? getname_flags+0x81/0x3b0 [ 217.955381][T11446] vfat: Unknown parameter 'nnonumtail' [ 217.958423][T11441] should_failslab+0x8f/0xb0 [ 217.965630][T11446] 9pnet_fd: Insufficient options for proto=fd [ 217.967775][T11441] kmem_cache_alloc_noprof+0x4c/0x290 [ 217.989421][T11441] getname_flags+0x81/0x3b0 [ 217.993994][T11441] __x64_sys_unlinkat+0x75/0xb0 [ 217.994028][T11441] x64_sys_call+0x25fd/0x2d60 [ 217.994058][T11441] do_syscall_64+0xc9/0x1c0 [ 218.008116][T11441] ? clear_bhb_loop+0x55/0xb0 [ 218.008184][T11441] ? clear_bhb_loop+0x55/0xb0 [ 218.008207][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.008243][T11441] RIP: 0033:0x7f24ab909eb9 [ 218.027869][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.027895][T11441] RSP: 002b:00007f24aa581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 218.027935][T11441] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab909eb9 [ 218.055688][T11450] loop3: detected capacity change from 0 to 1024 [ 218.055916][T11441] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000007 [ 218.078204][T11441] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 218.078269][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.078313][T11441] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 218.078340][T11441] [ 218.079256][T10329] EXT4-fs unmount: 44 callbacks suppressed [ 218.079273][T10329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.488988][T11465] loop2: detected capacity change from 0 to 128 [ 218.495962][T11465] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 218.518111][T11465] syz.2.2048: attempt to access beyond end of device [ 218.518111][T11465] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 218.533098][T11465] syz.2.2048: attempt to access beyond end of device [ 218.533098][T11465] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 218.788925][T11474] FAULT_INJECTION: forcing a failure. [ 218.788925][T11474] name failslab, interval 1, probability 0, space 0, times 0 [ 218.802901][T11474] CPU: 1 UID: 0 PID: 11474 Comm: syz.2.2051 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 218.813741][T11474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 218.823822][T11474] Call Trace: [ 218.827119][T11474] [ 218.830082][T11474] dump_stack_lvl+0xf2/0x150 [ 218.834847][T11474] dump_stack+0x15/0x20 [ 218.839031][T11474] should_fail_ex+0x229/0x230 [ 218.843731][T11474] ? kernfs_fop_write_iter+0xe7/0x2c0 [ 218.849132][T11474] should_failslab+0x8f/0xb0 [ 218.853874][T11474] __kmalloc_noprof+0xa5/0x370 [ 218.858673][T11474] kernfs_fop_write_iter+0xe7/0x2c0 [ 218.863889][T11474] vfs_write+0x78f/0x900 [ 218.868205][T11474] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 218.874031][T11474] ksys_write+0xeb/0x1b0 [ 218.878355][T11474] __x64_sys_write+0x42/0x50 [ 218.882957][T11474] x64_sys_call+0x27dd/0x2d60 [ 218.887685][T11474] do_syscall_64+0xc9/0x1c0 [ 218.892235][T11474] ? clear_bhb_loop+0x55/0xb0 [ 218.896916][T11474] ? clear_bhb_loop+0x55/0xb0 [ 218.901598][T11474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.907552][T11474] RIP: 0033:0x7f24ab909eb9 [ 218.911969][T11474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.931635][T11474] RSP: 002b:00007f24aa581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.940070][T11474] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab909eb9 [ 218.948052][T11474] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 000000000000000c [ 218.956085][T11474] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 218.964161][T11474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.972196][T11474] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 218.980177][T11474] [ 219.026124][T10206] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.051378][T11477] loop4: detected capacity change from 0 to 512 [ 219.073344][T11477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.097372][T11477] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.110388][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 219.110406][ T29] audit: type=1326 audit(1725158586.331:21580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab909eb9 code=0x7ffc0000 [ 219.143729][ T29] audit: type=1326 audit(1725158586.341:21581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5127869eb9 code=0x7ffc0000 [ 219.161858][T11488] loop1: detected capacity change from 0 to 256 [ 219.167519][ T29] audit: type=1326 audit(1725158586.341:21582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5127869eb9 code=0x7ffc0000 [ 219.167550][ T29] audit: type=1326 audit(1725158586.341:21583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11476 comm="syz.4.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f5127869eb9 code=0x7ffc0000 [ 219.175987][T11488] vfat: Unknown parameter 'nnonumtail' [ 219.197914][ T29] audit: type=1326 audit(1725158586.341:21584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f24ab909eb9 code=0x7ffc0000 [ 219.198003][ T29] audit: type=1326 audit(1725158586.341:21585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab909eb9 code=0x7ffc0000 [ 219.198037][ T29] audit: type=1326 audit(1725158586.341:21586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab909eb9 code=0x7ffc0000 [ 219.198070][ T29] audit: type=1326 audit(1725158586.341:21587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f24ab909eb9 code=0x7ffc0000 [ 219.232942][T11477] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2054: Directory hole found for htree leaf block 0 [ 219.251073][ T29] audit: type=1326 audit(1725158586.341:21588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab909eb9 code=0x7ffc0000 [ 219.303522][T11488] 9pnet_fd: Insufficient options for proto=fd [ 219.322029][ T29] audit: type=1326 audit(1725158586.341:21589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f24ab909eb9 code=0x7ffc0000 [ 219.400598][T10329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.454949][T11498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11498 comm=syz.4.2060 [ 219.472204][T11501] FAULT_INJECTION: forcing a failure. [ 219.472204][T11501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.485515][T11501] CPU: 0 UID: 0 PID: 11501 Comm: syz.2.2062 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 219.496408][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 219.506505][T11501] Call Trace: [ 219.509853][T11501] [ 219.512809][T11501] dump_stack_lvl+0xf2/0x150 [ 219.517497][T11501] dump_stack+0x15/0x20 [ 219.521675][T11501] should_fail_ex+0x229/0x230 [ 219.526353][T11501] should_fail+0xb/0x10 [ 219.530570][T11501] should_fail_usercopy+0x1a/0x20 [ 219.535620][T11501] _copy_from_user+0x1e/0xd0 [ 219.540226][T11501] __sys_bpf+0x14e/0x7a0 [ 219.544509][T11501] __x64_sys_bpf+0x43/0x50 [ 219.548972][T11501] x64_sys_call+0x2625/0x2d60 [ 219.553709][T11501] do_syscall_64+0xc9/0x1c0 [ 219.558235][T11501] ? clear_bhb_loop+0x55/0xb0 [ 219.562956][T11501] ? clear_bhb_loop+0x55/0xb0 [ 219.567631][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.573665][T11501] RIP: 0033:0x7f24ab909eb9 [ 219.578084][T11501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.597699][T11501] RSP: 002b:00007f24aa581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.606213][T11501] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab909eb9 [ 219.614248][T11501] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000003 [ 219.622213][T11501] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 219.630230][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.638196][T11501] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 219.646195][T11501] [ 219.654956][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2063'. [ 219.683979][T11504] loop4: detected capacity change from 0 to 512 [ 219.695486][T11504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 219.719781][T11504] EXT4-fs (loop4): 1 truncate cleaned up [ 219.726869][T11504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.771010][T10329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.792710][T11522] loop2: detected capacity change from 0 to 512 [ 219.800797][T11517] loop3: detected capacity change from 0 to 2048 [ 219.820363][T11522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.831623][T11517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.834174][T11522] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.847373][T11527] loop4: detected capacity change from 0 to 256 [ 219.862590][T11527] vfat: Unknown parameter 'nnonumtail' [ 219.871489][T11527] 9pnet_fd: Insufficient options for proto=fd [ 219.898382][T10206] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.916284][T11522] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.2070: Directory hole found for htree leaf block 0 [ 219.947487][ T6758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.950074][T11543] FAULT_INJECTION: forcing a failure. [ 219.950074][T11543] name failslab, interval 1, probability 0, space 0, times 0 [ 219.969249][T11543] CPU: 0 UID: 0 PID: 11543 Comm: syz.4.2074 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 219.969280][T11543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 219.969357][T11543] Call Trace: [ 219.969365][T11543] [ 219.969373][T11543] dump_stack_lvl+0xf2/0x150 [ 219.969401][T11543] dump_stack+0x15/0x20 [ 219.969422][T11543] should_fail_ex+0x229/0x230 [ 220.009892][T11543] ? getname_flags+0x81/0x3b0 [ 220.009954][T11543] should_failslab+0x8f/0xb0 [ 220.010016][T11543] kmem_cache_alloc_noprof+0x4c/0x290 [ 220.010047][T11543] getname_flags+0x81/0x3b0 [ 220.010083][T11543] user_path_at+0x26/0x110 [ 220.010179][T11543] __se_sys_inotify_add_watch+0x116/0x800 [ 220.010204][T11543] ? fput+0x13b/0x180 [ 220.010224][T11543] ? ksys_write+0x178/0x1b0 [ 220.010276][T11543] __x64_sys_inotify_add_watch+0x43/0x50 [ 220.010300][T11543] x64_sys_call+0x2acb/0x2d60 [ 220.010332][T11543] do_syscall_64+0xc9/0x1c0 [ 220.010356][T11543] ? clear_bhb_loop+0x55/0xb0 [ 220.010376][T11543] ? clear_bhb_loop+0x55/0xb0 [ 220.010396][T11543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.010433][T11543] RIP: 0033:0x7f5127869eb9 [ 220.010501][T11543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.010537][T11543] RSP: 002b:00007f51264e1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 220.010557][T11543] RAX: ffffffffffffffda RBX: 00007f5127a05f80 RCX: 00007f5127869eb9 [ 220.010571][T11543] RDX: 00000000000008c7 RSI: 0000000020000240 RDI: 0000000000000006 [ 220.010584][T11543] RBP: 00007f51264e1090 R08: 0000000000000000 R09: 0000000000000000 [ 220.010597][T11543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.010610][T11543] R13: 0000000000000000 R14: 00007f5127a05f80 R15: 00007ffddb3c89f8 [ 220.010711][T11543] [ 220.023717][T11515] loop1: detected capacity change from 0 to 1024 [ 220.182994][T11515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.201765][T11552] loop4: detected capacity change from 0 to 512 [ 220.754141][T11570] loop0: detected capacity change from 0 to 256 [ 220.797473][T11570] vfat: Unknown parameter 'nnonumtail' [ 220.817296][T11570] 9pnet_fd: Insufficient options for proto=fd [ 220.826567][T11572] FAULT_INJECTION: forcing a failure. [ 220.826567][T11572] name failslab, interval 1, probability 0, space 0, times 0 [ 220.839374][T11572] CPU: 1 UID: 0 PID: 11572 Comm: syz.3.2083 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 220.850198][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 220.860272][T11572] Call Trace: [ 220.863565][T11572] [ 220.866536][T11572] dump_stack_lvl+0xf2/0x150 [ 220.871152][T11572] dump_stack+0x15/0x20 [ 220.875382][T11572] should_fail_ex+0x229/0x230 [ 220.880120][T11572] ? kernfs_fop_write_iter+0xe7/0x2c0 [ 220.885542][T11572] should_failslab+0x8f/0xb0 [ 220.890163][T11572] __kmalloc_noprof+0xa5/0x370 [ 220.894949][T11572] kernfs_fop_write_iter+0xe7/0x2c0 [ 220.900193][T11572] vfs_write+0x78f/0x900 [ 220.904510][T11572] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 220.910405][T11572] ksys_write+0xeb/0x1b0 [ 220.914677][T11572] __x64_sys_write+0x42/0x50 [ 220.919294][T11572] x64_sys_call+0x27dd/0x2d60 [ 220.924082][T11572] do_syscall_64+0xc9/0x1c0 [ 220.928605][T11572] ? clear_bhb_loop+0x55/0xb0 [ 220.933293][T11572] ? clear_bhb_loop+0x55/0xb0 [ 220.938006][T11572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.943958][T11572] RIP: 0033:0x7fe13a169eb9 [ 220.948384][T11572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.968084][T11572] RSP: 002b:00007fe138de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.976612][T11572] RAX: ffffffffffffffda RBX: 00007fe13a305f80 RCX: 00007fe13a169eb9 [ 220.984589][T11572] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 0000000000000004 [ 220.992564][T11572] RBP: 00007fe138de7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.000543][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.008578][T11572] R13: 0000000000000000 R14: 00007fe13a305f80 R15: 00007ffc2600e128 [ 221.016566][T11572] [ 221.066509][T11559] loop4: detected capacity change from 0 to 32768 [ 221.137402][T11559] loop4: p1 p3 < > [ 221.242933][T11578] loop3: detected capacity change from 0 to 512 [ 221.271526][T11578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.286502][T11578] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.365287][T11578] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2085: Directory hole found for htree leaf block 0 [ 221.441954][T10206] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.816188][T11595] syzkaller1: entered promiscuous mode [ 221.821839][T11595] syzkaller1: entered allmulticast mode [ 221.868424][T11599] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 2, id = 0 [ 221.878456][T11595] IPVS: stopping master sync thread 11599 ... [ 222.180221][T11608] loop3: detected capacity change from 0 to 256 [ 222.187900][T11608] vfat: Unknown parameter 'nnonumtail' [ 222.204962][T11608] 9pnet_fd: Insufficient options for proto=fd [ 222.262246][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 222.350607][T10900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.601527][T11628] loop1: detected capacity change from 0 to 512 [ 222.653009][T11630] FAULT_INJECTION: forcing a failure. [ 222.653009][T11630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.666327][T11630] CPU: 1 UID: 0 PID: 11630 Comm: syz.2.2101 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 222.677173][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 222.687302][T11630] Call Trace: [ 222.690613][T11630] [ 222.693563][T11630] dump_stack_lvl+0xf2/0x150 [ 222.698286][T11630] dump_stack+0x15/0x20 [ 222.702464][T11630] should_fail_ex+0x229/0x230 [ 222.707238][T11630] should_fail+0xb/0x10 [ 222.711416][T11630] should_fail_usercopy+0x1a/0x20 [ 222.716501][T11630] _copy_from_iter+0xd3/0xb00 [ 222.721205][T11630] ? kmalloc_reserve+0x16e/0x190 [ 222.726172][T11630] ? __build_skb_around+0x196/0x1f0 [ 222.731417][T11630] ? __alloc_skb+0x21f/0x310 [ 222.736030][T11630] ? __virt_addr_valid+0x1ed/0x250 [ 222.741161][T11630] ? __check_object_size+0x35b/0x510 [ 222.746528][T11630] netlink_sendmsg+0x460/0x6e0 [ 222.751338][T11630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.756661][T11630] __sock_sendmsg+0x140/0x180 [ 222.761403][T11630] ____sys_sendmsg+0x312/0x410 [ 222.766265][T11630] __sys_sendmmsg+0x269/0x500 [ 222.771033][T11630] __x64_sys_sendmmsg+0x57/0x70 [ 222.775923][T11630] x64_sys_call+0xa49/0x2d60 [ 222.780584][T11630] do_syscall_64+0xc9/0x1c0 [ 222.785147][T11630] ? clear_bhb_loop+0x55/0xb0 [ 222.789847][T11630] ? clear_bhb_loop+0x55/0xb0 [ 222.794562][T11630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.800512][T11630] RIP: 0033:0x7f24ab909eb9 [ 222.805083][T11630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.824714][T11630] RSP: 002b:00007f24aa581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 222.833155][T11630] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab909eb9 [ 222.841160][T11630] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 222.849244][T11630] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 222.857260][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.865286][T11630] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 222.873293][T11630] [ 222.925229][T11628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.965720][T11628] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.020001][T11637] loop3: detected capacity change from 0 to 512 [ 223.038548][T11628] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.2100: Directory hole found for htree leaf block 0 [ 223.057904][T11637] ext4: Bad value for 'init_itable' [ 223.063426][T11641] loop2: detected capacity change from 0 to 1024 [ 223.078381][T11637] random: crng reseeded on system resumption [ 223.087970][T11641] EXT4-fs: test_dummy_encryption option not supported [ 223.161405][T10900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.231729][T11647] loop1: detected capacity change from 0 to 256 [ 223.248563][T11647] vfat: Unknown parameter 'nnonumtail' [ 223.267812][T11647] 9pnet_fd: Insufficient options for proto=fd [ 223.387710][T11661] loop3: detected capacity change from 0 to 1024 [ 223.394646][T11661] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 223.407085][T11661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.429871][T11670] loop1: detected capacity change from 0 to 512 [ 223.449797][T11661] syzkaller0: entered promiscuous mode [ 223.455440][T11661] syzkaller0: entered allmulticast mode [ 223.467085][T11670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.486093][T11670] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.526578][T11679] loop0: detected capacity change from 0 to 512 [ 223.567033][T11670] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.2117: Directory hole found for htree leaf block 0 [ 223.631488][T10900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.664462][T11689] loop1: detected capacity change from 0 to 256 [ 223.676488][T11689] vfat: Unknown parameter 'nnonumtail' [ 223.696507][T11658] loop4: detected capacity change from 0 to 1024 [ 223.703887][T11689] 9pnet_fd: Insufficient options for proto=fd [ 223.722121][T11658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.148303][T11700] FAULT_INJECTION: forcing a failure. [ 224.148303][T11700] name failslab, interval 1, probability 0, space 0, times 0 [ 224.161064][T11700] CPU: 1 UID: 0 PID: 11700 Comm: syz.1.2123 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 224.171925][T11700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 224.181990][T11700] Call Trace: [ 224.185344][T11700] [ 224.188286][T11700] dump_stack_lvl+0xf2/0x150 [ 224.193035][T11700] dump_stack+0x15/0x20 [ 224.197229][T11700] should_fail_ex+0x229/0x230 [ 224.201936][T11700] ? alloc_empty_file+0xd0/0x310 [ 224.206897][T11700] should_failslab+0x8f/0xb0 [ 224.211567][T11700] kmem_cache_alloc_noprof+0x4c/0x290 [ 224.217046][T11700] alloc_empty_file+0xd0/0x310 [ 224.221833][T11700] alloc_file_pseudo+0xc3/0x140 [ 224.226784][T11700] anon_inode_getfd+0xc2/0x180 [ 224.231583][T11700] bpf_map_new_fd+0x5c/0x70 [ 224.236135][T11700] map_create+0xb5d/0xb90 [ 224.240481][T11700] __sys_bpf+0x667/0x7a0 [ 224.244812][T11700] __x64_sys_bpf+0x43/0x50 [ 224.249248][T11700] x64_sys_call+0x2625/0x2d60 [ 224.254089][T11700] do_syscall_64+0xc9/0x1c0 [ 224.258636][T11700] ? clear_bhb_loop+0x55/0xb0 [ 224.263319][T11700] ? clear_bhb_loop+0x55/0xb0 [ 224.268002][T11700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.273962][T11700] RIP: 0033:0x7f6913489eb9 [ 224.278393][T11700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.298110][T11700] RSP: 002b:00007f6912107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.306545][T11700] RAX: ffffffffffffffda RBX: 00007f6913625f80 RCX: 00007f6913489eb9 [ 224.314561][T11700] RDX: 0000000000000048 RSI: 00000000200009c0 RDI: 0000000000000000 [ 224.322622][T11700] RBP: 00007f6912107090 R08: 0000000000000000 R09: 0000000000000000 [ 224.330627][T11700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.338682][T11700] R13: 0000000000000000 R14: 00007f6913625f80 R15: 00007ffef5d68018 [ 224.346689][T11700] [ 224.548952][T11702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2124'. [ 224.607940][T11686] loop0: detected capacity change from 0 to 32768 [ 224.666542][T11686] loop0: p1 p3 < > [ 224.667039][T10206] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.717466][T11713] loop1: detected capacity change from 0 to 128 [ 224.720769][T11709] loop2: detected capacity change from 0 to 4096 [ 224.739042][T11715] loop3: detected capacity change from 0 to 128 [ 224.762292][T11709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.765431][ T29] kauditd_printk_skb: 552 callbacks suppressed [ 224.765443][ T29] audit: type=1326 audit(1725158591.991:22142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.4.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f512786899f code=0x7ffc0000 [ 224.779021][T11715] 9pnet_fd: Insufficient options for proto=fd [ 224.818206][ T29] audit: type=1400 audit(1725158592.041:22143): avc: denied { bind } for pid=11712 comm="syz.1.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 224.839302][ T29] audit: type=1400 audit(1725158592.041:22144): avc: denied { listen } for pid=11712 comm="syz.1.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 224.859099][ T29] audit: type=1326 audit(1725158592.041:22145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6913489eb9 code=0x7ffc0000 [ 224.859184][ T29] audit: type=1326 audit(1725158592.041:22146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f6913489eb9 code=0x7ffc0000 [ 224.859212][ T29] audit: type=1326 audit(1725158592.041:22147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6913489eb9 code=0x7ffc0000 [ 224.859267][ T29] audit: type=1326 audit(1725158592.041:22148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6913489eb9 code=0x7ffc0000 [ 224.859375][ T29] audit: type=1326 audit(1725158592.041:22149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6913489eb9 code=0x7ffc0000 [ 224.859408][ T29] audit: type=1326 audit(1725158592.041:22150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6913489eb9 code=0x7ffc0000 [ 224.859444][ T29] audit: type=1326 audit(1725158592.041:22151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11712 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6913489eb9 code=0x7ffc0000 [ 225.044265][T11721] loop3: detected capacity change from 0 to 512 [ 225.093829][ T6758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.125020][T11721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.145744][T11721] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.219582][T11730] loop2: detected capacity change from 0 to 256 [ 225.226363][T11730] vfat: Unknown parameter 'nnonumtail' [ 225.237323][T11730] 9pnet_fd: Insufficient options for proto=fd [ 225.286354][T11721] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2131: Directory hole found for htree leaf block 0 [ 225.309328][T11740] FAULT_INJECTION: forcing a failure. [ 225.309328][T11740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.322557][T11740] CPU: 1 UID: 0 PID: 11740 Comm: syz.2.2137 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 225.333466][T11740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 225.333485][T11740] Call Trace: [ 225.346828][T11740] [ 225.349799][T11740] dump_stack_lvl+0xf2/0x150 [ 225.354407][T11740] dump_stack+0x15/0x20 [ 225.358576][T11740] should_fail_ex+0x229/0x230 [ 225.363308][T11740] should_fail+0xb/0x10 [ 225.367517][T11740] should_fail_usercopy+0x1a/0x20 [ 225.372644][T11740] _copy_from_user+0x1e/0xd0 [ 225.377278][T11740] __sys_bpf+0x14e/0x7a0 [ 225.381579][T11740] __x64_sys_bpf+0x43/0x50 [ 225.386014][T11740] x64_sys_call+0x2625/0x2d60 [ 225.390753][T11740] do_syscall_64+0xc9/0x1c0 [ 225.395265][T11740] ? clear_bhb_loop+0x55/0xb0 [ 225.399983][T11740] ? clear_bhb_loop+0x55/0xb0 [ 225.404663][T11740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.410713][T11740] RIP: 0033:0x7f24ab909eb9 [ 225.415141][T11740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.434777][T11740] RSP: 002b:00007f24aa581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.443254][T11740] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab909eb9 [ 225.451236][T11740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000015 [ 225.459229][T11740] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 225.467200][T11740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.475321][T11740] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 225.483315][T11740] [ 225.497013][T10206] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.567716][T11753] loop2: detected capacity change from 0 to 256 [ 225.574417][T11753] vfat: Unknown parameter 'kmem_cache_free' [ 225.603648][T10329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.686482][T11761] FAULT_INJECTION: forcing a failure. [ 225.686482][T11761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.699717][T11761] CPU: 1 UID: 0 PID: 11761 Comm: syz.4.2144 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 225.710608][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 225.720785][T11761] Call Trace: [ 225.724088][T11761] [ 225.727027][T11761] dump_stack_lvl+0xf2/0x150 [ 225.731652][T11761] dump_stack+0x15/0x20 [ 225.735827][T11761] should_fail_ex+0x229/0x230 [ 225.740520][T11761] should_fail+0xb/0x10 [ 225.744685][T11761] should_fail_usercopy+0x1a/0x20 [ 225.749771][T11761] _copy_from_user+0x1e/0xd0 [ 225.754372][T11761] __sys_bpf+0x14e/0x7a0 [ 225.758638][T11761] __x64_sys_bpf+0x43/0x50 [ 225.763186][T11761] x64_sys_call+0x2625/0x2d60 [ 225.767873][T11761] do_syscall_64+0xc9/0x1c0 [ 225.772445][T11761] ? clear_bhb_loop+0x55/0xb0 [ 225.777227][T11761] ? clear_bhb_loop+0x55/0xb0 [ 225.781926][T11761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.787841][T11761] RIP: 0033:0x7f5127869eb9 [ 225.792261][T11761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.812065][T11761] RSP: 002b:00007f51264e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.820487][T11761] RAX: ffffffffffffffda RBX: 00007f5127a05f80 RCX: 00007f5127869eb9 [ 225.828567][T11761] RDX: 0000000000000042 RSI: 0000000020000080 RDI: 0000000000000005 [ 225.836562][T11761] RBP: 00007f51264e1090 R08: 0000000000000000 R09: 0000000000000000 [ 225.844574][T11761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.852611][T11761] R13: 0000000000000000 R14: 00007f5127a05f80 R15: 00007ffddb3c89f8 [ 225.860663][T11761] [ 225.938480][T11767] loop3: detected capacity change from 0 to 256 [ 225.946449][T11767] vfat: Unknown parameter 'nnonumtail' [ 225.962349][T11767] 9pnet_fd: Insufficient options for proto=fd [ 226.007337][T11772] loop2: detected capacity change from 0 to 512 [ 226.035949][T11772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.048933][T11772] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.092676][T11781] FAULT_INJECTION: forcing a failure. [ 226.092676][T11781] name failslab, interval 1, probability 0, space 0, times 0 [ 226.105416][T11781] CPU: 1 UID: 0 PID: 11781 Comm: syz.3.2152 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 226.116263][T11781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 226.126647][T11781] Call Trace: [ 226.129940][T11781] [ 226.132894][T11781] dump_stack_lvl+0xf2/0x150 [ 226.137563][T11781] dump_stack+0x15/0x20 [ 226.141726][T11781] should_fail_ex+0x229/0x230 [ 226.146491][T11781] ? getname_flags+0x81/0x3b0 [ 226.151260][T11781] should_failslab+0x8f/0xb0 [ 226.155881][T11781] kmem_cache_alloc_noprof+0x4c/0x290 [ 226.161264][T11781] ? fput+0x13b/0x180 [ 226.165251][T11781] getname_flags+0x81/0x3b0 [ 226.169816][T11781] getname+0x17/0x20 [ 226.173739][T11781] __x64_sys_execve+0x40/0x70 [ 226.178429][T11781] x64_sys_call+0x1277/0x2d60 [ 226.183165][T11781] do_syscall_64+0xc9/0x1c0 [ 226.187753][T11781] ? clear_bhb_loop+0x55/0xb0 [ 226.192441][T11781] ? clear_bhb_loop+0x55/0xb0 [ 226.197134][T11781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.203046][T11781] RIP: 0033:0x7fe13a169eb9 [ 226.207461][T11781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.227113][T11781] RSP: 002b:00007fe138de7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 226.235530][T11781] RAX: ffffffffffffffda RBX: 00007fe13a305f80 RCX: 00007fe13a169eb9 [ 226.243507][T11781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000800 [ 226.251564][T11781] RBP: 00007fe138de7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.259570][T11781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.267555][T11781] R13: 0000000000000000 R14: 00007fe13a305f80 R15: 00007ffc2600e128 [ 226.275610][T11781] [ 226.291643][T11772] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.2149: Directory hole found for htree leaf block 0 [ 226.307342][T11785] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 226.320952][ T6758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.404693][T11791] loop1: detected capacity change from 0 to 256 [ 226.412748][T11791] vfat: Unknown parameter 'ÿ' [ 226.447253][T11796] loop1: detected capacity change from 0 to 256 [ 226.454013][T11796] vfat: Unknown parameter 'ÿ' [ 226.460195][T11796] FAULT_INJECTION: forcing a failure. [ 226.460195][T11796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.473560][T11796] CPU: 1 UID: 0 PID: 11796 Comm: syz.1.2158 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 226.484430][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 226.494495][T11796] Call Trace: [ 226.497770][T11796] [ 226.500698][T11796] dump_stack_lvl+0xf2/0x150 [ 226.505363][T11796] dump_stack+0x15/0x20 [ 226.509631][T11796] should_fail_ex+0x229/0x230 [ 226.514394][T11796] should_fail+0xb/0x10 [ 226.518564][T11796] should_fail_usercopy+0x1a/0x20 [ 226.523609][T11796] _copy_to_user+0x1e/0xa0 [ 226.528068][T11796] simple_read_from_buffer+0xa0/0x110 [ 226.533461][T11796] proc_fail_nth_read+0xff/0x140 [ 226.538473][T11796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.544040][T11796] vfs_read+0x1a2/0x6e0 [ 226.548208][T11796] ? do_sock_getsockopt+0x121/0x1a0 [ 226.553458][T11796] ? __pfx_pppol2tp_getsockopt+0x10/0x10 [ 226.559186][T11796] ksys_read+0xeb/0x1b0 [ 226.563432][T11796] __x64_sys_read+0x42/0x50 [ 226.568031][T11796] x64_sys_call+0x27d3/0x2d60 [ 226.572784][T11796] do_syscall_64+0xc9/0x1c0 [ 226.577307][T11796] ? clear_bhb_loop+0x55/0xb0 [ 226.581985][T11796] ? clear_bhb_loop+0x55/0xb0 [ 226.586778][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.592749][T11796] RIP: 0033:0x7f69134888fc [ 226.597178][T11796] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 226.616844][T11796] RSP: 002b:00007f6912107030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.625332][T11796] RAX: ffffffffffffffda RBX: 00007f6913625f80 RCX: 00007f69134888fc [ 226.633468][T11796] RDX: 000000000000000f RSI: 00007f69121070a0 RDI: 0000000000000005 [ 226.641451][T11796] RBP: 00007f6912107090 R08: 0000000000000000 R09: 0000000000000000 [ 226.649605][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.657586][T11796] R13: 0000000000000000 R14: 00007f6913625f80 R15: 00007ffef5d68018 [ 226.665573][T11796] [ 226.716206][T11803] loop3: detected capacity change from 0 to 256 [ 226.724539][T11803] vfat: Unknown parameter 'nnonumtail' [ 226.734238][T11803] 9pnet_fd: Insufficient options for proto=fd [ 226.776642][T11794] loop2: detected capacity change from 0 to 1024 [ 226.785056][T11812] loop3: detected capacity change from 0 to 512 [ 226.794013][T11794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.813824][T11812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.826636][T11812] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.905174][T11819] FAULT_INJECTION: forcing a failure. [ 226.905174][T11819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.918482][T11819] CPU: 0 UID: 0 PID: 11819 Comm: syz.0.2166 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 226.929460][T11819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 226.939533][T11819] Call Trace: [ 226.942834][T11819] [ 226.945783][T11819] dump_stack_lvl+0xf2/0x150 [ 226.950454][T11819] dump_stack+0x15/0x20 [ 226.954632][T11819] should_fail_ex+0x229/0x230 [ 226.959331][T11819] should_fail+0xb/0x10 [ 226.963516][T11819] should_fail_usercopy+0x1a/0x20 [ 226.968599][T11819] _copy_to_user+0x1e/0xa0 [ 226.973072][T11819] simple_read_from_buffer+0xa0/0x110 [ 226.978462][T11819] proc_fail_nth_read+0xff/0x140 [ 226.983519][T11819] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.985631][T11812] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2164: Directory hole found for htree leaf block 0 [ 226.989067][T11819] vfs_read+0x1a2/0x6e0 [ 226.989100][T11819] ? __rcu_read_unlock+0x4e/0x70 [ 227.011101][T11819] ? __fget_files+0x1da/0x210 [ 227.015848][T11819] ksys_read+0xeb/0x1b0 [ 227.020034][T11819] __x64_sys_read+0x42/0x50 [ 227.024622][T11819] x64_sys_call+0x27d3/0x2d60 [ 227.029330][T11819] do_syscall_64+0xc9/0x1c0 [ 227.033859][T11819] ? clear_bhb_loop+0x55/0xb0 [ 227.038586][T11819] ? clear_bhb_loop+0x55/0xb0 [ 227.043305][T11819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.049273][T11819] RIP: 0033:0x7f62b31a88fc [ 227.054311][T11819] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 227.073980][T11819] RSP: 002b:00007f62b1e27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.082416][T11819] RAX: ffffffffffffffda RBX: 00007f62b3345f80 RCX: 00007f62b31a88fc [ 227.090426][T11819] RDX: 000000000000000f RSI: 00007f62b1e270a0 RDI: 000000000000000b [ 227.094473][T11824] loop4: detected capacity change from 0 to 2048 [ 227.098431][T11819] RBP: 00007f62b1e27090 R08: 0000000000000000 R09: 0000000000000000 [ 227.098449][T11819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.098465][T11819] R13: 0000000000000000 R14: 00007f62b3345f80 R15: 00007ffff03eb288 [ 227.115441][T11824] EXT4-fs: test_dummy_encryption option not supported [ 227.120795][T11819] [ 227.147901][T10206] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.177321][T11828] loop4: detected capacity change from 0 to 512 [ 227.202449][T11829] 9pnet: Could not find request transport: 0xffffffffffffffff [ 227.209331][T11831] loop0: detected capacity change from 0 to 2048 [ 227.244433][T11831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.315467][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2172'. [ 227.332499][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.372334][T11831] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 227.428821][T11842] bridge_slave_0 (unregistering): left allmulticast mode [ 227.436268][T11842] bridge_slave_0 (unregistering): left promiscuous mode [ 227.443291][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.460130][T11831] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 227.472582][T11831] EXT4-fs (loop0): This should not happen!! Data will be lost [ 227.472582][T11831] [ 227.482383][T11831] EXT4-fs (loop0): Total free blocks count 0 [ 227.488413][T11831] EXT4-fs (loop0): Free/Dirty block details [ 227.494478][T11831] EXT4-fs (loop0): free_blocks=2415919104 [ 227.500408][T11831] EXT4-fs (loop0): dirty_blocks=48 [ 227.505605][T11831] EXT4-fs (loop0): Block reservation details [ 227.511716][T11831] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 227.563639][T11830] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 227.727787][T11852] loop0: detected capacity change from 0 to 2048 [ 227.747804][T11852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.791910][T11857] loop1: detected capacity change from 0 to 256 [ 227.798558][T11857] vfat: Unknown parameter 'nnonumtail' [ 227.806746][T11857] 9pnet_fd: Insufficient options for proto=fd [ 227.853951][T11860] loop1: detected capacity change from 0 to 2048 [ 227.882298][T11859] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 227.898754][ T6758] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.908408][T11860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.920842][T11859] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 227.933188][T11859] EXT4-fs (loop0): This should not happen!! Data will be lost [ 227.933188][T11859] [ 227.942913][T11859] EXT4-fs (loop0): Total free blocks count 0 [ 227.949139][T11859] EXT4-fs (loop0): Free/Dirty block details [ 227.955091][T11859] EXT4-fs (loop0): free_blocks=2415919104 [ 227.960928][T11859] EXT4-fs (loop0): dirty_blocks=48 [ 227.966115][T11859] EXT4-fs (loop0): Block reservation details [ 227.972161][T11859] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 227.980856][T11851] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 228.121185][T11866] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 228.175395][T11866] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 228.180994][T11845] loop4: detected capacity change from 0 to 32768 [ 228.187718][T11866] EXT4-fs (loop1): This should not happen!! Data will be lost [ 228.187718][T11866] [ 228.203894][T11866] EXT4-fs (loop1): Total free blocks count 0 [ 228.209977][T11866] EXT4-fs (loop1): Free/Dirty block details [ 228.215964][T11866] EXT4-fs (loop1): free_blocks=2415919104 [ 228.221938][T11866] EXT4-fs (loop1): dirty_blocks=48 [ 228.222065][T11872] FAULT_INJECTION: forcing a failure. [ 228.222065][T11872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.227083][T11866] EXT4-fs (loop1): Block reservation details [ 228.227098][T11866] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 228.231102][T11870] loop3: detected capacity change from 0 to 512 [ 228.240185][T11872] CPU: 1 UID: 0 PID: 11872 Comm: syz.2.2181 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 228.269070][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 228.279151][T11872] Call Trace: [ 228.282441][T11872] [ 228.285377][T11872] dump_stack_lvl+0xf2/0x150 [ 228.289986][T11872] dump_stack+0x15/0x20 [ 228.294159][T11872] should_fail_ex+0x229/0x230 [ 228.298871][T11872] should_fail+0xb/0x10 [ 228.303125][T11872] should_fail_usercopy+0x1a/0x20 [ 228.308231][T11872] _copy_to_user+0x1e/0xa0 [ 228.312668][T11872] simple_read_from_buffer+0xa0/0x110 [ 228.318048][T11872] proc_fail_nth_read+0xff/0x140 [ 228.322991][T11872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.328541][T11872] vfs_read+0x1a2/0x6e0 [ 228.332716][T11872] ? __rcu_read_unlock+0x4e/0x70 [ 228.337686][T11872] ? __fget_files+0x1da/0x210 [ 228.342393][T11872] ksys_read+0xeb/0x1b0 [ 228.346632][T11872] __x64_sys_read+0x42/0x50 [ 228.351154][T11872] x64_sys_call+0x27d3/0x2d60 [ 228.355851][T11872] do_syscall_64+0xc9/0x1c0 [ 228.360530][T11872] ? clear_bhb_loop+0x55/0xb0 [ 228.365282][T11872] ? clear_bhb_loop+0x55/0xb0 [ 228.369972][T11872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.375886][T11872] RIP: 0033:0x7f24ab9088fc [ 228.380412][T11872] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 228.400066][T11872] RSP: 002b:00007f24aa581030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.408484][T11872] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab9088fc [ 228.416484][T11872] RDX: 000000000000000f RSI: 00007f24aa5810a0 RDI: 0000000000000006 [ 228.424479][T11872] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 228.432474][T11872] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 228.440621][T11872] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 228.448605][T11872] [ 228.460749][T11858] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 228.527144][T11845] loop4: p1 p3 < > [ 228.567049][T11870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.587714][T11870] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.659304][T11886] loop2: detected capacity change from 0 to 256 [ 228.667757][T11886] vfat: Unknown parameter 'nnonumtail' [ 228.679404][T11886] 9pnet_fd: Insufficient options for proto=fd [ 228.735599][T11890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2187'. [ 228.759854][T11891] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2180: Directory hole found for htree leaf block 0 [ 228.804513][T10206] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.806245][T11895] 9pnet_fd: Insufficient options for proto=fd [ 228.837858][T11895] netlink: 'syz.2.2187': attribute type 29 has an invalid length. [ 228.848236][T11895] netlink: 'syz.2.2187': attribute type 29 has an invalid length. [ 228.986452][T11910] netlink: 'syz.1.2191': attribute type 29 has an invalid length. [ 228.995172][T11910] netlink: 'syz.1.2191': attribute type 29 has an invalid length. [ 229.005373][T11910] FAULT_INJECTION: forcing a failure. [ 229.005373][T11910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.018546][T11910] CPU: 1 UID: 0 PID: 11910 Comm: syz.1.2191 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 229.018580][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 229.018596][T11910] Call Trace: [ 229.018605][T11910] [ 229.018613][T11910] dump_stack_lvl+0xf2/0x150 [ 229.018643][T11910] dump_stack+0x15/0x20 [ 229.054411][T11910] should_fail_ex+0x229/0x230 [ 229.054451][T11910] should_fail+0xb/0x10 [ 229.054474][T11910] should_fail_usercopy+0x1a/0x20 [ 229.054504][T11910] _copy_from_iter+0xd3/0xb00 [ 229.073131][T11910] ? do_dentry_open+0x734/0xa50 [ 229.073180][T11910] ? __rcu_read_unlock+0x4e/0x70 [ 229.082981][T11910] ? mntput_no_expire+0x70/0x3c0 [ 229.087965][T11910] copy_page_from_iter+0x14f/0x280 [ 229.088002][T11910] tun_get_user+0x689/0x24b0 [ 229.097821][T11910] ? kstrtoull+0x110/0x140 [ 229.102287][T11910] ? common_interrupt+0x13/0x90 [ 229.102324][T11910] ? ref_tracker_alloc+0x1f5/0x2f0 [ 229.112312][T11910] tun_chr_write_iter+0x18e/0x240 [ 229.117403][T11910] vfs_write+0x78f/0x900 [ 229.117439][T11910] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 229.127279][T11910] ksys_write+0xeb/0x1b0 [ 229.131566][T11910] __x64_sys_write+0x42/0x50 [ 229.136220][T11910] x64_sys_call+0x27dd/0x2d60 [ 229.136321][T11910] do_syscall_64+0xc9/0x1c0 [ 229.145518][T11910] ? clear_bhb_loop+0x55/0xb0 [ 229.150301][T11910] ? clear_bhb_loop+0x55/0xb0 [ 229.150326][T11910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.150387][T11910] RIP: 0033:0x7f691348899f [ 229.165431][T11910] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 229.185101][T11910] RSP: 002b:00007f6912107000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 229.185129][T11910] RAX: ffffffffffffffda RBX: 00007f6913625f80 RCX: 00007f691348899f [ 229.185199][T11910] RDX: 00000000000003b6 RSI: 0000000020001380 RDI: 00000000000000c8 [ 229.185212][T11910] RBP: 00007f6912107090 R08: 0000000000000000 R09: 0000000000000000 [ 229.185228][T11910] R10: 00000000000003b6 R11: 0000000000000293 R12: 0000000000000001 [ 229.185243][T11910] R13: 0000000000000000 R14: 00007f6913625f80 R15: 00007ffef5d68018 [ 229.185271][T11910] [ 229.237429][T11915] netlink: 'syz.1.2192': attribute type 29 has an invalid length. [ 229.238361][T11915] netlink: 'syz.1.2192': attribute type 29 has an invalid length. [ 229.359902][T11921] FAULT_INJECTION: forcing a failure. [ 229.359902][T11921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.373079][T11921] CPU: 1 UID: 0 PID: 11921 Comm: syz.1.2195 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 229.383864][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 229.393940][T11921] Call Trace: [ 229.397234][T11921] [ 229.400205][T11921] dump_stack_lvl+0xf2/0x150 [ 229.404824][T11921] dump_stack+0x15/0x20 [ 229.409055][T11921] should_fail_ex+0x229/0x230 [ 229.413760][T11921] should_fail+0xb/0x10 [ 229.417937][T11921] should_fail_usercopy+0x1a/0x20 [ 229.422998][T11921] _copy_to_user+0x1e/0xa0 [ 229.427517][T11921] simple_read_from_buffer+0xa0/0x110 [ 229.432903][T11921] proc_fail_nth_read+0xff/0x140 [ 229.437892][T11921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.443526][T11921] vfs_read+0x1a2/0x6e0 [ 229.447843][T11921] ? __rcu_read_unlock+0x4e/0x70 [ 229.452817][T11921] ? __fget_files+0x1da/0x210 [ 229.457580][T11921] ksys_read+0xeb/0x1b0 [ 229.461767][T11921] __x64_sys_read+0x42/0x50 [ 229.466491][T11921] x64_sys_call+0x27d3/0x2d60 [ 229.471228][T11921] do_syscall_64+0xc9/0x1c0 [ 229.475849][T11921] ? clear_bhb_loop+0x55/0xb0 [ 229.480549][T11921] ? clear_bhb_loop+0x55/0xb0 [ 229.485282][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.491231][T11921] RIP: 0033:0x7f69134888fc [ 229.495774][T11921] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 229.515401][T11921] RSP: 002b:00007f6912107030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.523980][T11921] RAX: ffffffffffffffda RBX: 00007f6913625f80 RCX: 00007f69134888fc [ 229.531982][T11921] RDX: 000000000000000f RSI: 00007f69121070a0 RDI: 0000000000000004 [ 229.539974][T11921] RBP: 00007f6912107090 R08: 0000000000000000 R09: 0000000000000000 [ 229.547964][T11921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.555956][T11921] R13: 0000000000000000 R14: 00007f6913625f80 R15: 00007ffef5d68018 [ 229.564032][T11921] [ 229.852193][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 229.852216][ T29] audit: type=1400 audit(1725158597.002:22596): avc: denied { open } for pid=11938 comm="syz.2.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 229.872708][T11941] FAULT_INJECTION: forcing a failure. [ 229.872708][T11941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.891058][T11941] CPU: 0 UID: 0 PID: 11941 Comm: syz.2.2204 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 229.901922][T11941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 229.912003][T11941] Call Trace: [ 229.914923][ T29] audit: type=1400 audit(1725158597.002:22597): avc: denied { read write } for pid=11938 comm="syz.2.2203" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.915341][T11941] [ 229.915351][T11941] dump_stack_lvl+0xf2/0x150 [ 229.939524][ T29] audit: type=1400 audit(1725158597.012:22598): avc: denied { read write } for pid=6758 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.942401][T11941] dump_stack+0x15/0x20 [ 229.946972][ T29] audit: type=1400 audit(1725158597.021:22599): avc: denied { create } for pid=11940 comm="syz.2.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 229.946999][ T29] audit: type=1400 audit(1725158597.039:22600): avc: denied { read write } for pid=10132 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.971289][T11941] should_fail_ex+0x229/0x230 [ 229.971323][T11941] should_fail+0xb/0x10 [ 229.975463][ T29] audit: type=1400 audit(1725158597.039:22601): avc: denied { read write } for pid=10900 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.995140][T11941] should_fail_usercopy+0x1a/0x20 [ 229.995177][T11941] _copy_from_user+0x1e/0xd0 [ 229.995207][T11941] copy_msghdr_from_user+0x54/0x2a0 [ 229.995253][T11941] __sys_sendmsg+0x17d/0x280 [ 230.047047][ T29] audit: type=1400 audit(1725158597.141:22602): avc: denied { map_create } for pid=11943 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 230.052702][T11941] __x64_sys_sendmsg+0x46/0x50 [ 230.065316][ T29] audit: type=1400 audit(1725158597.196:22603): avc: denied { prog_load } for pid=11943 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 230.067465][T11941] x64_sys_call+0x2689/0x2d60 [ 230.073905][ T29] audit: type=1400 audit(1725158597.196:22604): avc: denied { map_create } for pid=11943 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 230.091308][T11941] do_syscall_64+0xc9/0x1c0 [ 230.091341][T11941] ? clear_bhb_loop+0x55/0xb0 [ 230.096107][ T29] audit: type=1400 audit(1725158597.196:22605): avc: denied { prog_load } for pid=11943 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 230.115268][T11941] ? clear_bhb_loop+0x55/0xb0 [ 230.172617][T11941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.178587][T11941] RIP: 0033:0x7f24ab909eb9 [ 230.183014][T11941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.202652][T11941] RSP: 002b:00007f24aa581038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.211110][T11941] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab909eb9 [ 230.219088][T11941] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 230.227214][T11941] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 230.235193][T11941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.243170][T11941] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 230.251239][T11941] [ 230.321910][T11953] FAULT_INJECTION: forcing a failure. [ 230.321910][T11953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.335053][T11953] CPU: 0 UID: 0 PID: 11953 Comm: syz.2.2210 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 230.346013][T11953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 230.356110][T11953] Call Trace: [ 230.359505][T11953] [ 230.362467][T11953] dump_stack_lvl+0xf2/0x150 [ 230.367084][T11953] dump_stack+0x15/0x20 [ 230.371265][T11953] should_fail_ex+0x229/0x230 [ 230.375972][T11953] should_fail+0xb/0x10 [ 230.380149][T11953] should_fail_usercopy+0x1a/0x20 [ 230.385313][T11953] _copy_from_user+0x1e/0xd0 [ 230.389932][T11953] __sys_bpf+0x14e/0x7a0 [ 230.394210][T11953] __x64_sys_bpf+0x43/0x50 [ 230.398678][T11953] x64_sys_call+0x2625/0x2d60 [ 230.403456][T11953] do_syscall_64+0xc9/0x1c0 [ 230.408056][T11953] ? clear_bhb_loop+0x55/0xb0 [ 230.412792][T11953] ? clear_bhb_loop+0x55/0xb0 [ 230.417500][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.423549][T11953] RIP: 0033:0x7f24ab909eb9 [ 230.427982][T11953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.447627][T11953] RSP: 002b:00007f24aa581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.456112][T11953] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab909eb9 [ 230.464137][T11953] RDX: 0000000000000050 RSI: 00000000200005c0 RDI: 000000000000000a [ 230.472136][T11953] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 230.480174][T11953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.488167][T11953] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 230.496177][T11953] [ 230.550592][T11979] FAULT_INJECTION: forcing a failure. [ 230.550592][T11979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.563758][T11979] CPU: 1 UID: 0 PID: 11979 Comm: syz.0.2219 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 230.574570][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 230.584647][T11979] Call Trace: [ 230.588030][T11979] [ 230.591044][T11979] dump_stack_lvl+0xf2/0x150 [ 230.595677][T11979] dump_stack+0x15/0x20 [ 230.599943][T11979] should_fail_ex+0x229/0x230 [ 230.604658][T11979] should_fail+0xb/0x10 [ 230.608850][T11979] should_fail_usercopy+0x1a/0x20 [ 230.613963][T11979] _copy_from_user+0x1e/0xd0 [ 230.618585][T11979] __sys_bpf+0x14e/0x7a0 [ 230.622864][T11979] __x64_sys_bpf+0x43/0x50 [ 230.627439][T11979] x64_sys_call+0x2625/0x2d60 [ 230.627480][T11979] do_syscall_64+0xc9/0x1c0 [ 230.636651][T11979] ? clear_bhb_loop+0x55/0xb0 [ 230.641354][T11979] ? clear_bhb_loop+0x55/0xb0 [ 230.646029][T11979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.651968][T11979] RIP: 0033:0x7f62b31a9eb9 [ 230.656515][T11979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.676203][T11979] RSP: 002b:00007f62b1e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.684623][T11979] RAX: ffffffffffffffda RBX: 00007f62b3345f80 RCX: 00007f62b31a9eb9 [ 230.692623][T11979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 230.700652][T11979] RBP: 00007f62b1e27090 R08: 0000000000000000 R09: 0000000000000000 [ 230.708642][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.716617][T11979] R13: 0000000000000000 R14: 00007f62b3345f80 R15: 00007ffff03eb288 [ 230.724606][T11979] [ 230.774291][T11995] pim6reg1: entered promiscuous mode [ 230.779728][T11995] pim6reg1: entered allmulticast mode [ 232.364252][T12067] pim6reg1: entered promiscuous mode [ 232.369608][T12067] pim6reg1: entered allmulticast mode [ 234.801385][T12222] FAULT_INJECTION: forcing a failure. [ 234.801385][T12222] name failslab, interval 1, probability 0, space 0, times 0 [ 234.814135][T12222] CPU: 1 UID: 0 PID: 12222 Comm: syz.3.2310 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 234.824971][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.835085][T12222] Call Trace: [ 234.838394][T12222] [ 234.841336][T12222] dump_stack_lvl+0xf2/0x150 [ 234.846007][T12222] dump_stack+0x15/0x20 [ 234.850216][T12222] should_fail_ex+0x229/0x230 [ 234.854925][T12222] ? shmem_alloc_inode+0x34/0x50 [ 234.859911][T12222] should_failslab+0x8f/0xb0 [ 234.864573][T12222] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 234.870408][T12222] shmem_alloc_inode+0x34/0x50 [ 234.875287][T12222] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 234.880776][T12222] alloc_inode+0x3c/0x160 [ 234.885115][T12222] new_inode+0x1e/0x100 [ 234.889277][T12222] shmem_get_inode+0x258/0x740 [ 234.894120][T12222] shmem_mknod+0x44/0x180 [ 234.898453][T12222] shmem_create+0x34/0x40 [ 234.902803][T12222] vfs_create+0x19c/0x2b0 [ 234.907161][T12222] do_mknodat+0x2a4/0x420 [ 234.911495][T12222] __x64_sys_mknod+0x51/0x60 [ 234.916129][T12222] x64_sys_call+0x2657/0x2d60 [ 234.920820][T12222] do_syscall_64+0xc9/0x1c0 [ 234.925403][T12222] ? clear_bhb_loop+0x55/0xb0 [ 234.930201][T12222] ? clear_bhb_loop+0x55/0xb0 [ 234.934879][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.940879][T12222] RIP: 0033:0x7fe13a169eb9 [ 234.945320][T12222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.964956][T12222] RSP: 002b:00007fe138de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 234.973397][T12222] RAX: ffffffffffffffda RBX: 00007fe13a305f80 RCX: 00007fe13a169eb9 [ 234.981521][T12222] RDX: 00000000fffffffe RSI: 0000000000000010 RDI: 0000000020000040 [ 234.989533][T12222] RBP: 00007fe138de7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.997511][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.005561][T12222] R13: 0000000000000000 R14: 00007fe13a305f80 R15: 00007ffc2600e128 [ 235.013575][T12222] [ 235.286969][ T29] kauditd_printk_skb: 1788 callbacks suppressed [ 235.286985][ T29] audit: type=1400 audit(1725158602.014:24322): avc: denied { read write } for pid=10900 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 235.325540][ T29] audit: type=1326 audit(1725158602.033:24323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12237 comm="syz.3.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 235.349244][ T29] audit: type=1326 audit(1725158602.042:24324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12223 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab909eb9 code=0x7ffc0000 [ 235.372894][ T29] audit: type=1326 audit(1725158602.042:24325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12223 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ab909eb9 code=0x7ffc0000 [ 235.397759][ T29] audit: type=1326 audit(1725158602.060:24326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 235.421622][ T29] audit: type=1326 audit(1725158602.060:24327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 235.445229][ T29] audit: type=1326 audit(1725158602.060:24328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 235.468966][ T29] audit: type=1326 audit(1725158602.060:24329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 235.492679][ T29] audit: type=1326 audit(1725158602.060:24330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 235.516309][ T29] audit: type=1326 audit(1725158602.060:24331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.3.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe13a169eb9 code=0x7ffc0000 [ 235.747316][T12277] FAULT_INJECTION: forcing a failure. [ 235.747316][T12277] name failslab, interval 1, probability 0, space 0, times 0 [ 235.760279][T12277] CPU: 1 UID: 0 PID: 12277 Comm: syz.3.2332 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 235.771102][T12277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.781177][T12277] Call Trace: [ 235.784476][T12277] [ 235.787429][T12277] dump_stack_lvl+0xf2/0x150 [ 235.792076][T12277] dump_stack+0x15/0x20 [ 235.796282][T12277] should_fail_ex+0x229/0x230 [ 235.801038][T12277] ? getname_flags+0x81/0x3b0 [ 235.805748][T12277] should_failslab+0x8f/0xb0 [ 235.810401][T12277] kmem_cache_alloc_noprof+0x4c/0x290 [ 235.815838][T12277] getname_flags+0x81/0x3b0 [ 235.820446][T12277] user_path_at+0x26/0x110 [ 235.824885][T12277] __se_sys_mount+0x248/0x2d0 [ 235.829650][T12277] __x64_sys_mount+0x67/0x80 [ 235.834265][T12277] x64_sys_call+0x203e/0x2d60 [ 235.839046][T12277] do_syscall_64+0xc9/0x1c0 [ 235.843692][T12277] ? clear_bhb_loop+0x55/0xb0 [ 235.848423][T12277] ? clear_bhb_loop+0x55/0xb0 [ 235.853130][T12277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.859058][T12277] RIP: 0033:0x7fe13a169eb9 [ 235.863496][T12277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.883129][T12277] RSP: 002b:00007fe138de7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.891635][T12277] RAX: ffffffffffffffda RBX: 00007fe13a305f80 RCX: 00007fe13a169eb9 [ 235.899658][T12277] RDX: 0000000020002000 RSI: 0000000020001fc0 RDI: 0000000000000000 [ 235.907653][T12277] RBP: 00007fe138de7090 R08: 0000000020002040 R09: 0000000000000000 [ 235.915687][T12277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.923727][T12277] R13: 0000000000000000 R14: 00007fe13a305f80 R15: 00007ffc2600e128 [ 235.931738][T12277] [ 236.170499][T12314] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.372306][T12326] FAULT_INJECTION: forcing a failure. [ 236.372306][T12326] name failslab, interval 1, probability 0, space 0, times 0 [ 236.385210][T12326] CPU: 1 UID: 0 PID: 12326 Comm: syz.2.2350 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 236.396190][T12326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 236.406284][T12326] Call Trace: [ 236.409578][T12326] [ 236.412539][T12326] dump_stack_lvl+0xf2/0x150 [ 236.417180][T12326] dump_stack+0x15/0x20 [ 236.421410][T12326] should_fail_ex+0x229/0x230 [ 236.426116][T12326] ? __d_alloc+0x3d/0x340 [ 236.430524][T12326] should_failslab+0x8f/0xb0 [ 236.435208][T12326] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 236.440983][T12326] __d_alloc+0x3d/0x340 [ 236.445171][T12326] d_alloc_pseudo+0x1e/0x80 [ 236.449773][T12326] alloc_file_pseudo+0x70/0x140 [ 236.454684][T12326] __shmem_file_setup+0x1bb/0x1f0 [ 236.459747][T12326] shmem_file_setup+0x3b/0x50 [ 236.464455][T12326] __se_sys_memfd_create+0x31d/0x600 [ 236.469779][T12326] __x64_sys_memfd_create+0x31/0x40 [ 236.475090][T12326] x64_sys_call+0x2891/0x2d60 [ 236.479834][T12326] do_syscall_64+0xc9/0x1c0 [ 236.484494][T12326] ? clear_bhb_loop+0x55/0xb0 [ 236.489281][T12326] ? clear_bhb_loop+0x55/0xb0 [ 236.493989][T12326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.499923][T12326] RIP: 0033:0x7f24ab909eb9 [ 236.504359][T12326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.523998][T12326] RSP: 002b:00007f24aa580e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 236.532465][T12326] RAX: ffffffffffffffda RBX: 00000000000005e9 RCX: 00007f24ab909eb9 [ 236.540458][T12326] RDX: 00007f24aa580ef0 RSI: 0000000000000000 RDI: 00007f24ab978131 [ 236.548462][T12326] RBP: 0000000020000600 R08: 00007f24aa580bb7 R09: 00007f24aa580e40 [ 236.556451][T12326] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200005c0 [ 236.564487][T12326] R13: 00007f24aa580ef0 R14: 00007f24aa580eb0 R15: 0000000020000000 [ 236.572602][T12326] [ 237.508749][T12401] FAULT_INJECTION: forcing a failure. [ 237.508749][T12401] name failslab, interval 1, probability 0, space 0, times 0 [ 237.521537][T12401] CPU: 0 UID: 0 PID: 12401 Comm: syz.2.2379 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 237.532372][T12401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 237.542451][T12401] Call Trace: [ 237.545744][T12401] [ 237.548729][T12401] dump_stack_lvl+0xf2/0x150 [ 237.553348][T12401] dump_stack+0x15/0x20 [ 237.557583][T12401] should_fail_ex+0x229/0x230 [ 237.562315][T12401] ? audit_log_start+0x34c/0x6b0 [ 237.567333][T12401] should_failslab+0x8f/0xb0 [ 237.572009][T12401] kmem_cache_alloc_noprof+0x4c/0x290 [ 237.577445][T12401] audit_log_start+0x34c/0x6b0 [ 237.582340][T12401] audit_seccomp+0x4b/0x130 [ 237.586885][T12401] __seccomp_filter+0x6fa/0x1180 [ 237.591894][T12401] ? proc_fail_nth_write+0x130/0x160 [ 237.597279][T12401] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 237.602975][T12401] ? vfs_write+0x5a5/0x900 [ 237.607424][T12401] ? __fget_files+0x1da/0x210 [ 237.612196][T12401] __secure_computing+0x9f/0x1c0 [ 237.617159][T12401] syscall_trace_enter+0xd1/0x1f0 [ 237.622220][T12401] do_syscall_64+0xaa/0x1c0 [ 237.626738][T12401] ? clear_bhb_loop+0x55/0xb0 [ 237.631436][T12401] ? clear_bhb_loop+0x55/0xb0 [ 237.636135][T12401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.642104][T12401] RIP: 0033:0x7f24ab909eb9 [ 237.646529][T12401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.666298][T12401] RSP: 002b:00007f24aa580f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 237.674728][T12401] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f24ab909eb9 [ 237.682736][T12401] RDX: 00007f24aa580f20 RSI: 0000000000000058 RDI: 00007f24aa580f20 [ 237.690719][T12401] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000058 [ 237.698721][T12401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.706783][T12401] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 237.714851][T12401] [ 237.873242][T12423] FAULT_INJECTION: forcing a failure. [ 237.873242][T12423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.886350][T12423] CPU: 0 UID: 0 PID: 12423 Comm: syz.0.2387 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 237.897139][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 237.907283][T12423] Call Trace: [ 237.910582][T12423] [ 237.913554][T12423] dump_stack_lvl+0xf2/0x150 [ 237.918180][T12423] dump_stack+0x15/0x20 [ 237.922370][T12423] should_fail_ex+0x229/0x230 [ 237.927079][T12423] should_fail+0xb/0x10 [ 237.931320][T12423] should_fail_usercopy+0x1a/0x20 [ 237.936455][T12423] _copy_to_user+0x1e/0xa0 [ 237.940915][T12423] simple_read_from_buffer+0xa0/0x110 [ 237.941447][T12427] FAULT_INJECTION: forcing a failure. [ 237.941447][T12427] name failslab, interval 1, probability 0, space 0, times 0 [ 237.946298][T12423] proc_fail_nth_read+0xff/0x140 [ 237.946329][T12423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.946354][T12423] vfs_read+0x1a2/0x6e0 [ 237.946460][T12423] ? __rcu_read_unlock+0x4e/0x70 [ 237.978696][T12423] ? __fget_files+0x1da/0x210 [ 237.983579][T12423] ksys_read+0xeb/0x1b0 [ 237.987855][T12423] __x64_sys_read+0x42/0x50 [ 237.992375][T12423] x64_sys_call+0x27d3/0x2d60 [ 237.997153][T12423] do_syscall_64+0xc9/0x1c0 [ 238.001693][T12423] ? clear_bhb_loop+0x55/0xb0 [ 238.006436][T12423] ? clear_bhb_loop+0x55/0xb0 [ 238.011125][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.017108][T12423] RIP: 0033:0x7f62b31a88fc [ 238.021528][T12423] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 238.041250][T12423] RSP: 002b:00007f62b1e27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.049676][T12423] RAX: ffffffffffffffda RBX: 00007f62b3345f80 RCX: 00007f62b31a88fc [ 238.057655][T12423] RDX: 000000000000000f RSI: 00007f62b1e270a0 RDI: 0000000000000003 [ 238.065716][T12423] RBP: 00007f62b1e27090 R08: 0000000000000000 R09: 0000000000000000 [ 238.073692][T12423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.081668][T12423] R13: 0000000000000000 R14: 00007f62b3345f80 R15: 00007ffff03eb288 [ 238.089730][T12423] [ 238.092764][T12427] CPU: 1 UID: 0 PID: 12427 Comm: syz.1.2389 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 238.103641][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 238.103657][T12427] Call Trace: [ 238.103665][T12427] [ 238.103674][T12427] dump_stack_lvl+0xf2/0x150 [ 238.103703][T12427] dump_stack+0x15/0x20 [ 238.103804][T12427] should_fail_ex+0x229/0x230 [ 238.103906][T12427] ? vm_area_dup+0x2c/0x130 [ 238.103928][T12427] should_failslab+0x8f/0xb0 [ 238.103964][T12427] kmem_cache_alloc_noprof+0x4c/0x290 [ 238.103994][T12427] vm_area_dup+0x2c/0x130 [ 238.104014][T12427] __split_vma+0xf7/0x690 [ 238.104080][T12427] vma_modify+0x198/0x1f0 [ 238.104117][T12427] mlock_fixup+0x133/0x470 [ 238.104141][T12427] apply_vma_lock_flags+0x18a/0x240 [ 238.104169][T12427] do_mlock+0x347/0x4f0 [ 238.104197][T12427] ? ksys_write+0x178/0x1b0 [ 238.104228][T12427] __x64_sys_mlock2+0x72/0x90 [ 238.104267][T12427] x64_sys_call+0x2a85/0x2d60 [ 238.104313][T12427] do_syscall_64+0xc9/0x1c0 [ 238.104399][T12427] ? clear_bhb_loop+0x55/0xb0 [ 238.104448][T12427] ? clear_bhb_loop+0x55/0xb0 [ 238.104473][T12427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.104510][T12427] RIP: 0033:0x7f6913489eb9 [ 238.104525][T12427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.104557][T12427] RSP: 002b:00007f6912107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 238.104652][T12427] RAX: ffffffffffffffda RBX: 00007f6913625f80 RCX: 00007f6913489eb9 [ 238.104664][T12427] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000000020dfb000 [ 238.104677][T12427] RBP: 00007f6912107090 R08: 0000000000000000 R09: 0000000000000000 [ 238.104690][T12427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.104702][T12427] R13: 0000000000000000 R14: 00007f6913625f80 R15: 00007ffef5d68018 [ 238.104765][T12427] [ 238.346627][T12439] FAULT_INJECTION: forcing a failure. [ 238.346627][T12439] name failslab, interval 1, probability 0, space 0, times 0 [ 238.346656][T12439] CPU: 1 UID: 0 PID: 12439 Comm: syz.1.2394 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 238.346689][T12439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 238.346702][T12439] Call Trace: [ 238.346709][T12439] [ 238.346716][T12439] dump_stack_lvl+0xf2/0x150 [ 238.346744][T12439] dump_stack+0x15/0x20 [ 238.346765][T12439] should_fail_ex+0x229/0x230 [ 238.346810][T12439] ? getname_flags+0x81/0x3b0 [ 238.346910][T12439] should_failslab+0x8f/0xb0 [ 238.346978][T12439] kmem_cache_alloc_noprof+0x4c/0x290 [ 238.347011][T12439] getname_flags+0x81/0x3b0 [ 238.347128][T12439] __x64_sys_rename+0x40/0x70 [ 238.347162][T12439] x64_sys_call+0x1a84/0x2d60 [ 238.347191][T12439] do_syscall_64+0xc9/0x1c0 [ 238.347290][T12439] ? clear_bhb_loop+0x55/0xb0 [ 238.347314][T12439] ? clear_bhb_loop+0x55/0xb0 [ 238.347336][T12439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.347373][T12439] RIP: 0033:0x7f6913489eb9 [ 238.347390][T12439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.347408][T12439] RSP: 002b:00007f6912107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 238.347487][T12439] RAX: ffffffffffffffda RBX: 00007f6913625f80 RCX: 00007f6913489eb9 [ 238.347501][T12439] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000000 [ 238.347514][T12439] RBP: 00007f6912107090 R08: 0000000000000000 R09: 0000000000000000 [ 238.347528][T12439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.347544][T12439] R13: 0000000000000000 R14: 00007f6913625f80 R15: 00007ffef5d68018 [ 238.347568][T12439] [ 239.208805][T12511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12511 comm=syz.4.2420 [ 239.504587][T12536] FAULT_INJECTION: forcing a failure. [ 239.504587][T12536] name failslab, interval 1, probability 0, space 0, times 0 [ 239.517355][T12536] CPU: 1 UID: 0 PID: 12536 Comm: syz.0.2428 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 239.528153][T12536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 239.538283][T12536] Call Trace: [ 239.541572][T12536] [ 239.544520][T12536] dump_stack_lvl+0xf2/0x150 [ 239.549149][T12536] dump_stack+0x15/0x20 [ 239.553349][T12536] should_fail_ex+0x229/0x230 [ 239.558087][T12536] ? security_prepare_creds+0x4c/0x100 [ 239.563771][T12536] should_failslab+0x8f/0xb0 [ 239.568438][T12536] __kmalloc_noprof+0xa5/0x370 [ 239.573246][T12536] security_prepare_creds+0x4c/0x100 [ 239.578551][T12536] prepare_kernel_cred+0x2c0/0x650 [ 239.583688][T12536] _request_firmware+0x352/0x8c0 [ 239.588827][T12536] ? avc_has_perm_noaudit+0x1cc/0x210 [ 239.594300][T12536] ? rpm_resume+0x655/0xd00 [ 239.598840][T12536] ? __rcu_read_unlock+0x4e/0x70 [ 239.603875][T12536] request_firmware+0x36/0x50 [ 239.608580][T12536] devlink_compat_flash_update+0xaf/0x1b0 [ 239.614404][T12536] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 239.620256][T12536] dev_ethtool+0x138b/0x14c0 [ 239.624886][T12536] ? __rcu_read_unlock+0x4e/0x70 [ 239.629901][T12536] dev_ioctl+0x854/0xab0 [ 239.634185][T12536] sock_do_ioctl+0x11c/0x260 [ 239.638899][T12536] sock_ioctl+0x470/0x640 [ 239.643268][T12536] ? __pfx_sock_ioctl+0x10/0x10 [ 239.648165][T12536] __se_sys_ioctl+0xd3/0x150 [ 239.652837][T12536] __x64_sys_ioctl+0x43/0x50 [ 239.657465][T12536] x64_sys_call+0x15cc/0x2d60 [ 239.662147][T12536] do_syscall_64+0xc9/0x1c0 [ 239.666706][T12536] ? clear_bhb_loop+0x55/0xb0 [ 239.671435][T12536] ? clear_bhb_loop+0x55/0xb0 [ 239.676215][T12536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.682133][T12536] RIP: 0033:0x7f62b31a9eb9 [ 239.686593][T12536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.706363][T12536] RSP: 002b:00007f62b1e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.714839][T12536] RAX: ffffffffffffffda RBX: 00007f62b3345f80 RCX: 00007f62b31a9eb9 [ 239.722861][T12536] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 239.730932][T12536] RBP: 00007f62b1e27090 R08: 0000000000000000 R09: 0000000000000000 [ 239.738927][T12536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.746948][T12536] R13: 0000000000000000 R14: 00007f62b3345f80 R15: 00007ffff03eb288 [ 239.746979][T12536] [ 240.272679][T12611] FAULT_INJECTION: forcing a failure. [ 240.272679][T12611] name failslab, interval 1, probability 0, space 0, times 0 [ 240.285427][T12611] CPU: 0 UID: 0 PID: 12611 Comm: syz.2.2457 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 240.296235][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 240.306327][T12611] Call Trace: [ 240.309619][T12611] [ 240.312562][T12611] dump_stack_lvl+0xf2/0x150 [ 240.317188][T12611] dump_stack+0x15/0x20 [ 240.321426][T12611] should_fail_ex+0x229/0x230 [ 240.326219][T12611] ? alloc_tty_struct+0x4d/0x400 [ 240.331200][T12611] should_failslab+0x8f/0xb0 [ 240.335900][T12611] __kmalloc_cache_noprof+0x4b/0x2a0 [ 240.341255][T12611] ? should_fail_ex+0xd7/0x230 [ 240.346114][T12611] alloc_tty_struct+0x4d/0x400 [ 240.350969][T12611] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 240.356551][T12611] pty_unix98_install+0xe9/0x380 [ 240.361602][T12611] tty_init_dev+0x7b/0x320 [ 240.366073][T12611] ptmx_open+0xd0/0x230 [ 240.370304][T12611] chrdev_open+0x323/0x3a0 [ 240.374803][T12611] ? __pfx_chrdev_open+0x10/0x10 [ 240.379858][T12611] do_dentry_open+0x647/0xa50 [ 240.384609][T12611] vfs_open+0x3b/0x1f0 [ 240.388739][T12611] path_openat+0x1a26/0x1f10 [ 240.393380][T12611] do_filp_open+0xf7/0x200 [ 240.397880][T12611] do_sys_openat2+0xab/0x120 [ 240.402594][T12611] __x64_sys_openat+0xf3/0x120 [ 240.407389][T12611] x64_sys_call+0x1025/0x2d60 [ 240.412100][T12611] do_syscall_64+0xc9/0x1c0 [ 240.416750][T12611] ? clear_bhb_loop+0x55/0xb0 [ 240.421443][T12611] ? clear_bhb_loop+0x55/0xb0 [ 240.426184][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.432192][T12611] RIP: 0033:0x7f24ab909eb9 [ 240.436657][T12611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.456295][T12611] RSP: 002b:00007f24aa581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.464725][T12611] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab909eb9 [ 240.472783][T12611] RDX: 0000000000004000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 240.480792][T12611] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 240.488835][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.496849][T12611] R13: 0000000000000001 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 240.504850][T12611] [ 240.706285][ T29] kauditd_printk_skb: 2235 callbacks suppressed [ 240.706304][ T29] audit: type=1400 audit(1725158607.017:26565): avc: denied { prog_load } for pid=12628 comm="syz.0.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 240.762217][ T29] audit: type=1400 audit(1725158607.026:26566): avc: denied { map_create } for pid=12630 comm="syz.2.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 240.781820][ T29] audit: type=1400 audit(1725158607.026:26567): avc: denied { create } for pid=12628 comm="syz.0.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 240.801736][ T29] audit: type=1400 audit(1725158607.026:26568): avc: denied { create } for pid=12628 comm="syz.0.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 240.822478][ T29] audit: type=1400 audit(1725158607.026:26569): avc: denied { open } for pid=12628 comm="syz.0.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 240.841919][ T29] audit: type=1400 audit(1725158607.026:26570): avc: denied { prog_load } for pid=12628 comm="syz.0.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 240.861245][ T29] audit: type=1400 audit(1725158607.045:26571): avc: denied { map_create } for pid=12630 comm="syz.2.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 240.880660][ T29] audit: type=1400 audit(1725158607.045:26572): avc: denied { prog_load } for pid=12630 comm="syz.2.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 240.899917][ T29] audit: type=1400 audit(1725158607.045:26573): avc: denied { prog_load } for pid=12630 comm="syz.2.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 240.919202][ T29] audit: type=1400 audit(1725158607.045:26574): avc: denied { prog_load } for pid=12630 comm="syz.2.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 240.957867][T12638] FAULT_INJECTION: forcing a failure. [ 240.957867][T12638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.970979][T12638] CPU: 1 UID: 0 PID: 12638 Comm: syz.2.2469 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 240.981824][T12638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 240.992009][T12638] Call Trace: [ 240.995300][T12638] [ 240.998240][T12638] dump_stack_lvl+0xf2/0x150 [ 241.002903][T12638] dump_stack+0x15/0x20 [ 241.007122][T12638] should_fail_ex+0x229/0x230 [ 241.011825][T12638] should_fail+0xb/0x10 [ 241.016036][T12638] should_fail_usercopy+0x1a/0x20 [ 241.021228][T12638] _copy_to_user+0x1e/0xa0 [ 241.025727][T12638] __x64_sys_getitimer+0xec/0x130 [ 241.030839][T12638] x64_sys_call+0x2a49/0x2d60 [ 241.035608][T12638] do_syscall_64+0xc9/0x1c0 [ 241.040135][T12638] ? clear_bhb_loop+0x55/0xb0 [ 241.044876][T12638] ? clear_bhb_loop+0x55/0xb0 [ 241.049575][T12638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.055557][T12638] RIP: 0033:0x7f24ab909eb9 [ 241.059984][T12638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.079616][T12638] RSP: 002b:00007f24aa581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000024 [ 241.088053][T12638] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab909eb9 [ 241.096095][T12638] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 241.104086][T12638] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 241.112077][T12638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.120049][T12638] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 241.128050][T12638] [ 241.202238][T12646] FAULT_INJECTION: forcing a failure. [ 241.202238][T12646] name failslab, interval 1, probability 0, space 0, times 0 [ 241.215077][T12646] CPU: 1 UID: 0 PID: 12646 Comm: syz.2.2473 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 241.215147][T12646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 241.215163][T12646] Call Trace: [ 241.215171][T12646] [ 241.215179][T12646] dump_stack_lvl+0xf2/0x150 [ 241.215212][T12646] dump_stack+0x15/0x20 [ 241.215282][T12646] should_fail_ex+0x229/0x230 [ 241.215313][T12646] ? iter_file_splice_write+0x108/0x970 [ 241.215430][T12646] should_failslab+0x8f/0xb0 [ 241.215568][T12646] __kmalloc_noprof+0xa5/0x370 [ 241.215603][T12646] iter_file_splice_write+0x108/0x970 [ 241.215645][T12646] ? atime_needs_update+0x3c5/0x3e0 [ 241.215681][T12646] ? touch_atime+0x110/0x350 [ 241.215746][T12646] ? shmem_file_splice_read+0x57b/0x5c0 [ 241.215791][T12646] ? __pfx_iter_file_splice_write+0x10/0x10 [ 241.215895][T12646] direct_splice_actor+0x16c/0x2c0 [ 241.215941][T12646] splice_direct_to_actor+0x305/0x670 [ 241.216056][T12646] ? __pfx_direct_splice_actor+0x10/0x10 [ 241.216110][T12646] do_splice_direct+0xd7/0x150 [ 241.216148][T12646] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 241.216207][T12646] do_sendfile+0x3ab/0x950 [ 241.216235][T12646] __x64_sys_sendfile64+0x110/0x150 [ 241.216272][T12646] x64_sys_call+0xed5/0x2d60 [ 241.216372][T12646] do_syscall_64+0xc9/0x1c0 [ 241.216396][T12646] ? clear_bhb_loop+0x55/0xb0 [ 241.216415][T12646] ? clear_bhb_loop+0x55/0xb0 [ 241.216435][T12646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.216486][T12646] RIP: 0033:0x7f24ab909eb9 [ 241.216501][T12646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.216520][T12646] RSP: 002b:00007f24aa581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 241.216539][T12646] RAX: ffffffffffffffda RBX: 00007f24abaa5f80 RCX: 00007f24ab909eb9 [ 241.216552][T12646] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 241.216647][T12646] RBP: 00007f24aa581090 R08: 0000000000000000 R09: 0000000000000000 [ 241.216661][T12646] R10: 000000000000e066 R11: 0000000000000246 R12: 0000000000000001 [ 241.216675][T12646] R13: 0000000000000000 R14: 00007f24abaa5f80 R15: 00007fff85d531d8 [ 241.216700][T12646] [ 241.604282][T12693] FAULT_INJECTION: forcing a failure. [ 241.604282][T12693] name failslab, interval 1, probability 0, space 0, times 0 [ 241.617112][T12693] CPU: 0 UID: 0 PID: 12693 Comm: syz.3.2492 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 241.628038][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 241.638152][T12693] Call Trace: [ 241.641498][T12693] [ 241.644503][T12693] dump_stack_lvl+0xf2/0x150 [ 241.649149][T12693] dump_stack+0x15/0x20 [ 241.653400][T12693] should_fail_ex+0x229/0x230 [ 241.658253][T12693] ? alloc_empty_file+0xd0/0x310 [ 241.663221][T12693] should_failslab+0x8f/0xb0 [ 241.667868][T12693] kmem_cache_alloc_noprof+0x4c/0x290 [ 241.673300][T12693] alloc_empty_file+0xd0/0x310 [ 241.678146][T12693] alloc_file_pseudo+0xc3/0x140 [ 241.683027][T12693] __shmem_file_setup+0x1bb/0x1f0 [ 241.688125][T12693] shmem_file_setup+0x3b/0x50 [ 241.692914][T12693] __se_sys_memfd_create+0x31d/0x600 [ 241.698313][T12693] __x64_sys_memfd_create+0x31/0x40 [ 241.703544][T12693] x64_sys_call+0x2891/0x2d60 [ 241.708402][T12693] do_syscall_64+0xc9/0x1c0 [ 241.712926][T12693] ? clear_bhb_loop+0x55/0xb0 [ 241.717679][T12693] ? clear_bhb_loop+0x55/0xb0 [ 241.722374][T12693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.728352][T12693] RIP: 0033:0x7fe13a169eb9 [ 241.732823][T12693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.752492][T12693] RSP: 002b:00007fe138de6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 241.760924][T12693] RAX: ffffffffffffffda RBX: 0000000000000550 RCX: 00007fe13a169eb9 [ 241.768986][T12693] RDX: 00007fe138de6ef0 RSI: 0000000000000000 RDI: 00007fe13a1d8131 [ 241.777008][T12693] RBP: 0000000020000340 R08: 00007fe138de6bb7 R09: 00007fe138de6e40 [ 241.784995][T12693] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000200 [ 241.792981][T12693] R13: 00007fe138de6ef0 R14: 00007fe138de6eb0 R15: 0000000020000ac0 [ 241.800979][T12693] [ 242.140477][T12725] ================================================================== [ 242.148567][T12725] BUG: KCSAN: data-race in print_cpu / tick_nohz_idle_enter [ 242.155868][T12725] [ 242.158198][T12725] write to 0xffff888237c204f8 of 8 bytes by task 0 on cpu 0: [ 242.165571][T12725] tick_nohz_idle_enter+0x89/0xe0 [ 242.170633][T12725] do_idle+0x3d/0x230 [ 242.174631][T12725] cpu_startup_entry+0x25/0x30 [ 242.179437][T12725] rest_init+0xef/0xf0 [ 242.183513][T12725] start_kernel+0x581/0x5e0 [ 242.188034][T12725] x86_64_start_reservations+0x2a/0x30 [ 242.193519][T12725] x86_64_start_kernel+0x9a/0xa0 [ 242.198479][T12725] common_startup_64+0x12c/0x137 [ 242.203465][T12725] [ 242.203475][T12725] read to 0xffff888237c204f8 of 8 bytes by task 12725 on cpu 1: [ 242.203495][T12725] print_cpu+0x4ed/0x670 [ 242.217708][T12725] timer_list_show+0x115/0x180 [ 242.217742][T12725] seq_read_iter+0x65b/0x940 [ 242.217780][T12725] proc_reg_read_iter+0x11e/0x190 [ 242.232130][T12725] copy_splice_read+0x3a4/0x5d0 [ 242.232175][T12725] splice_direct_to_actor+0x26c/0x670 [ 242.242395][T12725] do_splice_direct+0xd7/0x150 [ 242.247209][T12725] do_sendfile+0x3ab/0x950 [ 242.247234][T12725] __x64_sys_sendfile64+0x110/0x150 [ 242.247269][T12725] x64_sys_call+0xed5/0x2d60 [ 242.247296][T12725] do_syscall_64+0xc9/0x1c0 [ 242.265976][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.266017][T12725] [ 242.266021][T12725] value changed: 0x0000003822e66b44 -> 0x0000003822e743d1 [ 242.266033][T12725] [ 242.266037][T12725] Reported by Kernel Concurrency Sanitizer on: [ 242.266045][T12725] CPU: 1 UID: 0 PID: 12725 Comm: syz.3.2503 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 242.266073][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 242.266086][T12725] ==================================================================