last executing test programs: 2m4.530027213s ago: executing program 4 (id=6665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') readlinkat(r3, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)=""/65, 0x41) 2m4.500220676s ago: executing program 4 (id=6666): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f00000000c0)={0x400000, 0x600, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) 2m4.227648563s ago: executing program 4 (id=6671): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0x0, 0x0, 0x10000}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x4, 0x0, 0xffffffff, 0x3}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x6}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {0x536d}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xbe0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (fail_nth: 5) 2m3.971999169s ago: executing program 4 (id=6674): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2m2.597722866s ago: executing program 4 (id=6690): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x2, 0x12, 0xfb, 0xe, 0x5, 0x0, 0x70bd27, 0x25dfdb7f, [@sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_ident={0x2, 0xb, 0xda98, 0x0, 0x8}]}, 0x28}}, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'geneve0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x20, 0x1000, "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"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001200)='svc_stats_latency\x00', r4}, 0x18) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000001ac0)={{r0}, "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"}) 2m1.739911983s ago: executing program 4 (id=6703): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4008800) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 1m46.573064922s ago: executing program 32 (id=6703): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4008800) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 4.217726777s ago: executing program 2 (id=8798): r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) 4.176994451s ago: executing program 2 (id=8801): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20000, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000680)="348b0d151f82060088a849c48906392be979b380765c3cd8dceedf36fd97f682e86f7af2152eac1120765ebbba235781753adcd760d72a92dd849fc0f756e06cd60e115141af769ec5c6e1425b515e698687161e30bc79f8073895988f8c1e5cd63a608f386c0f3bbc90ab2693ff6577eec98c079fc273eb62ee2891cc0d6703418cfb75b90d6e2e7b480af96d980a8298232f7eb843d3719f76bdafbcbf58952f6ea100523d4c490c708977cfb6aa208ea2e1fa2a23b4a2063baf20be6d91b9ccd433e5f1d1b554ea466d341d3b9ed1254f98bc4fb4abe8450ff44f9adba62b86d3687dda4a115dc3b05e99d7e8", 0x0, 0x109, 0x0, 0x0, 0xffffffffffffff18, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x22, 0xfff}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60040, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf96d, 0x3010, 0x4, 0xe6}, &(0x7f0000000040), &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) io_setup(0x6, &(0x7f0000000140)) gettid() r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) mq_getsetattr(r8, &(0x7f0000000380)={0x4, 0xfff, 0x8, 0xc15e}, 0x0) 3.606182869s ago: executing program 1 (id=8811): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000000000000000000009000000000000ff00000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d28616573292900"/235, @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 3.531219196s ago: executing program 1 (id=8812): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff000a}]}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r3, &(0x7f0000000200)=""/202, 0xca) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e5, [{{0x9, 0x2, 0x48}}]}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0) tkill(r2, 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r4, &(0x7f00000001c0)="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", 0x650) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffeffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x1004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000009000000001ddeda00"/23, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 3.220398777s ago: executing program 2 (id=8814): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e88000085000000700000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x0, 0x2, 0x1}) 3.134271276s ago: executing program 2 (id=8815): unshare(0x6a040000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x30046, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xe, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0xa, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000006080)=@newtfilter={0xcd0, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0xca0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xf0}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x21}, @TCA_ROUTE4_POLICE={0xc7c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x7374, 0x10000, 0xa6, 0x5, 0xd4a, 0x2, 0xd8, 0x9, 0xc, 0x4, 0x6eb, 0x7, 0x4, 0x3, 0x0, 0x80, 0x9, 0x80000001, 0x3, 0x5, 0x6, 0xfff, 0x81, 0x6c1, 0x8, 0x7, 0x8, 0x8, 0x6, 0x8, 0x9, 0xfffff956, 0x8001, 0x8, 0x6, 0x2, 0x3, 0x1, 0xd, 0x98, 0xd473e75, 0x9, 0x8, 0x5b, 0x9, 0x9, 0x1, 0x6, 0x8, 0xbe6, 0x2, 0x5, 0x3, 0xfffff3fb, 0x6, 0x10001, 0x1000, 0x6, 0x2, 0xe4f, 0x8001, 0x3cc3, 0x4, 0x705, 0x9925, 0x3, 0x2, 0x7, 0x10001, 0x7, 0x6, 0x6, 0x9, 0x400e, 0x1f, 0x9, 0x10e3, 0x0, 0xffff, 0x401, 0x81, 0x9, 0x1ff, 0xfffffffd, 0x9, 0x2, 0x9, 0x5, 0x1, 0xc, 0x9, 0x40, 0x1, 0xb, 0x2, 0x7, 0x9, 0xffffffac, 0x4, 0x0, 0x4, 0x0, 0x6, 0xe3, 0x5eb, 0x4, 0xf, 0x7, 0x10, 0x2, 0xf3, 0x7f5, 0x10040000, 0x4, 0x2, 0x8000, 0xa1, 0xf, 0x4, 0x5, 0xfffffffc, 0x7, 0x1a94, 0x0, 0x9, 0x9, 0x7, 0x4, 0x5, 0xfffff801, 0x3, 0x2, 0x4, 0x62, 0x5, 0x10001, 0x1ff, 0x80000000, 0x4, 0x99, 0x2, 0x4d, 0xc, 0x2e7, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x3, 0x8, 0x7, 0x5, 0x87, 0x1ff, 0x5, 0x1, 0xffff, 0x200, 0xfff, 0x5, 0xe1d, 0x2, 0x10, 0x5, 0x80, 0x3, 0x3, 0xd, 0x6b, 0x5, 0x10001, 0x0, 0xb1f, 0x2, 0xd10b, 0xfffc0000, 0x1ff, 0x8, 0x13, 0x3ff, 0x40, 0xffff, 0xffff1362, 0xb, 0x4, 0x4, 0x1, 0x0, 0x80, 0x2, 0x8, 0x3, 0x8, 0x6, 0x800, 0x349, 0x5, 0x3ff, 0x0, 0x4bac, 0xee, 0x3, 0x9, 0x0, 0xd958, 0x101, 0xa, 0xffffff50, 0x9, 0x4, 0xaf48, 0x6, 0x1000, 0x40, 0x4, 0x9606, 0x8, 0x2, 0x7, 0x6, 0xfffff047, 0x2, 0x9, 0xfac, 0x9, 0x5, 0x5, 0x3a8, 0x3, 0x1, 0x6, 0x2, 0x1, 0xb3, 0x4, 0x7, 0x1000, 0x7, 0x4, 0x5, 0xe, 0x1, 0x7, 0x7, 0x2, 0x2f4, 0x3, 0x9, 0x8, 0x303, 0x1, 0x8, 0xfff, 0xffffff91]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x8, 0x7, 0x401, {0x8, 0x2, 0xfff, 0xa, 0x5, 0x80000001}, {0xaa, 0x1, 0x9, 0x400, 0x8, 0x4}, 0x6, 0x1ff, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xab}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x5, 0x40, 0x1, 0x5, 0x6, 0x2, 0x6, 0x800, 0x2, 0x200, 0xad, 0x800, 0x7, 0x7, 0x1, 0x9, 0x8, 0x7, 0xe7e, 0x0, 0x8, 0x1, 0x4, 0x7, 0x9, 0x1, 0x2, 0x6, 0x81, 0x0, 0x10, 0x80000000, 0x7, 0x6, 0x6, 0x2, 0x0, 0x7, 0x3, 0x81, 0x2, 0x1, 0x0, 0xc00000, 0xc, 0x0, 0x8, 0x7fffffff, 0x3, 0x985, 0x8, 0xd, 0x7fff, 0x6, 0x5, 0x2, 0x1ff, 0x8, 0x9, 0x4, 0x80000000, 0x4, 0xa8, 0x7, 0x7, 0x3, 0x7ff, 0x6, 0x7, 0x8, 0x4, 0x2, 0x400, 0x80, 0x81, 0x2, 0x8, 0x690, 0x4, 0x7d, 0x8, 0x73de, 0xc3183d9f, 0x4, 0xfff, 0x7fffffff, 0x7fffffff, 0x5, 0xfff, 0x6, 0x113f, 0x80000000, 0x0, 0xff, 0x7, 0x0, 0x3, 0x5, 0x56a, 0x8000, 0x200, 0x3, 0x101, 0x8, 0x1, 0x7, 0x7, 0x1ff, 0xc0000000, 0x8, 0xffffffc0, 0x1000, 0x8001, 0x4, 0x5, 0x1, 0x2dda8ed1, 0x8, 0x0, 0x7, 0x5, 0x6e, 0x10000, 0x2, 0xdd, 0x5, 0x1, 0x3, 0x9, 0xffff, 0xd, 0xcdc6, 0x9, 0xffffffff, 0xfffffff5, 0x81, 0x2, 0x33bcd09c, 0x0, 0xfffffa03, 0xfffffffc, 0x4, 0xb5, 0x5, 0x9, 0x0, 0x401, 0x9, 0x8000, 0x4, 0xa, 0x2, 0x1, 0x81, 0xfff, 0xfff, 0x9, 0x0, 0x5, 0x70f, 0x4, 0x7, 0x200, 0x4, 0x3, 0x5, 0xa, 0xbfb7, 0x0, 0x4, 0x6, 0x9, 0x2, 0xd6, 0x1ff, 0x1, 0x2, 0x7, 0x1, 0x6, 0xf9c, 0xf293, 0x3, 0x5, 0x5, 0x2, 0x3, 0x9ac, 0x7f, 0x15e1551b, 0x2, 0x4, 0xf, 0xffff, 0x4, 0x7, 0x8, 0x8, 0x5, 0x7, 0x0, 0x3ad1, 0x8, 0xffffff00, 0x0, 0x80, 0x1, 0x9, 0x10, 0x4, 0xfff, 0x0, 0xfffffffa, 0xf6, 0xe8e, 0x100, 0x0, 0x7, 0x8, 0x8, 0x7ff, 0x7fffffff, 0x9, 0x10, 0x6, 0x7, 0x2, 0x9, 0xfffffff9, 0x12, 0x4, 0x4, 0x200009, 0x1, 0x9, 0xe, 0x200, 0x2, 0x8000, 0x8, 0x8, 0x9, 0xe, 0x8, 0x6, 0x8, 0x88e, 0x2, 0x80000001, 0x6, 0x9, 0x5, 0x3, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0x5a0, 0x9, 0x1, 0x9, 0x8, 0x6, 0x101, 0x7, 0x4, 0x5, 0x6, 0x3a92, 0x2, 0xfffffffd, 0x6, 0x3, 0x8f3, 0x80000000, 0x6, 0xa7, 0x4, 0x8000000, 0x2, 0x6d4, 0x7, 0x10000, 0x1, 0xff, 0x7f, 0xb, 0x2, 0x3ff, 0x5, 0x0, 0x5, 0x3, 0x651, 0x5d, 0x800, 0x275, 0x7fff, 0x0, 0x7ff, 0xff, 0xdb, 0xf5, 0xd184, 0x7fffffff, 0x7, 0x6, 0x567e7134, 0x5e, 0x3, 0x6, 0x5, 0x3, 0x100, 0x4, 0x320f800, 0xde59, 0x1, 0x0, 0xa, 0xfff, 0x1000, 0x6, 0x7f90, 0x10000, 0x3, 0xc5, 0xb, 0x9, 0xa, 0x60, 0x30000000, 0x1, 0x7d67d4b5, 0x10, 0x1, 0x8, 0x4, 0x8637, 0x17, 0x2, 0x6, 0x9, 0xffffffff, 0x0, 0x200, 0x0, 0x2, 0x4, 0x7, 0x5, 0x10, 0xb, 0x7, 0xf21f, 0x2, 0x1, 0x8, 0x5, 0x74, 0x5, 0x0, 0x800, 0xe78f, 0x6, 0x6, 0x7, 0x6, 0x2, 0x7fff, 0x1000000, 0xfffffffd, 0x10000, 0x6, 0x4, 0x7, 0x1, 0xc, 0xb, 0x5, 0xe4, 0x1, 0x3, 0x8, 0x7, 0x4, 0x7ff, 0xfffffffa, 0xfff, 0x10, 0x1, 0x2, 0x6, 0x4, 0xff, 0x8, 0x14, 0x9, 0xe16, 0x4, 0x7, 0x0, 0x101, 0xffffff80, 0x6, 0x5, 0x80000000, 0x7, 0x6, 0x3ff, 0x0, 0x4d, 0x40000009, 0x0, 0x1, 0x9, 0x8, 0x4, 0x2, 0x7664, 0x8, 0x7fffffff, 0x5, 0x3, 0xa, 0x200, 0x8c3, 0x6, 0x401, 0x2, 0x9, 0x3, 0x2, 0x3, 0x8, 0x69d, 0x2, 0xfb8, 0xfffeffff, 0x5fd9, 0xddd6d59, 0x6, 0x401, 0x0, 0xb3, 0x3dcf, 0x6, 0xfffffffa, 0x40, 0x9, 0x6, 0x7, 0x34d, 0xfffffff7, 0x3, 0x6, 0x8, 0x8, 0x3, 0x81, 0x3, 0x9, 0x97, 0x10001, 0x47e, 0x6, 0x5b, 0x8, 0x0, 0x2, 0x1, 0x6, 0x101, 0x3ff, 0x200, 0x4, 0x2, 0x0, 0x1, 0x6, 0x4, 0x3, 0x1, 0x4, 0x3, 0xd4, 0xcab1, 0xfffffff6, 0xb, 0x9, 0x3, 0x8001, 0x4, 0x8, 0x6, 0x4, 0xfffffff8, 0x3ff, 0x7fff, 0x5, 0x10001, 0x9, 0x4, 0xed, 0x5, 0xffffffff, 0x5, 0x200, 0x2, 0x6511, 0x3b, 0xb, 0x46]}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x8}}]}}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.862524663s ago: executing program 3 (id=8823): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20000, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000680)="348b0d151f82060088a849c48906392be979b380765c3cd8dceedf36fd97f682e86f7af2152eac1120765ebbba235781753adcd760d72a92dd849fc0f756e06cd60e115141af769ec5c6e1425b515e698687161e30bc79f8073895988f8c1e5cd63a608f386c0f3bbc90ab2693ff6577eec98c079fc273eb62ee2891cc0d6703418cfb75b90d6e2e7b480af96d980a8298232f7eb843d3719f76bdafbcbf58952f6ea100523d4c490c708977cfb6aa208ea2e1fa2a23b4a2063baf20be6d91b9ccd433e5f1d1b554ea466d341d3b9ed1254f98bc4fb4abe8450ff44f9adba62b86d3687dda4a115dc3b05e99d7e8", 0x0, 0x109, 0x0, 0x0, 0xffffffffffffff18, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x22, 0xfff}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60040, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf96d, 0x3010, 0x4, 0xe6}, &(0x7f0000000040), &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) io_setup(0x6, &(0x7f0000000140)) gettid() r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) mq_getsetattr(r8, &(0x7f0000000380)={0x4, 0xfff, 0x8, 0xc15e}, 0x0) 2.778802281s ago: executing program 0 (id=8826): syz_emit_ethernet(0xd6, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@generic={0x3, "6b3e9ce31b87ac8d412fcd49d5e4604e597d671286da864214b4a974652cc180bec5c2d72a2216cf220aee92cc4f47316553e51e5c832937de0a5ac17ab74601bcc92c5b85a42591fd2e5614e17fbd432cc995f50a98dbb23cf2f540ece1afcaf0c60c7a1cf2faa4a3330b120ac2270a6bcbe5dcfd18161e3e4ce7b7cc4e2d6df68b8fdece0c0e0307be6eeab2b3d6d4ec4f87bc3809f63de192a6d36cb2294af8a03520938252ace3226042f25c18c0f2ed8de7a51dbb8f9d6dfc69403b1e72389a74f285ea3e04"}}}, 0x0) 2.734881196s ago: executing program 0 (id=8828): r0 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x2c020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 2.734346426s ago: executing program 0 (id=8829): r0 = socket$nl_route(0x10, 0x3, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0xad) sendmsg$nl_route(r0, 0x0, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000300)}, 0x20) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@sr0, 0xee00, &(0x7f0000000040)='./file0\x00') 2.629128367s ago: executing program 1 (id=8830): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000480), 0x66) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r3) socket$inet6(0xa, 0x80001, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) 2.577163141s ago: executing program 1 (id=8831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="16000000000000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x200000000000000) 2.541633745s ago: executing program 1 (id=8832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f00000004c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001440)='/', 0x1}], 0x1}}], 0x2, 0x40080c0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/59, 0x3b, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0xf7fffffc, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r6}, 0x4) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r9}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r9, 0x8}, &(0x7f0000000380)=0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r6}, 0x4) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000000)={0x9, 0x7, 0x1000002, 0x101, 0xa17c, 0xffffff56}) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.990196271s ago: executing program 3 (id=8833): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000000000000000000009000000000000ff00000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d28616573292900"/235, @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.949216635s ago: executing program 3 (id=8834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 1.935012946s ago: executing program 3 (id=8835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x10) r9 = syz_io_uring_setup(0x4b7, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r9, 0x3498, 0x3b01, 0xffff000000000000, 0x0, 0x0) dup3(r2, r4, 0x0) 1.855404734s ago: executing program 5 (id=8838): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x206000, 0x0) signalfd(r4, &(0x7f00000002c0)={[0xe3e0]}, 0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) 1.673939482s ago: executing program 1 (id=8839): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xeeb0ae68258ecc1f, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd93, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40002021}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4861) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x19b, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000ef170100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff0cb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x4, 0x2, {0xa, 0x4e24, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}}, 0x3a) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) getsockopt(r3, 0x111, 0x3, 0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) flock(r4, 0xd) openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket(0x2, 0x2, 0x1) 954.889884ms ago: executing program 3 (id=8840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x10) r9 = syz_io_uring_setup(0x4b7, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x40289}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r9, 0x3498, 0x3b01, 0xffff000000000000, 0x0, 0x0) dup3(r2, r4, 0x0) 813.294199ms ago: executing program 2 (id=8822): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f0000000080)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) (fail_nth: 1) 794.14985ms ago: executing program 5 (id=8841): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) 735.015706ms ago: executing program 5 (id=8842): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x5, 0xc}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) ppoll(&(0x7f0000000100)=[{r0, 0x63a7}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000002000000e27f000003"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="000003a800c1699b000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpgid(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 502.7622ms ago: executing program 2 (id=8843): r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20000, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000680)="348b0d151f82060088a849c48906392be979b380765c3cd8dceedf36fd97f682e86f7af2152eac1120765ebbba235781753adcd760d72a92dd849fc0f756e06cd60e115141af769ec5c6e1425b515e698687161e30bc79f8073895988f8c1e5cd63a608f386c0f3bbc90ab2693ff6577eec98c079fc273eb62ee2891cc0d6703418cfb75b90d6e2e7b480af96d980a8298232f7eb843d3719f76bdafbcbf58952f6ea100523d4c490c708977cfb6aa208ea2e1fa2a23b4a2063baf20be6d91b9ccd433e5f1d1b554ea466d341d3b9ed1254f98bc4fb4abe8450ff44f9adba62b86d3687dda4a115dc3b05e99d7e8", 0x0, 0x109, 0x0, 0x0, 0xffffffffffffff18, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x22, 0xfff}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60040, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf96d, 0x3010, 0x4, 0xe6}, &(0x7f0000000040), &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x0) io_setup(0x6, &(0x7f0000000140)) gettid() r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) mq_getsetattr(r8, &(0x7f0000000380)={0x4, 0xfff, 0x8, 0xc15e}, 0x0) 483.134921ms ago: executing program 0 (id=8844): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 267.562483ms ago: executing program 5 (id=8845): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 231.378037ms ago: executing program 0 (id=8846): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e8800008500000070000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x0, 0x2, 0x1}) 203.63163ms ago: executing program 5 (id=8847): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)={0x24, r3, 0x62c21a4ade68aba1, 0x70bd27, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x57}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 152.766175ms ago: executing program 0 (id=8848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f00000004c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001440)='/', 0x1}], 0x1}}], 0x2, 0x40080c0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/59, 0x3b, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc3600040543a34b195c6a8fc054282cd41b264906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af41000000000000007f5ab0d534b8d63e4ca3be71f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733097f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b017d23c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b9ee4a0a0b9636bef4c23788494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74587100e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f26c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada4764320889000000000000000000000000000000a790af4fc17872b55b10db99e212d18193235659df45627da300959eafc8bfb44f70d250f8f2e86532700254c9a8b14999f59c8b9034c4bb2448eaeff5db21d4a7f3d974790d4c3cba7c402f50585b9289d86400679e5c2bcacb2841ca074d51fdb4a29e84d72b6c996cfbee06aa52cd632e82ba068e8e1572ef2eb414ba5fccfc3c03e64df6a9cc3936c604aa2c0e2ec7b777475023f29b146af003472ce146a5ff997ba53c51026c0096154f9280a34bbf21d66f57a250b5397766122fc86950ce5252e96868cd04df54764cf2082153d6cedd8aaf9700c734aa4a1cb33a2e0a13c5687be4de327511bff9816d13c3219dac1c1535f10243db6f96960ea6a621f5e1b7babbedf0a6bf0cf74123d2e78d01be2b048883a2459eec630fb0293d28d9799fd3a792caff693fd9f002f14c43fb5a1051cc686b7f114d7927eed559bdf2e8ddea3e61d5d942b63fe90230b2e1948fc563ef94d437281671d2fe5032d2a091fa842b0af2e116ba"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x3}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0xf7fffffc, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r5}, 0x4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r8}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r8, 0x8}, &(0x7f0000000380)=0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r5}, 0x4) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x9, 0x7, 0x1000002, 0x101, 0xa17c, 0xffffff56}) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 152.449535ms ago: executing program 5 (id=8849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x10) r9 = syz_io_uring_setup(0x4b7, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r9, 0x3498, 0x3b01, 0xffff000000000000, 0x0, 0x0) dup3(r2, r4, 0x0) 0s ago: executing program 3 (id=8850): socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setpgid(0x0, 0x0) syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz7GtwjAYBOB7eQlJCsRKsAENm7APFQ1TULEGJWMEQWyYACGk7yvs8y+dLYev+nul4bn+l9M26zk0ZbC8DJmmsdbGdG3OSRbHW/rHpN60X5Vw7ZPNWPvtvB2m7v1wszt97mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DvuAQAA//8yUgpN") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) kernel console output (not intermixed with test programs): [T27515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.864271][T27515] __sock_sendmsg+0x145/0x180 [ 483.864321][T27515] ____sys_sendmsg+0x31e/0x4e0 [ 483.864348][T27515] ___sys_sendmsg+0x17b/0x1d0 [ 483.864435][T27515] __x64_sys_sendmsg+0xd4/0x160 [ 483.864465][T27515] x64_sys_call+0x191e/0x3000 [ 483.864493][T27515] do_syscall_64+0xd2/0x200 [ 483.864520][T27515] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 483.864592][T27515] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 483.864633][T27515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.864660][T27515] RIP: 0033:0x7f39e816f6c9 [ 483.864679][T27515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.864778][T27515] RSP: 002b:00007f39e6bcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.864801][T27515] RAX: ffffffffffffffda RBX: 00007f39e83c5fa0 RCX: 00007f39e816f6c9 [ 483.864817][T27515] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 483.864834][T27515] RBP: 00007f39e6bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 483.864847][T27515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.864897][T27515] R13: 00007f39e83c6038 R14: 00007f39e83c5fa0 R15: 00007fff18df73c8 [ 483.864961][T27515] [ 483.867905][T27513] loop5: detected capacity change from 0 to 4096 [ 483.923022][T27520] loop3: detected capacity change from 0 to 2048 [ 483.929018][T27513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 483.934675][T27521] rdma_rxe: rxe_newlink: failed to add lo [ 484.158689][T27529] ALSA: seq fatal error: cannot create timer (-19) [ 484.318743][T27540] sz1: rxe_newlink: already configured on lo [ 484.364516][T27542] loop5: detected capacity change from 0 to 512 [ 484.372712][T27542] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 484.409382][T27542] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8281'. [ 484.426060][T27542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12592 sclass=netlink_route_socket pid=27542 comm=+}[@ [ 484.433863][T27520] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 484.462174][T27520] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 484.474830][T27520] EXT4-fs (loop3): This should not happen!! Data will be lost [ 484.474830][T27520] [ 484.484584][T27520] EXT4-fs (loop3): Total free blocks count 0 [ 484.490738][T27520] EXT4-fs (loop3): Free/Dirty block details [ 484.496670][T27520] EXT4-fs (loop3): free_blocks=2415919104 [ 484.502435][T27520] EXT4-fs (loop3): dirty_blocks=8208 [ 484.507739][T27520] EXT4-fs (loop3): Block reservation details [ 484.513782][T27520] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 484.539513][T27531] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 484.552421][T27531] EXT4-fs (loop3): This should not happen!! Data will be lost [ 484.552421][T27531] [ 484.697930][T27565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8293'. [ 484.764355][T27572] loop5: detected capacity change from 0 to 512 [ 484.779023][T27572] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 484.808822][T27572] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.8296: bad orphan inode 131083 [ 484.879076][T27587] rdma_rxe: rxe_newlink: failed to add lo [ 485.031382][T27604] loop5: detected capacity change from 0 to 512 [ 485.038412][T27604] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 485.051250][T27604] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 485.066228][T27604] EXT4-fs (loop5): 1 truncate cleaned up [ 485.129697][T27607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8307'. [ 485.319022][T27622] rdma_rxe: rxe_newlink: failed to add lo [ 485.424917][T24989] Bluetooth: hci0: Frame reassembly failed (-84) [ 485.821311][T27633] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8319'. [ 485.845655][T27633] netlink: 'syz.0.8319': attribute type 2 has an invalid length. [ 485.853472][T27633] netlink: 'syz.0.8319': attribute type 2 has an invalid length. [ 485.861231][T27633] netlink: 'syz.0.8319': attribute type 1 has an invalid length. [ 485.868988][T27633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8319'. [ 485.879431][T27635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8320'. [ 485.943487][T27638] hub 9-0:1.0: USB hub found [ 485.951884][T27638] hub 9-0:1.0: 8 ports detected [ 485.966580][T27640] loop5: detected capacity change from 0 to 128 [ 485.987621][T27640] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.009788][T27640] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.8321: No space for directory leaf checksum. Please run e2fsck -D. [ 486.025168][T27640] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz.5.8321: Directory block failed checksum [ 486.050067][T27641] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.8321: No space for directory leaf checksum. Please run e2fsck -D. [ 486.065515][T27641] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz.5.8321: Directory block failed checksum [ 486.081193][T27640] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.8321: No space for directory leaf checksum. Please run e2fsck -D. [ 486.096650][T27640] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.8321: checksumming directory block 0 [ 486.100101][T27645] FAULT_INJECTION: forcing a failure. [ 486.100101][T27645] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.121992][T27645] CPU: 1 UID: 0 PID: 27645 Comm: syz.3.8322 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 486.122041][T27645] Tainted: [W]=WARN [ 486.122049][T27645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.122064][T27645] Call Trace: [ 486.122070][T27645] [ 486.122077][T27645] __dump_stack+0x1d/0x30 [ 486.122100][T27645] dump_stack_lvl+0xe8/0x140 [ 486.122120][T27645] dump_stack+0x15/0x1b [ 486.122212][T27645] should_fail_ex+0x265/0x280 [ 486.122247][T27645] should_fail_alloc_page+0xf2/0x100 [ 486.122277][T27645] __alloc_frozen_pages_noprof+0xff/0x360 [ 486.122394][T27645] alloc_pages_mpol+0xb3/0x260 [ 486.122416][T27645] vma_alloc_folio_noprof+0x1aa/0x300 [ 486.122439][T27645] handle_mm_fault+0xec2/0x2be0 [ 486.122551][T27645] ? vma_start_read+0x141/0x1f0 [ 486.122587][T27645] do_user_addr_fault+0x630/0x1080 [ 486.122659][T27645] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 486.122686][T27645] exc_page_fault+0x62/0xa0 [ 486.122718][T27645] asm_exc_page_fault+0x26/0x30 [ 486.122737][T27645] RIP: 0033:0x7f39e811cbbb [ 486.122767][T27645] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 486.122785][T27645] RSP: 002b:00007f39e6bcce10 EFLAGS: 00010246 [ 486.122801][T27645] RAX: 00007f39e6bcef30 RBX: 00007f39e8397640 RCX: 0000000000000000 [ 486.122813][T27645] RDX: 00007f39e6bcef78 RSI: 00007f39e81cedf8 RDI: 00007f39e6bcce30 [ 486.122826][T27645] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 486.122838][T27645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.122926][T27645] R13: 00007f39e83c6038 R14: 00007f39e83c5fa0 R15: 00007fff18df73c8 [ 486.122945][T27645] [ 486.122959][T27645] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 486.134879][T27641] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.8321: No space for directory leaf checksum. Please run e2fsck -D. [ 486.320097][T27641] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.8321: checksumming directory block 0 [ 486.361389][ T29] kauditd_printk_skb: 1072 callbacks suppressed [ 486.361406][ T29] audit: type=1326 audit(1763218518.472:48531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27652 comm="syz.5.8325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 486.391530][ T29] audit: type=1326 audit(1763218518.502:48532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27652 comm="syz.5.8325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 486.419552][ T29] audit: type=1326 audit(1763218518.502:48533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27652 comm="syz.5.8325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 486.419750][T27657] sz1: rxe_newlink: already configured on lo [ 486.443268][ T29] audit: type=1326 audit(1763218518.502:48534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27652 comm="syz.5.8325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 486.473023][ T29] audit: type=1326 audit(1763218518.502:48535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27652 comm="syz.5.8325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 486.496507][ T29] audit: type=1326 audit(1763218518.502:48536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27652 comm="syz.5.8325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 486.520176][ T29] audit: type=1326 audit(1763218518.502:48537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27652 comm="syz.5.8325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 486.543768][ T29] audit: type=1326 audit(1763218518.502:48538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27652 comm="syz.5.8325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 486.567364][ T29] audit: type=1326 audit(1763218518.502:48539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27652 comm="syz.5.8325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 486.591199][ T29] audit: type=1326 audit(1763218518.502:48540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27652 comm="syz.5.8325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 486.712443][T27671] loop2: detected capacity change from 0 to 256 [ 486.728814][T27671] vfat: Unknown parameter 'ÿÿ0x0000000000000000' [ 486.807511][T27676] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 487.055347][T27679] loop5: detected capacity change from 0 to 512 [ 487.071843][T27679] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.105338][T27683] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8336'. [ 487.114832][T27683] netlink: 'syz.5.8336': attribute type 2 has an invalid length. [ 487.122602][T27683] netlink: 'syz.5.8336': attribute type 2 has an invalid length. [ 487.130427][T27683] netlink: 'syz.5.8336': attribute type 1 has an invalid length. [ 487.138151][T27683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8336'. [ 487.150560][T27683] hub 9-0:1.0: USB hub found [ 487.155271][T27683] hub 9-0:1.0: 8 ports detected [ 487.189097][T27685] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8337'. [ 487.279842][T27691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.288422][T27691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.394348][T27698] netlink: 'syz.3.8342': attribute type 10 has an invalid length. [ 487.439884][T27700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 487.447149][T27700] IPv6: NLM_F_CREATE should be set when creating new route [ 487.455208][T27700] lo: entered allmulticast mode [ 487.462125][T27700] tunl0: entered allmulticast mode [ 487.468611][T27700] gre0: entered allmulticast mode [ 487.478565][T27700] gretap0: entered allmulticast mode [ 487.481228][T27704] sz1: rxe_newlink: already configured on lo [ 487.490017][T27700] erspan0: entered allmulticast mode [ 487.497757][T27700] ip_vti0: entered allmulticast mode [ 487.500201][T26260] Bluetooth: hci0: command 0x1003 tx timeout [ 487.504861][T27700] ip6_vti0: entered allmulticast mode [ 487.509112][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 487.528005][T27700] sit0: entered allmulticast mode [ 487.535909][T27700] ip6tnl0: entered allmulticast mode [ 487.543305][T27700] ip6gre0: entered allmulticast mode [ 487.550445][T27700] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.557699][T27700] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.565091][T27700] bridge0: entered allmulticast mode [ 487.572874][T27700] vcan0: entered allmulticast mode [ 487.578796][T27700] .`: entered allmulticast mode [ 487.583872][T27700] bond_slave_0: entered allmulticast mode [ 487.590085][T27700] bond_slave_1: entered allmulticast mode [ 487.595939][T27700] dummy0: entered allmulticast mode [ 487.601976][T27700] nlmon0: entered allmulticast mode [ 487.608665][T27700] caif0: entered allmulticast mode [ 487.613729][T27713] ALSA: seq fatal error: cannot create timer (-19) [ 487.620716][T27700] batadv0: entered allmulticast mode [ 487.646072][T27700] vxcan0: entered allmulticast mode [ 487.652476][T27700] vxcan1: entered allmulticast mode [ 487.653469][T27719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8350'. [ 487.658881][T27700] veth0: entered allmulticast mode [ 487.673893][T27700] veth1: entered allmulticast mode [ 487.674355][T27717] rdma_rxe: rxe_newlink: failed to add lo [ 487.685591][T27700] wg0: entered allmulticast mode [ 487.698037][T27700] wg1: entered allmulticast mode [ 487.705404][T27700] wg2: entered allmulticast mode [ 487.712840][T27700] veth0_to_bridge: entered allmulticast mode [ 487.726023][T27724] loop2: detected capacity change from 0 to 512 [ 487.733614][T27700] veth1_to_bridge: entered allmulticast mode [ 487.745293][T27700] veth0_to_bond: entered allmulticast mode [ 487.764035][T27724] ext4 filesystem being mounted at /497/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.765685][T27700] veth1_to_bond: entered allmulticast mode [ 487.788222][T27700] veth0_to_team: entered allmulticast mode [ 487.804396][T27700] team_slave_0: entered allmulticast mode [ 487.811583][T27700] veth1_to_team: entered allmulticast mode [ 487.828169][T27700] team_slave_1: entered allmulticast mode [ 487.840070][T27700] veth0_to_batadv: entered allmulticast mode [ 487.847957][T27700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.856470][T27700] batadv_slave_0: entered allmulticast mode [ 487.864188][T27700] veth1_to_batadv: entered allmulticast mode [ 487.871644][T27700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.879069][T27700] batadv_slave_1: entered allmulticast mode [ 487.886745][T27700] xfrm0: entered allmulticast mode [ 487.893734][T27700] veth0_to_hsr: entered allmulticast mode [ 487.901522][T27700] hsr_slave_0: entered allmulticast mode [ 487.908474][T27700] veth1_to_hsr: entered allmulticast mode [ 487.915417][T27700] hsr_slave_1: entered allmulticast mode [ 487.942733][T27700] veth1_virt_wifi: entered allmulticast mode [ 487.959002][T27700] veth0_virt_wifi: entered allmulticast mode [ 487.966663][T27700] veth1_macvtap: entered allmulticast mode [ 487.976193][T27740] loop5: detected capacity change from 0 to 512 [ 487.983273][T27700] veth0_macvtap: entered allmulticast mode [ 487.989858][T27740] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 488.001786][T27700] macvtap0: entered allmulticast mode [ 488.007711][T27740] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.8356: bad orphan inode 131083 [ 488.019479][T27700] macsec0: entered allmulticast mode [ 488.026100][T27700] geneve0: entered allmulticast mode [ 488.033056][T27700] geneve1: entered allmulticast mode [ 488.038874][T27700] geneve2: entered allmulticast mode [ 488.050618][T27700] sit1: entered allmulticast mode [ 488.061087][T27700] veth2: entered allmulticast mode [ 488.066358][T27700] veth3: entered allmulticast mode [ 488.071612][T27700] ip6tnl1: entered allmulticast mode [ 488.077149][T27700] syztnl0: entered allmulticast mode [ 488.084529][T27700] bridge1: entered allmulticast mode [ 488.091345][T27700] netdevsim netdevsim3 eth0: entered allmulticast mode [ 488.098510][T27700] netdevsim netdevsim3 eth1: entered allmulticast mode [ 488.105962][T27700] netdevsim netdevsim3 eth2: entered allmulticast mode [ 488.113088][T27700] netdevsim netdevsim3 eth3: entered allmulticast mode [ 488.120864][T27743] rdma_rxe: rxe_newlink: failed to add lo [ 488.153457][T25003] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.164716][T25003] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.175846][T27709] lo speed is unknown, defaulting to 1000 [ 488.196162][T27709] lo speed is unknown, defaulting to 1000 [ 488.204284][T25003] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.227251][T25003] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.313282][T27754] sctp: [Deprecated]: syz.3.8362 (pid 27754) Use of int in max_burst socket option. [ 488.313282][T27754] Use struct sctp_assoc_value instead [ 488.350862][T27756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8363'. [ 488.458005][T27768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.466635][T27768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.489753][T27772] loop3: detected capacity change from 0 to 512 [ 488.500022][T27772] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 488.515382][T27772] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 488.530146][T27772] EXT4-fs (loop3): 1 truncate cleaned up [ 488.539304][T27774] ALSA: seq fatal error: cannot create timer (-19) [ 488.752983][T27785] lo: entered allmulticast mode [ 488.758103][T27785] tunl0: entered allmulticast mode [ 488.763381][T27785] gre0: entered allmulticast mode [ 488.768475][T27785] gretap0: entered allmulticast mode [ 488.774226][T27785] erspan0: entered allmulticast mode [ 488.779719][T27785] ip_vti0: entered allmulticast mode [ 488.785205][T27785] ip6_vti0: entered allmulticast mode [ 488.791103][T27785] sit0: entered allmulticast mode [ 488.796220][T27785] ip6tnl0: entered allmulticast mode [ 488.801728][T27785] ip6gre0: entered allmulticast mode [ 488.807146][T27785] syz_tun: entered allmulticast mode [ 488.812524][T27785] bridge0: entered allmulticast mode [ 488.818079][T27785] vcan0: entered allmulticast mode [ 488.823326][T27785] team0: entered allmulticast mode [ 488.828503][T27785] team_slave_0: entered allmulticast mode [ 488.834260][T27785] team_slave_1: entered allmulticast mode [ 488.840408][T27785] dummy0: entered allmulticast mode [ 488.845773][T27785] nlmon0: entered allmulticast mode [ 488.851110][T27785] caif0: entered allmulticast mode [ 488.856461][T27785] vxcan0: entered allmulticast mode [ 488.861754][T27785] vxcan1: entered allmulticast mode [ 488.867026][T27785] veth0: entered allmulticast mode [ 488.872269][T27785] veth1: entered allmulticast mode [ 488.877572][T27785] wg0: entered allmulticast mode [ 488.882643][T27785] wg1: entered allmulticast mode [ 488.888493][T27785] veth0_to_bridge: entered allmulticast mode [ 488.894642][T27785] veth1_to_bridge: entered allmulticast mode [ 488.900847][T27785] veth0_to_bond: entered allmulticast mode [ 488.906834][T27785] bond_slave_0: entered allmulticast mode [ 488.912679][T27785] veth1_to_bond: entered allmulticast mode [ 488.918703][T27785] bond_slave_1: entered allmulticast mode [ 488.924721][T27785] veth0_to_team: entered allmulticast mode [ 488.930754][T27785] veth1_to_team: entered allmulticast mode [ 488.936905][T27785] veth0_to_batadv: entered allmulticast mode [ 488.943077][T27785] batadv_slave_0: entered allmulticast mode [ 488.949044][T27785] veth1_to_batadv: entered allmulticast mode [ 488.955189][T27785] batadv_slave_1: entered allmulticast mode [ 488.961234][T27785] xfrm0: entered allmulticast mode [ 488.966456][T27785] veth0_to_hsr: entered allmulticast mode [ 488.972269][T27785] hsr_slave_0: entered allmulticast mode [ 488.978074][T27785] hsr0: entered allmulticast mode [ 488.983307][T27785] veth1_virt_wifi: entered allmulticast mode [ 488.989419][T27785] veth0_virt_wifi: entered allmulticast mode [ 488.995529][T27785] veth1_vlan: entered allmulticast mode [ 489.001176][T27785] veth0_vlan: entered allmulticast mode [ 489.006877][T27785] vlan0: entered allmulticast mode [ 489.012102][T27785] vlan1: entered allmulticast mode [ 489.017313][T27785] macvlan0: entered allmulticast mode [ 489.022787][T27785] macvlan1: entered allmulticast mode [ 489.028264][T27785] ipvlan0: entered allmulticast mode [ 489.033781][T27785] ipvlan1: entered allmulticast mode [ 489.039177][T27785] veth1_macvtap: entered allmulticast mode [ 489.045137][T27785] veth0_macvtap: entered allmulticast mode [ 489.051079][T27785] macvtap0: entered allmulticast mode [ 489.056610][T27785] macsec0: entered allmulticast mode [ 489.062078][T27785] geneve0: entered allmulticast mode [ 489.067444][T27785] geneve1: entered allmulticast mode [ 489.075477][T27785] geneve2: entered allmulticast mode [ 489.081486][T27785] syztnl1: entered allmulticast mode [ 489.086839][T27785] bond0: entered allmulticast mode [ 489.092125][T27785] ip6_vti1: entered allmulticast mode [ 489.097564][T27785] syzkaller0: entered allmulticast mode [ 489.103266][T27785] ieee802154 phy0 wpan0: entered allmulticast mode [ 489.109874][T27785] veth2: entered allmulticast mode [ 489.115150][T27785] veth3: entered allmulticast mode [ 489.145088][T27785] netdevsim netdevsim2 eth0: entered allmulticast mode [ 489.160373][T27785] netdevsim netdevsim2 eth1: entered allmulticast mode [ 489.175708][T27785] netdevsim netdevsim2 eth2: entered allmulticast mode [ 489.183673][T27785] netdevsim netdevsim2 eth3: entered allmulticast mode [ 489.191410][T24984] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.199999][T24984] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.217882][T24984] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.226722][T24984] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.241867][T27798] lo speed is unknown, defaulting to 1000 [ 489.248652][T27798] lo speed is unknown, defaulting to 1000 [ 489.260129][T27813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8384'. [ 489.279928][T27815] FAULT_INJECTION: forcing a failure. [ 489.279928][T27815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.293154][T27815] CPU: 0 UID: 0 PID: 27815 Comm: syz.3.8385 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 489.293231][T27815] Tainted: [W]=WARN [ 489.293239][T27815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 489.293254][T27815] Call Trace: [ 489.293262][T27815] [ 489.293271][T27815] __dump_stack+0x1d/0x30 [ 489.293314][T27815] dump_stack_lvl+0xe8/0x140 [ 489.293385][T27815] dump_stack+0x15/0x1b [ 489.293406][T27815] should_fail_ex+0x265/0x280 [ 489.293446][T27815] should_fail+0xb/0x20 [ 489.293510][T27815] should_fail_usercopy+0x1a/0x20 [ 489.293542][T27815] _copy_from_user+0x1c/0xb0 [ 489.293574][T27815] ___sys_sendmsg+0xc1/0x1d0 [ 489.293620][T27815] __x64_sys_sendmsg+0xd4/0x160 [ 489.293643][T27815] x64_sys_call+0x191e/0x3000 [ 489.293666][T27815] do_syscall_64+0xd2/0x200 [ 489.293693][T27815] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 489.293729][T27815] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 489.293801][T27815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.293828][T27815] RIP: 0033:0x7f39e816f6c9 [ 489.293847][T27815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.293923][T27815] RSP: 002b:00007f39e6bcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.293946][T27815] RAX: ffffffffffffffda RBX: 00007f39e83c5fa0 RCX: 00007f39e816f6c9 [ 489.293958][T27815] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 489.293973][T27815] RBP: 00007f39e6bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 489.293985][T27815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.293996][T27815] R13: 00007f39e83c6038 R14: 00007f39e83c5fa0 R15: 00007fff18df73c8 [ 489.294061][T27815] [ 489.294347][T27813] team0: Port device team_slave_1 removed [ 489.554925][T27821] loop2: detected capacity change from 0 to 512 [ 489.561859][T27821] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 489.572855][T27821] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.8387: bad orphan inode 131083 [ 489.668536][T27819] loop3: detected capacity change from 0 to 8192 [ 489.702224][T27819] loop3: p1 p2 p4 < > [ 489.706346][T27819] loop3: partition table partially beyond EOD, truncated [ 489.713576][T27819] loop3: p1 start 16777216 is beyond EOD, truncated [ 489.720201][T27819] loop3: p2 size 515840 extends beyond EOD, truncated [ 489.727647][T27819] loop3: p4 start 16777216 is beyond EOD, truncated [ 489.744670][T27834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.763674][T27834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.798084][T27838] loop5: detected capacity change from 0 to 512 [ 489.814975][T27838] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.877863][T27849] loop3: detected capacity change from 0 to 512 [ 489.896511][T27849] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.897507][T27853] loop5: detected capacity change from 0 to 512 [ 489.914394][T27853] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 489.926605][T27853] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.8398: bad orphan inode 131083 [ 489.976006][T27860] loop3: detected capacity change from 0 to 256 [ 489.983104][T27860] vfat: Unknown parameter 'ÿÿ0x0000000000000000' [ 490.031039][T27866] rdma_rxe: rxe_newlink: failed to add lo [ 490.037521][T27868] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8405'. [ 490.046872][T27868] netlink: 'syz.5.8405': attribute type 2 has an invalid length. [ 490.054686][T27868] netlink: 'syz.5.8405': attribute type 2 has an invalid length. [ 490.062641][T27868] netlink: 'syz.5.8405': attribute type 1 has an invalid length. [ 490.071553][T27868] hub 9-0:1.0: USB hub found [ 490.076302][T27868] hub 9-0:1.0: 8 ports detected [ 490.099295][T27872] netlink: 'syz.3.8407': attribute type 10 has an invalid length. [ 490.202291][T27879] syztnl0: entered allmulticast mode [ 490.207773][T27879] netdevsim netdevsim5 eth0: entered allmulticast mode [ 490.218006][T27879] netdevsim netdevsim5 eth1: entered allmulticast mode [ 490.230237][T27879] netdevsim netdevsim5 eth2: entered allmulticast mode [ 490.237438][T27879] netdevsim netdevsim5 eth3: entered allmulticast mode [ 490.244440][T27879] veth2: entered allmulticast mode [ 490.249699][T27879] veth3: entered allmulticast mode [ 490.262249][T27879] ip6tnl1: entered allmulticast mode [ 490.307681][T27898] rdma_rxe: rxe_newlink: failed to add lo [ 490.333746][T27901] rdma_rxe: rxe_newlink: failed to add lo [ 490.357104][T27903] netlink: 'syz.5.8418': attribute type 10 has an invalid length. [ 490.365323][T27903] dummy0: left allmulticast mode [ 490.371127][T27903] team0: Port device dummy0 removed [ 490.377503][T27903] dummy0: entered allmulticast mode [ 490.382892][T27903] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 490.395958][T27905] syzkaller0: entered allmulticast mode [ 490.402739][T27905] syzkaller0: entered promiscuous mode [ 490.411211][T27905] syzkaller0 (unregistering): left allmulticast mode [ 490.417945][T27905] syzkaller0 (unregistering): left promiscuous mode [ 490.574448][T27926] rdma_rxe: rxe_newlink: failed to add lo [ 490.609941][T27928] loop2: detected capacity change from 0 to 512 [ 490.618352][T27928] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.8430: inode has both inline data and extents flags [ 490.632552][T27928] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8430: couldn't read orphan inode 15 (err -117) [ 490.656911][T27933] FAULT_INJECTION: forcing a failure. [ 490.656911][T27933] name failslab, interval 1, probability 0, space 0, times 0 [ 490.669661][T27933] CPU: 1 UID: 0 PID: 27933 Comm: syz.0.8431 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 490.669691][T27933] Tainted: [W]=WARN [ 490.669697][T27933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.669768][T27933] Call Trace: [ 490.669776][T27933] [ 490.669785][T27933] __dump_stack+0x1d/0x30 [ 490.669810][T27933] dump_stack_lvl+0xe8/0x140 [ 490.669834][T27933] dump_stack+0x15/0x1b [ 490.669856][T27933] should_fail_ex+0x265/0x280 [ 490.669907][T27933] ? genl_start+0x117/0x390 [ 490.669976][T27933] should_failslab+0x8c/0xb0 [ 490.670006][T27933] __kmalloc_cache_noprof+0x4c/0x4a0 [ 490.670099][T27933] genl_start+0x117/0x390 [ 490.670133][T27933] __netlink_dump_start+0x334/0x520 [ 490.670268][T27933] genl_family_rcv_msg_dumpit+0x115/0x180 [ 490.670333][T27933] ? __pfx_genl_start+0x10/0x10 [ 490.670364][T27933] ? __pfx_genl_dumpit+0x10/0x10 [ 490.670394][T27933] ? __pfx_genl_done+0x10/0x10 [ 490.670450][T27933] genl_rcv_msg+0x3f0/0x460 [ 490.670475][T27933] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 490.670499][T27933] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 490.670527][T27933] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 490.670596][T27933] netlink_rcv_skb+0x123/0x220 [ 490.670646][T27933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.670683][T27933] genl_rcv+0x28/0x40 [ 490.670710][T27933] netlink_unicast+0x5c0/0x690 [ 490.670757][T27933] netlink_sendmsg+0x58b/0x6b0 [ 490.670784][T27933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.670808][T27933] __sock_sendmsg+0x145/0x180 [ 490.670910][T27933] ____sys_sendmsg+0x31e/0x4e0 [ 490.670943][T27933] ___sys_sendmsg+0x17b/0x1d0 [ 490.671030][T27933] __x64_sys_sendmsg+0xd4/0x160 [ 490.671053][T27933] x64_sys_call+0x191e/0x3000 [ 490.671080][T27933] do_syscall_64+0xd2/0x200 [ 490.671134][T27933] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 490.671178][T27933] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 490.671247][T27933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.671275][T27933] RIP: 0033:0x7fe9fa3df6c9 [ 490.671295][T27933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.671318][T27933] RSP: 002b:00007fe9f8e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.671425][T27933] RAX: ffffffffffffffda RBX: 00007fe9fa635fa0 RCX: 00007fe9fa3df6c9 [ 490.671511][T27933] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 490.671524][T27933] RBP: 00007fe9f8e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 490.671537][T27933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.671552][T27933] R13: 00007fe9fa636038 R14: 00007fe9fa635fa0 R15: 00007ffdeb4ae268 [ 490.671576][T27933] [ 491.042364][T27948] loop2: detected capacity change from 0 to 1024 [ 491.067160][T27948] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 491.068747][T27952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.083830][T27952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.087739][T27948] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8437: bg 0: block 88: padding at end of block bitmap is not set [ 491.174616][T27960] rdma_rxe: rxe_newlink: failed to add lo [ 491.266500][T27967] __nla_validate_parse: 1 callbacks suppressed [ 491.266517][T27967] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8442'. [ 491.301249][T27967] ALSA: seq fatal error: cannot create timer (-19) [ 491.336737][T27970] rdma_rxe: rxe_newlink: failed to add lo [ 491.475170][ T29] kauditd_printk_skb: 751 callbacks suppressed [ 491.475188][ T29] audit: type=1326 audit(1763218523.581:49292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27982 comm="syz.3.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 491.505755][ T29] audit: type=1326 audit(1763218523.581:49293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27982 comm="syz.3.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 491.529393][ T29] audit: type=1326 audit(1763218523.581:49294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27982 comm="syz.3.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 491.553316][ T29] audit: type=1326 audit(1763218523.581:49295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27982 comm="syz.3.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 491.577134][ T29] audit: type=1326 audit(1763218523.581:49296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27982 comm="syz.3.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 491.600738][ T29] audit: type=1326 audit(1763218523.581:49297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27982 comm="syz.3.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 491.624340][ T29] audit: type=1326 audit(1763218523.581:49298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27982 comm="syz.3.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 491.624601][T27988] loop3: detected capacity change from 0 to 1024 [ 491.647881][ T29] audit: type=1326 audit(1763218523.581:49299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27982 comm="syz.3.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 491.647921][ T29] audit: type=1326 audit(1763218523.591:49300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27982 comm="syz.3.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 491.655205][T27988] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 491.677918][ T29] audit: type=1326 audit(1763218523.591:49301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27982 comm="syz.3.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 491.703568][T27988] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #11: comm syz.3.8448: iget: bogus i_mode (1) [ 491.747576][T27988] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8448: couldn't read orphan inode 11 (err -117) [ 491.827001][T27998] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8453'. [ 491.866866][T28003] FAULT_INJECTION: forcing a failure. [ 491.866866][T28003] name failslab, interval 1, probability 0, space 0, times 0 [ 491.879773][T28003] CPU: 0 UID: 0 PID: 28003 Comm: syz.5.8454 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 491.879857][T28003] Tainted: [W]=WARN [ 491.879866][T28003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 491.879882][T28003] Call Trace: [ 491.879925][T28003] [ 491.879935][T28003] __dump_stack+0x1d/0x30 [ 491.879964][T28003] dump_stack_lvl+0xe8/0x140 [ 491.879990][T28003] dump_stack+0x15/0x1b [ 491.880071][T28003] should_fail_ex+0x265/0x280 [ 491.880124][T28003] should_failslab+0x8c/0xb0 [ 491.880161][T28003] __kmalloc_noprof+0xa5/0x570 [ 491.880297][T28003] ? alloc_pipe_info+0x1c9/0x350 [ 491.880333][T28003] alloc_pipe_info+0x1c9/0x350 [ 491.880368][T28003] splice_direct_to_actor+0x592/0x680 [ 491.880457][T28003] ? __pfx_direct_splice_actor+0x10/0x10 [ 491.880489][T28003] ? selinux_file_permission+0x2f0/0x320 [ 491.880541][T28003] do_splice_direct+0xda/0x150 [ 491.880588][T28003] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 491.880727][T28003] do_sendfile+0x380/0x650 [ 491.880762][T28003] __x64_sys_sendfile64+0xb8/0x150 [ 491.880879][T28003] x64_sys_call+0x2bb4/0x3000 [ 491.880907][T28003] do_syscall_64+0xd2/0x200 [ 491.880998][T28003] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 491.881109][T28003] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 491.881220][T28003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.881295][T28003] RIP: 0033:0x7fd9dba7f6c9 [ 491.881386][T28003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.881406][T28003] RSP: 002b:00007fd9da4e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 491.881429][T28003] RAX: ffffffffffffffda RBX: 00007fd9dbcd5fa0 RCX: 00007fd9dba7f6c9 [ 491.881458][T28003] RDX: 0000200000000100 RSI: 0000000000000005 RDI: 0000000000000004 [ 491.881474][T28003] RBP: 00007fd9da4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 491.881490][T28003] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 491.881505][T28003] R13: 00007fd9dbcd6038 R14: 00007fd9dbcd5fa0 R15: 00007ffe5fb01c38 [ 491.881527][T28003] [ 491.884797][T28005] sz1: rxe_newlink: already configured on lo [ 492.159783][T28017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8460'. [ 492.180660][T28021] loop5: detected capacity change from 0 to 2048 [ 492.195109][T28017] ALSA: seq fatal error: cannot create timer (-19) [ 492.301631][T28033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8465'. [ 492.539930][T28021] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 492.555895][T28021] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 492.568465][T28021] EXT4-fs (loop5): This should not happen!! Data will be lost [ 492.568465][T28021] [ 492.578228][T28021] EXT4-fs (loop5): Total free blocks count 0 [ 492.584282][T28021] EXT4-fs (loop5): Free/Dirty block details [ 492.590187][T28021] EXT4-fs (loop5): free_blocks=2415919104 [ 492.595989][T28021] EXT4-fs (loop5): dirty_blocks=8208 [ 492.601327][T28021] EXT4-fs (loop5): Block reservation details [ 492.607320][T28021] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 492.688319][T24984] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 492.701251][T24984] EXT4-fs (loop5): This should not happen!! Data will be lost [ 492.701251][T24984] [ 492.787369][T28062] rdma_rxe: rxe_newlink: failed to add lo [ 493.343109][T28083] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8481'. [ 493.352487][T28083] netlink: 'syz.1.8481': attribute type 2 has an invalid length. [ 493.360242][T28083] netlink: 'syz.1.8481': attribute type 2 has an invalid length. [ 493.368088][T28083] netlink: 'syz.1.8481': attribute type 1 has an invalid length. [ 493.375870][T28083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8481'. [ 493.388069][T28083] hub 9-0:1.0: USB hub found [ 493.392791][T28083] hub 9-0:1.0: 8 ports detected [ 493.455892][T28089] lo: entered allmulticast mode [ 493.461052][T28089] tunl0: entered allmulticast mode [ 493.466502][T28089] gre0: entered allmulticast mode [ 493.471732][T28089] gretap0: entered allmulticast mode [ 493.477066][T28089] erspan0: entered allmulticast mode [ 493.482499][T28089] ip_vti0: entered allmulticast mode [ 493.488251][T28089] ip6_vti0: entered allmulticast mode [ 493.493826][T28089] sit0: entered allmulticast mode [ 493.498894][T28089] ip6tnl0: entered allmulticast mode [ 493.504404][T28089] ip6gre0: entered allmulticast mode [ 493.509980][T28089] syz_tun: entered allmulticast mode [ 493.515387][T28089] ip6gretap0: entered allmulticast mode [ 493.521088][T28089] bridge0: entered allmulticast mode [ 493.526609][T28089] vcan0: entered allmulticast mode [ 493.531823][T28089] bond0: entered allmulticast mode [ 493.537019][T28089] dummy0: entered allmulticast mode [ 493.542361][T28089] team0: entered allmulticast mode [ 493.547751][T28089] nlmon0: entered allmulticast mode [ 493.553057][T28089] caif0: entered allmulticast mode [ 493.558264][T28089] batadv0: entered allmulticast mode [ 493.563678][T28089] vxcan0: entered allmulticast mode [ 493.568989][T28089] vxcan1: entered allmulticast mode [ 493.574271][T28089] veth0: entered allmulticast mode [ 493.579505][T28089] veth1: entered allmulticast mode [ 493.584696][T28089] wg0: entered allmulticast mode [ 493.589674][T28089] wg1: entered allmulticast mode [ 493.594728][T28089] wg2: entered allmulticast mode [ 493.599776][T28089] veth0_to_bridge: entered allmulticast mode [ 493.605796][T28089] bridge_slave_0: entered allmulticast mode [ 493.611729][T28089] veth1_to_bridge: entered allmulticast mode [ 493.617910][T28089] bridge_slave_1: entered allmulticast mode [ 493.623850][T28089] veth0_to_bond: entered allmulticast mode [ 493.629765][T28089] bond_slave_0: entered allmulticast mode [ 493.635684][T28089] veth1_to_bond: entered allmulticast mode [ 493.641616][T28089] bond_slave_1: entered allmulticast mode [ 493.647374][T28089] veth0_to_team: entered allmulticast mode [ 493.653405][T28089] team_slave_0: entered allmulticast mode [ 493.659227][T28089] veth1_to_team: entered allmulticast mode [ 493.665120][T28089] team_slave_1: entered allmulticast mode [ 493.670912][T28089] veth0_to_batadv: entered allmulticast mode [ 493.676955][T28089] batadv_slave_0: entered allmulticast mode [ 493.683001][T28089] veth1_to_batadv: entered allmulticast mode [ 493.689146][T28089] batadv_slave_1: entered allmulticast mode [ 493.695206][T28089] xfrm0: entered allmulticast mode [ 493.700596][T28089] veth0_to_hsr: entered allmulticast mode [ 493.706417][T28089] hsr_slave_0: entered allmulticast mode [ 493.712207][T28089] veth1_to_hsr: entered allmulticast mode [ 493.718268][T28089] hsr_slave_1: entered allmulticast mode [ 493.724217][T28089] hsr0: entered allmulticast mode [ 493.724696][T28096] loop2: detected capacity change from 0 to 512 [ 493.729313][T28089] veth1_virt_wifi: entered allmulticast mode [ 493.741623][T28089] veth0_virt_wifi: entered allmulticast mode [ 493.747673][T28089] veth1_vlan: entered allmulticast mode [ 493.753331][T28089] veth0_vlan: entered allmulticast mode [ 493.758957][T28089] : entered allmulticast mode [ 493.763123][T28096] ext4 filesystem being mounted at /523/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 493.763866][T28089] vlan1: entered allmulticast mode [ 493.779259][T28089] macvlan0: entered allmulticast mode [ 493.784823][T28089] macvlan1: entered allmulticast mode [ 493.790448][T28089] ipvlan0: entered allmulticast mode [ 493.795966][T28089] ipvlan1: entered allmulticast mode [ 493.801387][T28089] veth1_macvtap: entered allmulticast mode [ 493.807290][T28089] veth0_macvtap: entered allmulticast mode [ 493.813189][T28089] macvtap0: entered allmulticast mode [ 493.818731][T28089] macsec0: entered allmulticast mode [ 493.824150][T28089] geneve0: entered allmulticast mode [ 493.829482][T28089] geneve1: entered allmulticast mode [ 493.834859][T28089] geneve2: entered allmulticast mode [ 493.840352][T28089] geneve3: entered allmulticast mode [ 493.845926][T28089] ip6tnl1: entered allmulticast mode [ 493.851332][T28089] syztnl1: entered allmulticast mode [ 493.856897][T28089] syztnl0: entered allmulticast mode [ 493.862422][T28089] netdevsim netdevsim1 eth0: entered allmulticast mode [ 493.869446][T28089] netdevsim netdevsim1 eth1: entered allmulticast mode [ 493.876602][T28089] netdevsim netdevsim1 eth2: entered allmulticast mode [ 493.883791][T28089] netdevsim netdevsim1 eth3: entered allmulticast mode [ 493.890847][T28089] veth2: left promiscuous mode [ 493.895807][T28089] veth3: entered allmulticast mode [ 493.972189][T28110] rdma_rxe: rxe_newlink: failed to add lo [ 494.080125][T28122] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8496'. [ 494.089655][T28122] netlink: 'syz.5.8496': attribute type 2 has an invalid length. [ 494.097475][T28122] netlink: 'syz.5.8496': attribute type 2 has an invalid length. [ 494.105262][T28122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8496'. [ 494.124085][T28122] hub 9-0:1.0: USB hub found [ 494.128850][T28122] hub 9-0:1.0: 8 ports detected [ 494.268983][T28129] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8498'. [ 494.292875][T28129] ALSA: seq fatal error: cannot create timer (-19) [ 494.327432][T28131] loop5: detected capacity change from 0 to 512 [ 494.341442][T28131] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 494.362664][T28131] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 494.384979][T28131] EXT4-fs (loop5): 1 truncate cleaned up [ 494.391362][T28131] EXT4-fs mount: 45 callbacks suppressed [ 494.391380][T28131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.497855][T28144] rdma_rxe: rxe_newlink: failed to add lo [ 494.936680][T28157] FAULT_INJECTION: forcing a failure. [ 494.936680][T28157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.949879][T28157] CPU: 0 UID: 0 PID: 28157 Comm: syz.2.8507 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 494.949949][T28157] Tainted: [W]=WARN [ 494.949957][T28157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 494.949973][T28157] Call Trace: [ 494.949981][T28157] [ 494.949991][T28157] __dump_stack+0x1d/0x30 [ 494.950019][T28157] dump_stack_lvl+0xe8/0x140 [ 494.950044][T28157] dump_stack+0x15/0x1b [ 494.950134][T28157] should_fail_ex+0x265/0x280 [ 494.950179][T28157] should_fail+0xb/0x20 [ 494.950217][T28157] should_fail_usercopy+0x1a/0x20 [ 494.950298][T28157] _copy_from_user+0x1c/0xb0 [ 494.950371][T28157] ___sys_sendmsg+0xc1/0x1d0 [ 494.950411][T28157] __x64_sys_sendmsg+0xd4/0x160 [ 494.950443][T28157] x64_sys_call+0x191e/0x3000 [ 494.950567][T28157] do_syscall_64+0xd2/0x200 [ 494.950619][T28157] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 494.950656][T28157] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 494.950779][T28157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.950819][T28157] RIP: 0033:0x7f2974f8f6c9 [ 494.950836][T28157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.950853][T28157] RSP: 002b:00007f29739ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.950871][T28157] RAX: ffffffffffffffda RBX: 00007f29751e5fa0 RCX: 00007f2974f8f6c9 [ 494.950882][T28157] RDX: 0000000020048054 RSI: 0000200000000200 RDI: 0000000000000004 [ 494.950894][T28157] RBP: 00007f29739ef090 R08: 0000000000000000 R09: 0000000000000000 [ 494.950949][T28157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.950966][T28157] R13: 00007f29751e6038 R14: 00007f29751e5fa0 R15: 00007fff038e8638 [ 494.950990][T28157] [ 495.160058][T28159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8508'. [ 495.169850][T23482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.224064][T28163] validate_nla: 1 callbacks suppressed [ 495.224107][T28163] netlink: 'syz.5.8509': attribute type 2 has an invalid length. [ 495.237413][T28163] netlink: 'syz.5.8509': attribute type 2 has an invalid length. [ 495.245190][T28163] netlink: 'syz.5.8509': attribute type 1 has an invalid length. [ 495.274820][T28163] hub 9-0:1.0: USB hub found [ 495.284424][T28165] rdma_rxe: rxe_newlink: failed to add lo [ 495.290229][T28163] hub 9-0:1.0: 8 ports detected [ 495.744493][T28194] rdma_rxe: rxe_newlink: failed to add lo [ 495.758283][T28196] netlink: 'syz.5.8524': attribute type 2 has an invalid length. [ 495.766150][T28196] netlink: 'syz.5.8524': attribute type 2 has an invalid length. [ 495.773907][T28196] netlink: 'syz.5.8524': attribute type 1 has an invalid length. [ 495.799622][T28196] hub 9-0:1.0: USB hub found [ 495.804975][T28196] hub 9-0:1.0: 8 ports detected [ 495.931927][T28220] rdma_rxe: rxe_newlink: failed to add lo [ 495.949639][T28221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.958426][T28221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.973259][T28223] ALSA: seq fatal error: cannot create timer (-19) [ 496.031712][T28229] netlink: 'syz.2.8538': attribute type 2 has an invalid length. [ 496.039467][T28229] netlink: 'syz.2.8538': attribute type 2 has an invalid length. [ 496.047250][T28229] netlink: 'syz.2.8538': attribute type 1 has an invalid length. [ 496.058231][T28229] hub 9-0:1.0: USB hub found [ 496.063142][T28229] hub 9-0:1.0: 8 ports detected [ 496.142312][T28235] loop2: detected capacity change from 0 to 164 [ 496.148904][T28235] iso9660: Unknown parameter 'overriderockperí' [ 496.197271][T28239] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 496.266212][T24984] failed while handling packet from 1:16385 [ 496.266239][T24984] failed while handling packet from 1:16385 [ 496.272367][T24984] failed while handling packet from 1:16385 [ 496.291501][T24984] failed while handling packet from 1:16385 [ 496.297696][T24984] failed while handling packet from 1:16385 [ 496.303763][T24984] failed while handling packet from 1:16385 [ 496.309745][T24984] failed while handling packet from 1:16385 [ 496.315801][T24984] failed while handling packet from 1:16385 [ 496.321844][T24984] failed while handling packet from 1:16385 [ 496.327850][T24984] failed while handling packet from 1:16385 [ 496.333839][T24984] failed while handling packet from 1:16385 [ 496.339872][T24984] failed while handling packet from 1:16385 [ 496.346016][T24984] failed while handling packet from 1:16385 [ 496.358430][T24984] failed while handling packet from 1:16385 [ 496.364439][T24984] failed while handling packet from 1:16385 [ 496.370424][T24984] failed while handling packet from 1:16385 [ 496.376643][T24984] failed while handling packet from 1:16385 [ 496.382852][T24984] failed while handling packet from 1:16385 [ 496.388823][T24984] failed while handling packet from 1:16385 [ 496.401277][T24984] failed while handling packet from 1:16385 [ 496.419641][T24984] failed while handling packet from 1:16385 [ 496.426338][T24984] failed while handling packet from 1:16385 [ 496.432600][T24984] failed while handling packet from 1:16385 [ 496.438783][T24984] failed while handling packet from 1:16385 [ 496.445940][T24984] failed while handling packet from 1:16385 [ 496.452321][T24984] failed while handling packet from 1:16385 [ 496.460999][T24984] failed while handling packet from 1:16385 [ 496.469124][T24984] failed while handling packet from 1:16385 [ 496.475639][T24984] failed while handling packet from 1:16385 [ 496.481742][ T29] kauditd_printk_skb: 984 callbacks suppressed [ 496.481758][ T29] audit: type=1326 audit(1763218528.590:50286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.3.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 496.481981][T24984] failed while handling packet from 1:16385 [ 496.493581][ T29] audit: type=1326 audit(1763218528.590:50287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.3.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 496.494880][T24984] failed while handling packet from 1:16385 [ 496.517451][ T29] audit: type=1326 audit(1763218528.590:50288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.3.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 496.523701][T24984] failed while handling packet from 1:16385 [ 496.561037][ T29] audit: type=1326 audit(1763218528.600:50289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.3.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 496.605923][ T29] audit: type=1326 audit(1763218528.600:50290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.3.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 496.621264][T24984] failed while handling packet from 1:16385 [ 496.629510][ T29] audit: type=1326 audit(1763218528.600:50291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.3.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 496.640777][T24984] failed while handling packet from 1:16385 [ 496.659287][ T29] audit: type=1400 audit(1763218528.690:50292): avc: denied { getopt } for pid=28245 comm="syz.2.8545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 496.684852][ T29] audit: type=1326 audit(1763218528.720:50293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.3.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 496.706226][T24984] failed while handling packet from 1:16385 [ 496.708318][T24984] failed while handling packet from 1:16385 [ 496.708386][ T29] audit: type=1326 audit(1763218528.720:50294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.3.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 496.722116][T24984] failed while handling packet from 1:16385 [ 496.743697][ T29] audit: type=1326 audit(1763218528.720:50295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.3.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 496.778812][T28251] __nla_validate_parse: 11 callbacks suppressed [ 496.778830][T28251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8547'. [ 496.794559][T26260] Bluetooth: hci0: command 0x1003 tx timeout [ 496.801359][T24984] failed while handling packet from 1:16385 [ 496.801383][T24984] failed while handling packet from 1:16385 [ 496.807723][T24984] failed while handling packet from 1:16385 [ 496.807790][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 496.826156][T24984] failed while handling packet from 1:16385 [ 496.826258][T24984] failed while handling packet from 1:16385 [ 496.832206][T24984] failed while handling packet from 1:16385 [ 496.838407][T24984] failed while handling packet from 1:16385 [ 496.844516][T24984] failed while handling packet from 1:16385 [ 496.850457][T24984] failed while handling packet from 1:16385 [ 496.856495][T24984] failed while handling packet from 1:16385 [ 496.862222][T28254] ALSA: seq fatal error: cannot create timer (-19) [ 496.877816][T24984] failed while handling packet from 1:16385 [ 496.877839][T24984] failed while handling packet from 1:16385 [ 496.885440][T24984] failed while handling packet from 1:16385 [ 496.891409][T24984] failed while handling packet from 1:16385 [ 496.897635][T24984] failed while handling packet from 1:16385 [ 496.903731][T24984] failed while handling packet from 1:16385 [ 496.909722][T24984] failed while handling packet from 1:16385 [ 496.909741][T24984] failed while handling packet from 1:16385 [ 496.909808][T24984] failed while handling packet from 1:16385 [ 496.909826][T24984] failed while handling packet from 1:16385 [ 496.909841][T24984] failed while handling packet from 1:16385 [ 496.909857][T24984] failed while handling packet from 1:16385 [ 496.909873][T24984] failed while handling packet from 1:16385 [ 496.909888][T24984] failed while handling packet from 1:16385 [ 496.909899][T24984] failed while handling packet from 1:16385 [ 496.909911][T24984] failed while handling packet from 1:16385 [ 496.909948][T24984] failed while handling packet from 1:16385 [ 496.909967][T24984] failed while handling packet from 1:16385 [ 496.909982][T24984] failed while handling packet from 1:16385 [ 496.910049][T24984] failed while handling packet from 1:16385 [ 496.910064][T24984] failed while handling packet from 1:16385 [ 496.910077][T24984] failed while handling packet from 1:16385 [ 496.910098][T24984] failed while handling packet from 1:16385 [ 496.910109][T24984] failed while handling packet from 1:16385 [ 496.910123][T24984] failed while handling packet from 1:16385 [ 496.910139][T24984] failed while handling packet from 1:16385 [ 496.910164][T24984] failed while handling packet from 1:16385 [ 496.910180][T24984] failed while handling packet from 1:16385 [ 496.910195][T24984] failed while handling packet from 1:16385 [ 496.910277][T24984] failed while handling packet from 1:16385 [ 496.910289][T24984] failed while handling packet from 1:16385 [ 496.910313][T24984] failed while handling packet from 1:16385 [ 496.952349][T28257] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8549'. [ 496.959734][T24984] failed while handling packet from 1:16385 [ 497.021541][T28262] netlink: 'syz.1.8551': attribute type 19 has an invalid length. [ 497.029777][T28263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8549'. [ 497.036322][T28262] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8551'. [ 497.086387][T28263] hub 9-0:1.0: USB hub found [ 497.086519][T28263] hub 9-0:1.0: 8 ports detected [ 497.105022][T24984] failed while handling packet from 1:16385 [ 497.150844][T28270] loop5: detected capacity change from 0 to 256 [ 497.172998][T28270] vfat: Unknown parameter 'ÿÿ0x0000000000000000' [ 497.186001][T24984] failed while handling packet from 1:16385 [ 497.186026][T24984] failed while handling packet from 1:16385 [ 497.199985][T24984] failed while handling packet from 1:16385 [ 497.206492][T24984] failed while handling packet from 1:16385 [ 497.222287][T28280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8558'. [ 497.226490][T24984] failed while handling packet from 1:16385 [ 497.251569][T24984] failed while handling packet from 1:16385 [ 497.278126][T28286] loop2: detected capacity change from 0 to 512 [ 497.291418][T24984] failed while handling packet from 1:16385 [ 497.291443][T24984] failed while handling packet from 1:16385 [ 497.297523][T24984] failed while handling packet from 1:16385 [ 497.303868][T24984] failed while handling packet from 1:16385 [ 497.303870][T28280] bond0: option ad_user_port_key: invalid value (1136) [ 497.303894][T28280] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 497.309824][T24984] failed while handling packet from 1:16385 [ 497.316575][T28286] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 497.322801][T24984] failed while handling packet from 1:16385 [ 497.329996][T24989] Bluetooth: hci0: Frame reassembly failed (-84) [ 497.335813][T24984] failed while handling packet from 1:16385 [ 497.357897][T24984] failed while handling packet from 1:16385 [ 497.364015][T24984] failed while handling packet from 1:16385 [ 497.370169][T24984] failed while handling packet from 1:16385 [ 497.370799][T28280] bond0 (unregistering): Released all slaves [ 497.376195][T24984] failed while handling packet from 1:16385 [ 497.388265][T24984] failed while handling packet from 1:16385 [ 497.394256][T24984] failed while handling packet from 1:16385 [ 497.400234][T24984] failed while handling packet from 1:16385 [ 497.403420][T28286] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, [ 497.406277][T24984] failed while handling packet from 1:16385 [ 497.412122][T28286] block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 497.420602][T24984] failed while handling packet from 1:16385 [ 497.437222][T24984] failed while handling packet from 1:16385 [ 497.443216][T24984] failed while handling packet from 1:16385 [ 497.449267][T24984] failed while handling packet from 1:16385 [ 497.455278][T24984] failed while handling packet from 1:16385 [ 497.461288][T24984] failed while handling packet from 1:16385 [ 497.467452][T24984] failed while handling packet from 1:16385 [ 497.473104][T28286] EXT4-fs (loop2): 1 truncate cleaned up [ 497.482289][T24984] failed while handling packet from 1:16385 [ 497.486433][T24984] failed while handling packet from 1:16385 [ 497.492488][T24984] failed while handling packet from 1:16385 [ 497.494709][T28286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.498797][T24984] failed while handling packet from 1:16385 [ 497.517221][T24984] failed while handling packet from 1:16385 [ 497.523383][T24984] failed while handling packet from 1:16385 [ 497.527110][T28294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28294 comm=syz.3.8561 [ 497.529421][T24984] failed while handling packet from 1:16385 [ 497.548307][T24984] failed while handling packet from 1:16385 [ 497.554299][T24984] failed while handling packet from 1:16385 [ 497.560458][T24984] failed while handling packet from 1:16385 [ 497.566452][T24984] failed while handling packet from 1:16385 [ 497.572538][T24984] failed while handling packet from 1:16385 [ 497.578523][T24984] failed while handling packet from 1:16385 [ 497.605748][T24984] failed while handling packet from 1:16385 [ 497.619166][T24984] failed while handling packet from 1:16385 [ 497.627528][T24984] failed while handling packet from 1:16385 [ 497.633653][T24984] failed while handling packet from 1:16385 [ 497.640002][T24984] failed while handling packet from 1:16385 [ 497.646043][T24984] failed while handling packet from 1:16385 [ 497.652176][T24984] failed while handling packet from 1:16385 [ 497.658125][T24984] failed while handling packet from 1:16385 [ 497.664272][T24984] failed while handling packet from 1:16385 [ 497.679240][T24984] failed while handling packet from 1:16385 [ 497.688929][T24984] failed while handling packet from 1:16385 [ 497.726445][T24984] failed while handling packet from 1:16385 [ 497.735835][T28302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8565'. [ 497.753360][T24984] failed while handling packet from 1:16385 [ 497.753379][T24984] failed while handling packet from 1:16385 [ 497.760937][T24984] failed while handling packet from 1:16385 [ 497.767024][T24984] failed while handling packet from 1:16385 [ 497.780421][T24984] failed while handling packet from 1:16385 [ 497.786495][T24984] failed while handling packet from 1:16385 [ 497.796637][T24984] failed while handling packet from 1:16385 [ 497.809122][T24984] failed while handling packet from 1:16385 [ 497.821397][T24984] failed while handling packet from 1:16385 [ 497.834629][T24984] failed while handling packet from 1:16385 [ 497.841441][T24984] failed while handling packet from 1:16385 [ 497.847398][T24984] failed while handling packet from 1:16385 [ 497.854284][T24984] failed while handling packet from 1:16385 [ 497.861158][T24984] failed while handling packet from 1:16385 [ 497.867505][T24984] failed while handling packet from 1:16385 [ 497.873835][T24984] failed while handling packet from 1:16385 [ 497.874005][T28306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8568'. [ 497.879834][T24984] failed while handling packet from 1:16385 [ 497.894887][T24984] failed while handling packet from 1:16385 [ 497.900791][T24984] failed while handling packet from 1:16385 [ 497.906793][T24984] failed while handling packet from 1:16385 [ 497.912744][T24984] failed while handling packet from 1:16385 [ 497.919886][T24984] failed while handling packet from 1:16385 [ 497.926111][T24984] failed while handling packet from 1:16385 [ 497.933570][T24984] failed while handling packet from 1:16385 [ 497.939504][T24984] failed while handling packet from 1:16385 [ 497.953916][T28306] ALSA: seq fatal error: cannot create timer (-19) [ 497.968971][T24984] failed while handling packet from 1:16385 [ 497.968992][T24984] failed while handling packet from 1:16385 [ 497.986996][T24984] failed while handling packet from 1:16385 [ 497.998674][T24984] failed while handling packet from 1:16385 [ 498.007278][T24984] failed while handling packet from 1:16385 [ 498.021435][T24984] failed while handling packet from 1:16385 [ 498.034583][T24984] failed while handling packet from 1:16385 [ 498.042184][T20070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.056696][T28319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8573'. [ 498.066494][T24984] failed while handling packet from 1:16385 [ 498.066515][T24984] failed while handling packet from 1:16385 [ 498.081069][T24984] failed while handling packet from 1:16385 [ 498.094970][T24984] failed while handling packet from 1:16385 [ 498.103100][T24984] failed while handling packet from 1:16385 [ 498.113232][T24984] failed while handling packet from 1:16385 [ 498.120056][T24984] failed while handling packet from 1:16385 [ 498.131441][T24984] failed while handling packet from 1:16385 [ 498.138646][T24984] failed while handling packet from 1:16385 [ 498.144862][T24984] failed while handling packet from 1:16385 [ 498.150773][T24984] failed while handling packet from 1:16385 [ 498.156786][T24984] failed while handling packet from 1:16385 [ 498.162775][T24984] failed while handling packet from 1:16385 [ 498.168770][T24984] failed while handling packet from 1:16385 [ 498.174729][T24984] failed while handling packet from 1:16385 [ 498.180719][T24984] failed while handling packet from 1:16385 [ 498.186777][T24984] failed while handling packet from 1:16385 [ 498.196249][T28328] rdma_rxe: rxe_newlink: failed to add lo [ 498.208220][T24984] failed while handling packet from 1:16385 [ 498.208245][T24984] failed while handling packet from 1:16385 [ 498.218233][T24984] failed while handling packet from 1:16385 [ 498.228332][T24984] failed while handling packet from 1:16385 [ 498.236237][T24984] failed while handling packet from 1:16385 [ 498.238511][T18832] Bluetooth: hci1: sending frame failed (-49) [ 498.250288][T24984] failed while handling packet from 1:16385 [ 498.254562][T26260] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 498.263481][T24984] failed while handling packet from 1:16385 [ 498.266603][T24984] failed while handling packet from 1:16385 [ 498.272646][T24984] failed while handling packet from 1:16385 [ 498.278590][T24984] failed while handling packet from 1:16385 [ 498.286121][T24984] failed while handling packet from 1:16385 [ 498.292081][T24984] failed while handling packet from 1:16385 [ 498.297995][T24984] failed while handling packet from 1:16385 [ 498.303947][T24984] failed while handling packet from 1:16385 [ 498.309872][T24984] failed while handling packet from 1:16385 [ 498.315889][T24984] failed while handling packet from 1:16385 [ 498.322013][T24984] failed while handling packet from 1:16385 [ 498.327940][T24984] failed while handling packet from 1:16385 [ 498.335257][T24984] failed while handling packet from 1:16385 [ 498.341358][T24984] failed while handling packet from 1:16385 [ 498.347393][T24984] failed while handling packet from 1:16385 [ 498.353365][T24984] failed while handling packet from 1:16385 [ 498.359266][T24984] failed while handling packet from 1:16385 [ 498.365244][T24984] failed while handling packet from 1:16385 [ 498.371176][T24984] failed while handling packet from 1:16385 [ 498.377105][T24984] failed while handling packet from 1:16385 [ 498.383029][T24984] failed while handling packet from 1:16385 [ 498.388977][T24984] failed while handling packet from 1:16385 [ 498.395211][T24984] failed while handling packet from 1:16385 [ 498.406196][T24984] failed while handling packet from 1:16385 [ 498.421519][T24984] failed while handling packet from 1:16385 [ 498.427456][T24984] failed while handling packet from 1:16385 [ 498.435952][T24984] failed while handling packet from 1:16385 [ 498.446519][T24984] failed while handling packet from 1:16385 [ 498.453161][T24984] failed while handling packet from 1:16385 [ 498.459227][T24984] failed while handling packet from 1:16385 [ 498.467484][T24984] failed while handling packet from 1:16385 [ 498.473578][T24984] failed while handling packet from 1:16385 [ 498.479491][T24984] failed while handling packet from 1:16385 [ 498.485459][T24984] failed while handling packet from 1:16385 [ 498.493629][T24984] failed while handling packet from 1:16385 [ 498.499693][T24984] failed while handling packet from 1:16385 [ 498.505650][T24984] failed while handling packet from 1:16384 [ 498.512005][T24984] failed while handling packet from 1:16384 [ 498.517925][T24984] failed while handling packet from 1:16384 [ 498.523894][T24984] failed while handling packet from 1:16384 [ 498.529812][T24984] failed while handling packet from 1:16384 [ 498.535820][T24984] failed while handling packet from 1:16384 [ 498.541770][T24984] failed while handling packet from 1:16384 [ 498.547831][T24984] failed while handling packet from 1:16384 [ 498.553780][T24984] failed while handling packet from 1:16384 [ 498.559721][T24984] failed while handling packet from 1:16384 [ 498.566040][T24984] failed while handling packet from 1:16384 [ 498.572108][T24984] failed while handling packet from 1:16384 [ 498.578026][T24984] failed while handling packet from 1:16384 [ 498.584012][T24984] failed while handling packet from 1:16384 [ 498.584468][T28334] loop3: detected capacity change from 0 to 8192 [ 498.589918][T24984] failed while handling packet from 1:16384 [ 498.589935][T24984] failed while handling packet from 1:16384 [ 498.589970][T24984] failed while handling packet from 1:16384 [ 498.614064][T24984] failed while handling packet from 1:16384 [ 498.620027][T24984] failed while handling packet from 1:16384 [ 498.625995][T24984] failed while handling packet from 1:16384 [ 498.632144][T24984] failed while handling packet from 1:16384 [ 498.638081][T24984] failed while handling packet from 1:16384 [ 498.644074][T24984] failed while handling packet from 1:16384 [ 498.650016][T24984] failed while handling packet from 1:16384 [ 498.655959][T24984] failed while handling packet from 1:16384 [ 498.656252][T28334] loop3: p1 p2 p4 < > [ 498.661939][T24984] failed while handling packet from 1:16384 [ 498.667797][T28334] loop3: partition table partially beyond EOD, [ 498.674371][T24984] failed while handling packet from 1:16384 [ 498.677811][T28334] truncated [ 498.678278][T28334] loop3: p1 start 16777216 is beyond EOD, [ 498.684309][T24984] failed while handling packet from 1:16384 [ 498.689993][T28334] truncated [ 498.690002][T28334] loop3: p2 size 515840 extends beyond EOD, truncated [ 498.693297][T24984] failed while handling packet from 1:16384 [ 498.699798][T28334] loop3: p4 start 16777216 is beyond EOD, [ 498.705123][T24984] failed while handling packet from 1:16384 [ 498.708000][T28334] truncated [ 498.736021][T24984] failed while handling packet from 1:16384 [ 498.736043][T24984] failed while handling packet from 1:16384 [ 498.742050][T24984] failed while handling packet from 1:16384 [ 498.748159][T24984] failed while handling packet from 1:16384 [ 498.754123][T24984] failed while handling packet from 1:16384 [ 498.760220][T24984] failed while handling packet from 1:16384 [ 498.766212][T24984] failed while handling packet from 1:16384 [ 498.772455][T24984] failed while handling packet from 1:16384 [ 498.778755][T24984] failed while handling packet from 1:16384 [ 498.784876][T24984] failed while handling packet from 1:16384 [ 498.790883][T24984] failed while handling packet from 1:16384 [ 498.796964][T24984] failed while handling packet from 1:16384 [ 498.802999][T24984] failed while handling packet from 1:16384 [ 498.809170][T24984] failed while handling packet from 1:16384 [ 498.815141][T24984] failed while handling packet from 1:16384 [ 498.821147][T24984] failed while handling packet from 1:16384 [ 498.827102][T24984] failed while handling packet from 1:16384 [ 498.833234][T24984] failed while handling packet from 1:16384 [ 498.839130][T24984] failed while handling packet from 1:16384 [ 498.845191][T24984] failed while handling packet from 1:16384 [ 498.851118][T24984] failed while handling packet from 1:16384 [ 498.857087][T24984] failed while handling packet from 1:16384 [ 498.863106][T24984] failed while handling packet from 1:16384 [ 498.869009][T24984] failed while handling packet from 1:16384 [ 498.874945][T24984] failed while handling packet from 1:16384 [ 498.880830][T24984] failed while handling packet from 1:16384 [ 498.886769][T24984] failed while handling packet from 1:16384 [ 498.892793][T24984] failed while handling packet from 1:16384 [ 498.898687][T24984] failed while handling packet from 1:16384 [ 498.904669][T24984] failed while handling packet from 1:16384 [ 498.910567][T24984] failed while handling packet from 1:16384 [ 498.916504][T24984] failed while handling packet from 1:16384 [ 498.922415][T24984] failed while handling packet from 1:16384 [ 498.928347][T24984] failed while handling packet from 1:16384 [ 498.934302][T24984] failed while handling packet from 1:16384 [ 498.940250][T24984] failed while handling packet from 1:16384 [ 498.946195][T24984] failed while handling packet from 1:16384 [ 498.952120][T24984] failed while handling packet from 1:16384 [ 498.958016][T24984] failed while handling packet from 1:16384 [ 498.963958][T24984] failed while handling packet from 1:16384 [ 498.969974][T24984] failed while handling packet from 1:16384 [ 498.997419][T24984] failed while handling packet from 1:16384 [ 499.003747][T24984] failed while handling packet from 1:16384 [ 499.010213][T24984] failed while handling packet from 1:16384 [ 499.016627][T24984] failed while handling packet from 1:16384 [ 499.022994][T24984] failed while handling packet from 1:16384 [ 499.029114][T24984] failed while handling packet from 1:16384 [ 499.035591][T24984] failed while handling packet from 1:16384 [ 499.041705][T24984] failed while handling packet from 1:16384 [ 499.047915][T24984] failed while handling packet from 1:16384 [ 499.054331][T24984] failed while handling packet from 1:16384 [ 499.060433][T24984] failed while handling packet from 1:16384 [ 499.066464][T24984] failed while handling packet from 1:16384 [ 499.072573][T24984] failed while handling packet from 1:16384 [ 499.078604][T24984] failed while handling packet from 1:16384 [ 499.084541][T24984] failed while handling packet from 1:16384 [ 499.090551][T24984] failed while handling packet from 1:16384 [ 499.096678][T24984] failed while handling packet from 1:16384 [ 499.102900][T24984] failed while handling packet from 1:16384 [ 499.108925][T24984] failed while handling packet from 1:16384 [ 499.115211][T24984] failed while handling packet from 1:16384 [ 499.121105][T24984] failed while handling packet from 1:16384 [ 499.127062][T24984] failed while handling packet from 1:16384 [ 499.133117][T24984] failed while handling packet from 1:16384 [ 499.139046][T24984] failed while handling packet from 1:16384 [ 499.145044][T24984] failed while handling packet from 1:16384 [ 499.150949][T24984] failed while handling packet from 1:16384 [ 499.158039][T24984] failed while handling packet from 1:16384 [ 499.164276][T24984] failed while handling packet from 1:16384 [ 499.170376][T24984] failed while handling packet from 1:16384 [ 499.176502][T24984] failed while handling packet from 1:16384 [ 499.182653][T24984] failed while handling packet from 1:16384 [ 499.188729][T24984] failed while handling packet from 1:16384 [ 499.194838][T24984] failed while handling packet from 1:16384 [ 499.200913][T24984] failed while handling packet from 1:16384 [ 499.206961][T24984] failed while handling packet from 1:16384 [ 499.213007][T24984] failed while handling packet from 1:16384 [ 499.216390][T28363] loop2: detected capacity change from 0 to 256 [ 499.218922][T24984] failed while handling packet from 1:16384 [ 499.218965][T24984] failed while handling packet from 1:16384 [ 499.225227][T28363] vfat: Unknown parameter 'ÿÿ0x0000000000000000' [ 499.231356][T24984] failed while handling packet from 1:16384 [ 499.249516][T24984] failed while handling packet from 1:16384 [ 499.255532][T24984] failed while handling packet from 1:16384 [ 499.261559][T24984] failed while handling packet from 1:16384 [ 499.267483][T24984] failed while handling packet from 1:16384 [ 499.273456][T24984] failed while handling packet from 1:16384 [ 499.279472][T24984] failed while handling packet from 1:16384 [ 499.285467][T24984] failed while handling packet from 1:16384 [ 499.291395][T24984] failed while handling packet from 1:16384 [ 499.297334][T24984] failed while handling packet from 1:16384 [ 499.303274][T24984] failed while handling packet from 1:16384 [ 499.309220][T24984] failed while handling packet from 1:16384 [ 499.315173][T24984] failed while handling packet from 1:16384 [ 499.321080][T24984] failed while handling packet from 1:16384 [ 499.327040][T24984] failed while handling packet from 1:16384 [ 499.332991][T24984] failed while handling packet from 1:16384 [ 499.338922][T24984] failed while handling packet from 1:16384 [ 499.342068][T26260] Bluetooth: hci0: command 0x1003 tx timeout [ 499.344910][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 499.362968][T24984] failed while handling packet from 1:16384 [ 499.362992][T24984] failed while handling packet from 1:16384 [ 499.368917][T24984] failed while handling packet from 1:16384 [ 499.374973][T24984] failed while handling packet from 1:16384 [ 499.380889][T24984] failed while handling packet from 1:16384 [ 499.388556][T24984] failed while handling packet from 1:16384 [ 499.394592][T24984] failed while handling packet from 1:16384 [ 499.400523][T24984] failed while handling packet from 1:16384 [ 499.406526][T24984] failed while handling packet from 1:16384 [ 499.412455][T24984] failed while handling packet from 1:16384 [ 499.418517][T24984] failed while handling packet from 1:16384 [ 499.426129][T24984] failed while handling packet from 1:16384 [ 499.432136][T24984] failed while handling packet from 1:16384 [ 499.438069][T24984] failed while handling packet from 1:16384 [ 499.443986][T24984] failed while handling packet from 1:16384 [ 499.449947][T24984] failed while handling packet from 1:16384 [ 499.455896][T24984] failed while handling packet from 1:16384 [ 499.461932][T24984] failed while handling packet from 1:16384 [ 499.467880][T24984] failed while handling packet from 1:16384 [ 499.479800][T24984] failed while handling packet from 1:16384 [ 499.482141][T24986] Bluetooth: hci0: Frame reassembly failed (-84) [ 499.498264][T24984] failed while handling packet from 1:16384 [ 499.498287][T24984] failed while handling packet from 1:16384 [ 499.507243][T24984] failed while handling packet from 1:16384 [ 499.521597][T24984] failed while handling packet from 1:16384 [ 499.530789][T28375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8594'. [ 499.531610][T24984] failed while handling packet from 1:16384 [ 499.545734][T24984] failed while handling packet from 1:16384 [ 499.555404][T24984] failed while handling packet from 1:16384 [ 499.561381][T24984] failed while handling packet from 1:16384 [ 499.567470][T24984] failed while handling packet from 1:16384 [ 499.573588][T24984] failed while handling packet from 1:16384 [ 499.579608][T28375] ALSA: seq fatal error: cannot create timer (-19) [ 499.592547][T24984] failed while handling packet from 1:16384 [ 499.592571][T24984] failed while handling packet from 1:16384 [ 499.599311][T24984] failed while handling packet from 1:16384 [ 499.615717][T24984] failed while handling packet from 1:16384 [ 499.629345][T24984] failed while handling packet from 1:16384 [ 499.641754][T24984] failed while handling packet from 1:16384 [ 499.655840][T24984] failed while handling packet from 1:16384 [ 499.662176][T24984] failed while handling packet from 1:16384 [ 499.662965][T28390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8596'. [ 499.668210][T24984] failed while handling packet from 1:16384 [ 499.683359][T24984] failed while handling packet from 1:16384 [ 499.689577][T24984] failed while handling packet from 1:16384 [ 499.695920][T24984] failed while handling packet from 1:16384 [ 499.701961][T24984] failed while handling packet from 1:16384 [ 499.708136][T24984] failed while handling packet from 1:16384 [ 499.719127][T24984] failed while handling packet from 1:16384 [ 499.737225][T24984] failed while handling packet from 1:16384 [ 499.743349][T24984] failed while handling packet from 1:16384 [ 499.749326][T24984] failed while handling packet from 1:16384 [ 499.758952][T24984] failed while handling packet from 1:16384 [ 499.765351][T24984] failed while handling packet from 1:16384 [ 499.785534][T24984] failed while handling packet from 1:16384 [ 499.794944][T24984] failed while handling packet from 1:16384 [ 499.796344][T28403] rdma_rxe: rxe_newlink: failed to add lo [ 499.807630][T24984] failed while handling packet from 1:16384 [ 499.812866][T24984] failed while handling packet from 1:16384 [ 499.818897][T24984] failed while handling packet from 1:16384 [ 499.825359][T24984] failed while handling packet from 1:16384 [ 499.831472][T24984] failed while handling packet from 1:16384 [ 499.838135][T24984] failed while handling packet from 1:16384 [ 499.844234][T24984] failed while handling packet from 1:16384 [ 499.872727][T24984] failed while handling packet from 1:16384 [ 499.879610][T24984] failed while handling packet from 1:16384 [ 499.886152][T24984] failed while handling packet from 1:16384 [ 499.897776][T24984] failed while handling packet from 1:16384 [ 499.904518][T24984] failed while handling packet from 1:16384 [ 499.911111][T24984] failed while handling packet from 1:16384 [ 499.921908][T24984] failed while handling packet from 1:16384 [ 499.929103][T24984] failed while handling packet from 1:16384 [ 499.935562][T24984] failed while handling packet from 1:16384 [ 499.942655][T24984] failed while handling packet from 1:16384 [ 499.948664][T24984] failed while handling packet from 1:16384 [ 499.971764][T24984] failed while handling packet from 1:16384 [ 499.992042][T24984] failed while handling packet from 1:16384 [ 499.998069][T24984] failed while handling packet from 1:16384 [ 500.004241][T24984] failed while handling packet from 1:16384 [ 500.010282][T24984] failed while handling packet from 1:16384 [ 500.016467][T24984] failed while handling packet from 1:16384 [ 500.022528][T24984] failed while handling packet from 1:16384 [ 500.028542][T24984] failed while handling packet from 1:16384 [ 500.036579][T24984] failed while handling packet from 1:16384 [ 500.044867][T24984] failed while handling packet from 1:16384 [ 500.050875][T24984] failed while handling packet from 1:16384 [ 500.056960][T24984] failed while handling packet from 1:16384 [ 500.063154][T24984] failed while handling packet from 1:16384 [ 500.069743][T24984] failed while handling packet from 1:16384 [ 500.093906][T24984] failed while handling packet from 1:16384 [ 500.107784][T24984] failed while handling packet from 1:16384 [ 500.884664][T28441] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28441 comm=syz.3.8614 [ 500.908799][T28441] loop3: detected capacity change from 0 to 512 [ 500.924228][T28441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.937049][T28441] ext4 filesystem being mounted at /452/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 500.967453][T22441] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.977004][T28455] FAULT_INJECTION: forcing a failure. [ 500.977004][T28455] name failslab, interval 1, probability 0, space 0, times 0 [ 500.989842][T28455] CPU: 0 UID: 0 PID: 28455 Comm: syz.5.8619 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 500.989870][T28455] Tainted: [W]=WARN [ 500.989876][T28455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 500.989887][T28455] Call Trace: [ 500.989892][T28455] [ 500.989924][T28455] __dump_stack+0x1d/0x30 [ 500.990010][T28455] dump_stack_lvl+0xe8/0x140 [ 500.990092][T28455] dump_stack+0x15/0x1b [ 500.990107][T28455] should_fail_ex+0x265/0x280 [ 500.990137][T28455] should_failslab+0x8c/0xb0 [ 500.990208][T28455] __kmalloc_noprof+0xa5/0x570 [ 500.990308][T28455] ? security_sb_alloc+0x48/0x110 [ 500.990323][T28455] ? alloc_super+0x3d/0x550 [ 500.990342][T28455] security_sb_alloc+0x48/0x110 [ 500.990358][T28455] alloc_super+0xdc/0x550 [ 500.990376][T28455] sget_fc+0x24e/0x6e0 [ 500.990403][T28455] ? __pfx_set_anon_super_fc+0x10/0x10 [ 500.990424][T28455] ? __pfx_mqueue_fill_super+0x10/0x10 [ 500.990442][T28455] get_tree_nodev+0x2a/0x100 [ 500.990519][T28455] mqueue_get_tree+0x63/0x90 [ 500.990536][T28455] vfs_get_tree+0x57/0x1d0 [ 500.990595][T28455] fc_mount_longterm+0x18/0xb0 [ 500.990665][T28455] mq_init_ns+0x249/0x2f0 [ 500.990693][T28455] copy_ipcs+0x1ed/0x3a0 [ 500.990711][T28455] create_new_namespaces+0x12a/0x3d0 [ 500.990761][T28455] unshare_nsproxy_namespaces+0xe8/0x120 [ 500.990780][T28455] ksys_unshare+0x3d0/0x6d0 [ 500.990811][T28455] ? ksys_write+0x15f/0x1a0 [ 500.990891][T28455] __x64_sys_unshare+0x1f/0x30 [ 500.990993][T28455] x64_sys_call+0x2915/0x3000 [ 500.991013][T28455] do_syscall_64+0xd2/0x200 [ 500.991030][T28455] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 500.991077][T28455] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 500.991104][T28455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.991122][T28455] RIP: 0033:0x7fd9dba7f6c9 [ 500.991134][T28455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.991221][T28455] RSP: 002b:00007fd9da4e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 500.991237][T28455] RAX: ffffffffffffffda RBX: 00007fd9dbcd5fa0 RCX: 00007fd9dba7f6c9 [ 500.991247][T28455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 500.991256][T28455] RBP: 00007fd9da4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 500.991266][T28455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.991276][T28455] R13: 00007fd9dbcd6038 R14: 00007fd9dbcd5fa0 R15: 00007ffe5fb01c38 [ 500.991363][T28455] [ 501.048885][T28458] ALSA: seq fatal error: cannot create timer (-19) [ 501.275239][T28466] rdma_rxe: rxe_newlink: failed to add lo [ 501.501936][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 501.502091][T26260] Bluetooth: hci0: command 0x1003 tx timeout [ 501.512523][T28503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28503 comm=syz.3.8630 [ 501.531172][T28503] loop3: detected capacity change from 0 to 512 [ 501.543735][T28503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.556572][T28503] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 501.583391][T22441] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.671190][T28529] bridge: RTM_NEWNEIGH with invalid ether address [ 502.145957][T24984] Bluetooth: hci0: Frame reassembly failed (-84) [ 502.252806][T28570] __nla_validate_parse: 4 callbacks suppressed [ 502.252824][T28570] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8659'. [ 502.336736][T28578] rdma_rxe: rxe_newlink: failed to add lo [ 502.395453][T28582] loop5: detected capacity change from 0 to 512 [ 502.423783][T28582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.436725][T28582] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 502.491009][T23482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.557506][ T29] kauditd_printk_skb: 778 callbacks suppressed [ 502.557524][ T29] audit: type=1326 audit(1763218534.660:51074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28590 comm="syz.2.8668" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2974f8f6c9 code=0x0 [ 502.642782][T28603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8673'. [ 502.676216][ T29] audit: type=1326 audit(1763218534.780:51075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28590 comm="syz.2.8668" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2974f8f6c9 code=0x0 [ 502.738614][T28612] loop3: detected capacity change from 0 to 512 [ 502.753981][T28612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.766600][T28612] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 502.790794][T22441] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.322755][T28619] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8679'. [ 503.334031][T28619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8679'. [ 503.352230][T28619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8679'. [ 503.386620][T28621] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28621 comm=syz.5.8680 [ 503.403781][T28621] loop5: detected capacity change from 0 to 512 [ 503.413977][T28621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.427043][T28621] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 503.445241][T28626] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 503.453660][T28626] team0: Device macvtap1 is already an upper device of the team interface [ 503.463983][T23482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.509879][ T29] audit: type=1326 audit(1763218535.610:51076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28634 comm="syz.2.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2974f8f6c9 code=0x7ffc0000 [ 503.540146][ T29] audit: type=1326 audit(1763218535.610:51077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28634 comm="syz.2.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2974f8f6c9 code=0x7ffc0000 [ 503.563914][ T29] audit: type=1326 audit(1763218535.610:51078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28634 comm="syz.2.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f2974f8f6c9 code=0x7ffc0000 [ 503.587888][ T29] audit: type=1326 audit(1763218535.610:51079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28634 comm="syz.2.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2974f8f6c9 code=0x7ffc0000 [ 503.611509][ T29] audit: type=1326 audit(1763218535.610:51080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28634 comm="syz.2.8685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2974f8f6c9 code=0x7ffc0000 [ 503.641811][T28638] loop5: detected capacity change from 0 to 512 [ 503.649762][ T29] audit: type=1400 audit(1763218535.700:51081): avc: denied { ioctl } for pid=28625 comm="syz.1.8681" path="socket:[103841]" dev="sockfs" ino=103841 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 503.675510][ T29] audit: type=1400 audit(1763218535.700:51082): avc: denied { bind } for pid=28625 comm="syz.1.8681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 503.710517][T28638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.727786][T28638] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 503.743967][T28652] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8691'. [ 503.761387][T23482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.771293][T28652] hub 9-0:1.0: USB hub found [ 503.777892][T28652] hub 9-0:1.0: 8 ports detected [ 503.797694][ T29] audit: type=1326 audit(1763218535.900:51083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28657 comm="syz.5.8693" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9dba7f6c9 code=0x0 [ 503.818122][T28660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8696'. [ 503.822724][T28656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28656 comm=syz.1.8694 [ 503.883293][T28665] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28665 comm=syz.2.8697 [ 503.911906][T28665] loop2: detected capacity change from 0 to 512 [ 503.936604][T28665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.955106][T28673] rdma_rxe: rxe_newlink: failed to add lo [ 503.964047][T28665] ext4 filesystem being mounted at /579/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.029658][T20070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.041579][T28678] loop3: detected capacity change from 0 to 512 [ 504.065036][T28678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.086064][T28678] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.119033][T22441] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.137416][ T1043] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 504.141016][T28688] lo speed is unknown, defaulting to 1000 [ 504.145171][ T1043] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 504.145194][ T1043] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 504.145218][ T1043] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 504.151427][T28688] lo speed is unknown, defaulting to 1000 [ 504.158598][ T1043] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 504.158621][ T1043] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 504.195033][ T1043] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 504.202723][ T1043] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 504.210390][ T1043] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 504.218144][ T1043] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 504.222641][T26260] Bluetooth: hci0: command 0x1003 tx timeout [ 504.232052][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 504.234628][ T1043] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 504.273603][T28695] validate_nla: 3 callbacks suppressed [ 504.273658][T28695] netlink: 'syz.0.8708': attribute type 19 has an invalid length. [ 504.292751][T28695] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8708'. [ 504.312112][T24984] Bluetooth: hci0: Frame reassembly failed (-84) [ 504.340334][T28700] rdma_rxe: rxe_newlink: failed to add lo [ 504.378949][T28702] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28702 comm=syz.2.8712 [ 504.394876][T28702] loop2: detected capacity change from 0 to 512 [ 504.414510][T28702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.427442][T28702] ext4 filesystem being mounted at /584/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.458846][T20070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.724905][T24989] Bluetooth: hci1: Frame reassembly failed (-84) [ 504.804836][T28727] lo speed is unknown, defaulting to 1000 [ 504.810911][T28727] lo speed is unknown, defaulting to 1000 [ 505.024815][T28737] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28737 comm=syz.5.8726 [ 505.041123][T28737] loop5: detected capacity change from 0 to 512 [ 505.054242][T28737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.079264][T28737] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.106583][T23482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.127377][T28743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8727'. [ 505.146365][T28743] ALSA: seq fatal error: cannot create timer (-19) [ 505.897973][T28758] netlink: 'syz.1.8732': attribute type 2 has an invalid length. [ 505.905798][T28758] netlink: 'syz.1.8732': attribute type 2 has an invalid length. [ 505.913556][T28758] netlink: 'syz.1.8732': attribute type 1 has an invalid length. [ 505.921336][T28758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8732'. [ 505.933317][T28758] hub 9-0:1.0: USB hub found [ 505.938163][T28758] hub 9-0:1.0: 8 ports detected [ 506.010037][T28764] lo speed is unknown, defaulting to 1000 [ 506.016237][T28764] lo speed is unknown, defaulting to 1000 [ 506.178023][T28772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.186707][T28772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.382473][T18832] Bluetooth: hci0: command 0x1003 tx timeout [ 506.389132][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 506.736989][T28796] loop3: detected capacity change from 0 to 8192 [ 506.792778][T28796] loop3: p1 p2 p4 < > [ 506.796949][T28796] loop3: partition table partially beyond EOD, truncated [ 506.804396][T28796] loop3: p1 start 16777216 is beyond EOD, truncated [ 506.811113][T28796] loop3: p2 size 515840 extends beyond EOD, truncated [ 506.818181][T26260] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 506.824414][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 506.872861][T28796] loop3: p4 start 16777216 is beyond EOD, truncated [ 506.902900][T28798] sz1: rxe_newlink: already configured on lo [ 506.996084][T28806] sz1: rxe_newlink: already configured on lo [ 507.177618][T28802] loop5: detected capacity change from 0 to 8192 [ 507.254881][T28802] loop5: p1 p2 p4 < > [ 507.259003][T28802] loop5: partition table partially beyond EOD, truncated [ 507.266983][T28825] __nla_validate_parse: 2 callbacks suppressed [ 507.266998][T28825] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8758'. [ 507.282458][T28802] loop5: p1 start 16777216 is beyond EOD, truncated [ 507.289236][T28802] loop5: p2 size 515840 extends beyond EOD, truncated [ 507.296678][T28825] netlink: 'syz.1.8758': attribute type 2 has an invalid length. [ 507.303872][T28823] loop2: detected capacity change from 0 to 512 [ 507.304536][T28825] netlink: 'syz.1.8758': attribute type 2 has an invalid length. [ 507.318484][T28825] netlink: 'syz.1.8758': attribute type 1 has an invalid length. [ 507.318914][T28802] loop5: p4 start 16777216 is beyond EOD, truncated [ 507.326257][T28825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8758'. [ 507.341253][T28817] loop3: detected capacity change from 0 to 8192 [ 507.355956][T28823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.357195][T28825] hub 9-0:1.0: USB hub found [ 507.373175][T28825] hub 9-0:1.0: 8 ports detected [ 507.375943][T28823] ext4 filesystem being mounted at /591/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 507.392689][T28817] loop3: p1 p2 p4 < > [ 507.396808][T28817] loop3: partition table partially beyond EOD, truncated [ 507.415275][T28817] loop3: p1 start 16777216 is beyond EOD, truncated [ 507.421957][T28817] loop3: p2 size 515840 extends beyond EOD, truncated [ 507.429481][T28817] loop3: p4 start 16777216 is beyond EOD, truncated [ 507.466984][T28830] rdma_rxe: rxe_newlink: failed to add lo [ 507.476973][T20070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.543321][T28838] rdma_rxe: rxe_newlink: failed to add lo [ 507.604481][T28850] loop3: detected capacity change from 0 to 512 [ 507.614752][T28850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.629165][T28850] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 507.643239][T28855] loop5: detected capacity change from 0 to 512 [ 507.650603][T28855] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 507.663912][T28855] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 507.679564][T28855] EXT4-fs (loop5): 1 truncate cleaned up [ 507.680417][T22441] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.685860][T28855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.719622][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 507.719654][ T29] audit: type=1326 audit(1763218539.819:51348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 507.757001][ T29] audit: type=1326 audit(1763218539.819:51349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 507.781221][ T29] audit: type=1326 audit(1763218539.819:51350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 507.805085][ T29] audit: type=1326 audit(1763218539.819:51351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 507.828850][ T29] audit: type=1326 audit(1763218539.819:51352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 507.852581][ T29] audit: type=1326 audit(1763218539.819:51353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 507.876287][ T29] audit: type=1326 audit(1763218539.819:51354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 507.899927][ T29] audit: type=1326 audit(1763218539.819:51355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 507.923677][ T29] audit: type=1326 audit(1763218539.819:51356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 507.947314][ T29] audit: type=1326 audit(1763218539.819:51357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.3.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39e816f6c9 code=0x7ffc0000 [ 507.974271][ T1043] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 508.183449][T28876] netlink: 'syz.3.8776': attribute type 19 has an invalid length. [ 508.191790][T28876] netlink: 172 bytes leftover after parsing attributes in process `syz.3.8776'. [ 508.216478][T28864] lo speed is unknown, defaulting to 1000 [ 508.230171][T28864] lo speed is unknown, defaulting to 1000 [ 508.258104][T28885] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8777'. [ 508.273904][T28885] rdma_rxe: rxe_newlink: failed to add lo [ 508.304564][T28887] hub 9-0:1.0: USB hub found [ 508.309660][T28887] hub 9-0:1.0: 8 ports detected [ 508.353894][T23482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.393977][T24989] bridge_slave_1: left promiscuous mode [ 508.399706][T24989] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.420968][T24989] bridge_slave_0: left promiscuous mode [ 508.426801][T24989] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.445324][T25002] Bluetooth: hci0: Frame reassembly failed (-84) [ 508.488154][T28897] loop2: detected capacity change from 0 to 512 [ 508.504534][T28897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.517215][T28897] ext4 filesystem being mounted at /594/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 508.540748][T20070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.594483][T24989] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.604338][T24989] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.614261][T24989] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 508.614553][T28909] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8787'. [ 508.631703][T24989] $Hÿ (unregistering): Released all slaves [ 508.639560][T28909] rdma_rxe: rxe_newlink: failed to add lo [ 508.645701][T28864] chnl_net:caif_netlink_parms(): no params data found [ 508.704714][T24989] tipc: Left network mode [ 508.712874][T28918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8790'. [ 508.743855][T28864] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.750959][T28864] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.758312][T28864] bridge_slave_0: entered allmulticast mode [ 508.765094][T28864] bridge_slave_0: entered promiscuous mode [ 508.808850][T28864] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.816173][T28864] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.816320][T28926] loop2: detected capacity change from 0 to 512 [ 508.829326][T28864] bridge_slave_1: entered allmulticast mode [ 508.836313][T28864] bridge_slave_1: entered promiscuous mode [ 508.844553][T24989] hsr_slave_0: left promiscuous mode [ 508.851212][T24989] hsr_slave_1: left promiscuous mode [ 508.857500][T28926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.870082][T28926] ext4 filesystem being mounted at /602/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 508.896371][T20070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.907224][T24989] team0 (unregistering): Port device team_slave_1 removed [ 508.917377][T24989] team0 (unregistering): Port device team_slave_0 removed [ 508.947216][T28933] FAULT_INJECTION: forcing a failure. [ 508.947216][T28933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.954137][T24984] smc: removing ib device sz1 [ 508.960422][T28933] CPU: 1 UID: 0 PID: 28933 Comm: syz.2.8796 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 508.960499][T28933] Tainted: [W]=WARN [ 508.960506][T28933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 508.960555][T28933] Call Trace: [ 508.960563][T28933] [ 508.960573][T28933] __dump_stack+0x1d/0x30 [ 508.960604][T28933] dump_stack_lvl+0xe8/0x140 [ 508.960746][T28933] dump_stack+0x15/0x1b [ 508.960770][T28933] should_fail_ex+0x265/0x280 [ 508.960833][T28933] should_fail+0xb/0x20 [ 508.960882][T28933] should_fail_usercopy+0x1a/0x20 [ 508.960910][T28933] _copy_to_user+0x20/0xa0 [ 508.960989][T28933] __se_sys_move_pages+0xfbc/0x1360 [ 508.961036][T28933] ? get_pid_task+0x96/0xd0 [ 508.961153][T28933] ? ksys_write+0x192/0x1a0 [ 508.961186][T28933] __x64_sys_move_pages+0x78/0x90 [ 508.961231][T28933] x64_sys_call+0x2f87/0x3000 [ 508.961314][T28933] do_syscall_64+0xd2/0x200 [ 508.961383][T28933] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 508.961422][T28933] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 508.961468][T28933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.961496][T28933] RIP: 0033:0x7f2974f8f6c9 [ 508.961551][T28933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.961575][T28933] RSP: 002b:00007f29739ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 508.961601][T28933] RAX: ffffffffffffffda RBX: 00007f29751e5fa0 RCX: 00007f2974f8f6c9 [ 508.961618][T28933] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 508.961635][T28933] RBP: 00007f29739ef090 R08: 0000200000000040 R09: 0000000000000000 [ 508.961652][T28933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.961669][T28933] R13: 00007f29751e6038 R14: 00007f29751e5fa0 R15: 00007fff038e8638 [ 508.961717][T28933] [ 509.161109][T28864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.189220][T28864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.225111][T28936] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8797'. [ 509.235696][T28936] rdma_rxe: rxe_newlink: failed to add lo [ 509.253173][T28864] team0: Port device team_slave_0 added [ 509.265151][T28864] team0: Port device team_slave_1 added [ 509.312972][T28864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.319961][T28864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.346456][T28864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.365042][T28864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.372038][T28864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.398120][T28864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.439691][T28864] hsr_slave_0: entered promiscuous mode [ 509.449138][T28864] hsr_slave_1: entered promiscuous mode [ 509.466626][T24989] IPVS: stop unused estimator thread 0... [ 509.471691][T28952] lo speed is unknown, defaulting to 1000 [ 509.605630][T28955] netdevsim netdevsim1 eth0: entered allmulticast mode [ 509.612648][T28955] netdevsim netdevsim1 eth1: entered allmulticast mode [ 509.619755][T28955] netdevsim netdevsim1 eth2: entered allmulticast mode [ 509.626864][T28955] netdevsim netdevsim1 eth3: entered allmulticast mode [ 509.645162][T28959] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8806'. [ 509.654839][T28959] netlink: 'syz.3.8806': attribute type 2 has an invalid length. [ 509.662597][T28959] netlink: 'syz.3.8806': attribute type 2 has an invalid length. [ 509.670550][T28959] netlink: 'syz.3.8806': attribute type 1 has an invalid length. [ 509.678619][T28959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8806'. [ 509.694308][T28959] hub 9-0:1.0: USB hub found [ 509.699129][T28959] hub 9-0:1.0: 8 ports detected [ 509.737119][T28963] lo speed is unknown, defaulting to 1000 [ 509.744008][T28963] lo speed is unknown, defaulting to 1000 [ 509.749957][T28963] lo speed is unknown, defaulting to 1000 [ 509.787134][T28864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 509.797473][T28864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 509.806886][T28864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 509.808700][T28963] infiniband sz1: set down [ 509.818340][T28963] infiniband sz1: added lo [ 509.825488][ T36] lo speed is unknown, defaulting to 1000 [ 509.827762][T28864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 509.840582][T28963] RDS/IB: sz1: added [ 509.844989][T28963] smc: adding ib device sz1 with port count 1 [ 509.851240][T28963] smc: ib device sz1 port 1 has no pnetid [ 509.858655][ T36] lo speed is unknown, defaulting to 1000 [ 509.864580][T28963] lo speed is unknown, defaulting to 1000 [ 509.891380][T28974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8811'. [ 509.902417][T28864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.914577][T28864] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.929992][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.937096][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.950319][T25002] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.957423][T25002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.966969][T28963] lo speed is unknown, defaulting to 1000 [ 510.006536][T28982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.009505][T28963] lo speed is unknown, defaulting to 1000 [ 510.019821][T28982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.055200][T28864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.062578][T28963] lo speed is unknown, defaulting to 1000 [ 510.101502][T28963] lo speed is unknown, defaulting to 1000 [ 510.139826][T28963] lo speed is unknown, defaulting to 1000 [ 510.168245][T28864] veth0_vlan: entered promiscuous mode [ 510.178555][T28864] veth1_vlan: entered promiscuous mode [ 510.203022][T28864] veth0_macvtap: entered promiscuous mode [ 510.214084][T28864] veth1_macvtap: entered promiscuous mode [ 510.241902][T28864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.254237][T28864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.272094][T28993] loop3: detected capacity change from 0 to 512 [ 510.284894][T24986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.301598][T24986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.314225][T24986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.323455][T24986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.342374][T28999] lo speed is unknown, defaulting to 1000 [ 510.346634][T28993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.360768][T28993] ext4 filesystem being mounted at /501/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.370824][T28999] lo speed is unknown, defaulting to 1000 [ 510.409174][T22441] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.422097][T29005] rdma_rxe: rxe_newlink: failed to add lo [ 510.469976][T29007] netdevsim netdevsim3 eth0: entered allmulticast mode [ 510.477489][T26260] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 510.483647][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 510.489775][T29007] netdevsim netdevsim3 eth1: entered allmulticast mode [ 510.497163][T29007] netdevsim netdevsim3 eth2: entered allmulticast mode [ 510.504235][T29007] netdevsim netdevsim3 eth3: entered allmulticast mode [ 510.725163][T29040] rdma_rxe: rxe_newlink: failed to add lo [ 510.759293][T29023] lo speed is unknown, defaulting to 1000 [ 510.766406][T29023] lo speed is unknown, defaulting to 1000 [ 510.775806][T24984] Bluetooth: hci0: Frame reassembly failed (-84) [ 510.858605][T29023] chnl_net:caif_netlink_parms(): no params data found [ 510.906439][T29023] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.913873][T29023] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.921200][T29023] bridge_slave_0: entered allmulticast mode [ 510.927837][T29023] bridge_slave_0: entered promiscuous mode [ 510.935068][T29023] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.942178][T29023] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.952347][T29023] bridge_slave_1: entered allmulticast mode [ 510.959050][T29023] bridge_slave_1: entered promiscuous mode [ 510.980319][T29023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.991114][T29023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.011809][T29023] team0: Port device team_slave_0 added [ 511.020370][T29023] team0: Port device team_slave_1 added [ 511.038161][T29023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.045298][T29023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.071424][T29023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.083083][T29023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.090086][T29023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.116253][T29023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.145920][T29023] hsr_slave_0: entered promiscuous mode [ 511.152187][T29023] hsr_slave_1: entered promiscuous mode [ 511.158179][T29023] debugfs: 'hsr0' already exists in 'hsr' [ 511.164043][T29023] Cannot create hsr debugfs directory [ 511.200957][ T31] bridge_slave_1: left promiscuous mode [ 511.206881][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.214914][ T31] bridge_slave_0: left promiscuous mode [ 511.220618][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.324368][ T31] bond0 (unregistering): Released all slaves [ 511.435948][ T31] hsr_slave_0: left promiscuous mode [ 511.467907][ T31] team0 (unregistering): Port device team_slave_0 removed [ 511.634589][T29075] netlink: 'syz.5.8838': attribute type 19 has an invalid length. [ 511.736099][T29023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 511.745261][T29023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 511.755084][T29023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 511.764071][T29023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 511.775469][ T31] IPVS: stop unused estimator thread 0... [ 511.822525][T29023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.838607][T29023] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.848077][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.855342][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.873932][T24984] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.880995][T24984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.949787][T29023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.171925][T29023] veth0_vlan: entered promiscuous mode [ 512.187000][T29023] veth1_vlan: entered promiscuous mode [ 512.307337][T29023] veth0_macvtap: entered promiscuous mode [ 512.325512][T29023] veth1_macvtap: entered promiscuous mode [ 512.410352][T29023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.439751][T29023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.521286][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.643336][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.652150][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.693428][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.712806][T29101] FAULT_INJECTION: forcing a failure. [ 512.712806][T29101] name failslab, interval 1, probability 0, space 0, times 0 [ 512.725624][T29101] CPU: 0 UID: 0 PID: 29101 Comm: syz.2.8822 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 512.725703][T29101] Tainted: [W]=WARN [ 512.725713][T29101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 512.725729][T29101] Call Trace: [ 512.725736][T29101] [ 512.725745][T29101] __dump_stack+0x1d/0x30 [ 512.725767][T29101] dump_stack_lvl+0xe8/0x140 [ 512.725865][T29101] dump_stack+0x15/0x1b [ 512.725888][T29101] should_fail_ex+0x265/0x280 [ 512.725949][T29101] should_failslab+0x8c/0xb0 [ 512.725988][T29101] kmem_cache_alloc_noprof+0x50/0x480 [ 512.726032][T29101] ? getname_flags+0x80/0x3b0 [ 512.726074][T29101] getname_flags+0x80/0x3b0 [ 512.726114][T29101] do_readlinkat+0x64/0x320 [ 512.726135][T29101] __x64_sys_readlinkat+0x51/0x60 [ 512.726218][T29101] x64_sys_call+0x16b4/0x3000 [ 512.726248][T29101] do_syscall_64+0xd2/0x200 [ 512.726275][T29101] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 512.726328][T29101] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 512.726360][T29101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.726383][T29101] RIP: 0033:0x7f8e4e06f6c9 [ 512.726401][T29101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.726428][T29101] RSP: 002b:00007f8e4cacf038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 512.726460][T29101] RAX: ffffffffffffffda RBX: 00007f8e4e2c5fa0 RCX: 00007f8e4e06f6c9 [ 512.726477][T29101] RDX: 0000200000000780 RSI: 00002000000001c0 RDI: 0000000000000004 [ 512.726493][T29101] RBP: 00007f8e4cacf090 R08: 0000000000000000 R09: 0000000000000000 [ 512.726560][T29101] R10: 00000000000000c6 R11: 0000000000000246 R12: 0000000000000001 [ 512.726577][T29101] R13: 00007f8e4e2c6038 R14: 00007f8e4e2c5fa0 R15: 00007ffe99488ae8 [ 512.726636][T29101] [ 512.750011][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 512.750089][ T29] audit: type=1400 audit(1763218544.859:51439): avc: denied { bind } for pid=29104 comm="syz.5.8842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 512.803215][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 512.824010][T26260] Bluetooth: hci0: command 0x1003 tx timeout [ 512.971427][ T29] audit: type=1400 audit(1763218544.988:51440): avc: denied { listen } for pid=29104 comm="syz.5.8842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 512.991138][ T29] audit: type=1326 audit(1763218545.028:51441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 513.015096][ T29] audit: type=1326 audit(1763218545.028:51442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 513.038811][ T29] audit: type=1326 audit(1763218545.028:51443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 513.062620][ T29] audit: type=1326 audit(1763218545.028:51444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 513.086337][ T29] audit: type=1326 audit(1763218545.028:51445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 513.110184][ T29] audit: type=1326 audit(1763218545.028:51446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 513.139459][ T29] audit: type=1326 audit(1763218545.168:51447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 513.163247][ T29] audit: type=1326 audit(1763218545.168:51448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.5.8842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9dba7f6c9 code=0x7ffc0000 [ 513.212500][T29112] __nla_validate_parse: 5 callbacks suppressed [ 513.212545][T29112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8844'. [ 513.503317][ C0] ================================================================== [ 513.511444][ C0] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 513.518479][ C0] [ 513.520845][ C0] read-write to 0xffff888237d29de4 of 4 bytes by task 36 on cpu 1: [ 513.528730][ C0] wq_worker_running+0x95/0x120 [ 513.533582][ C0] schedule_timeout+0xb7/0x170 [ 513.538358][ C0] msleep+0x50/0x90 [ 513.542169][ C0] nsim_fib_event_work+0x3b21/0x4790 [ 513.547457][ C0] process_scheduled_works+0x4ce/0x9d0 [ 513.552954][ C0] worker_thread+0x582/0x770 [ 513.557543][ C0] kthread+0x489/0x510 [ 513.561614][ C0] ret_from_fork+0x122/0x1b0 [ 513.566205][ C0] ret_from_fork_asm+0x1a/0x30 [ 513.570970][ C0] [ 513.573290][ C0] read to 0xffff888237d29de4 of 4 bytes by interrupt on cpu 0: [ 513.580826][ C0] kick_pool+0x49/0x2d0 [ 513.585067][ C0] __queue_work+0x8cb/0xb50 [ 513.589568][ C0] queue_work_on+0xd1/0x160 [ 513.594072][ C0] wg_packet_send_staged_packets+0xa3c/0xce0 [ 513.600062][ C0] wg_packet_send_keepalive+0xeb/0x100 [ 513.605788][ C0] wg_expired_send_persistent_keepalive+0x3c/0x50 [ 513.612207][ C0] call_timer_fn+0x3b/0x2c0 [ 513.616708][ C0] __run_timer_base+0x415/0x610 [ 513.621558][ C0] run_timer_softirq+0x31/0x70 [ 513.626333][ C0] handle_softirqs+0xba/0x290 [ 513.631025][ C0] __irq_exit_rcu+0x3a/0xc0 [ 513.635541][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 513.641184][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.647165][ C0] _raw_spin_unlock_irq+0x2f/0x50 [ 513.652193][ C0] get_signal+0xc21/0xf70 [ 513.656524][ C0] arch_do_signal_or_restart+0x96/0x440 [ 513.662084][ C0] exit_to_user_mode_loop+0x77/0x110 [ 513.667399][ C0] do_syscall_64+0x1d6/0x200 [ 513.672074][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.677963][ C0] [ 513.680276][ C0] value changed: 0x00000000 -> 0x00000001 [ 513.685985][ C0] [ 513.688309][ C0] Reported by Kernel Concurrency Sanitizer on: [ 513.694460][ C0] CPU: 0 UID: 0 PID: 29088 Comm: syz.1.8839 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 513.705830][ C0] Tainted: [W]=WARN [ 513.709628][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 513.719679][ C0] ================================================================== [ 513.923741][T29128] loop3: detected capacity change from 0 to 8192 [ 513.963623][T29128] loop3: p1 p2 p4 < > [ 513.967785][T29128] loop3: partition table partially beyond EOD, truncated [ 513.975091][T29128] loop3: p1 start 16777216 is beyond EOD, truncated [ 513.981692][T29128] loop3: p2 size 515840 extends beyond EOD, truncated [ 513.989357][T29128] loop3: p4 start 16777216 is beyond EOD, truncated