last executing test programs: 4.533828252s ago: executing program 4 (id=3116): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = syz_clone(0x40000500, &(0x7f0000002080)="fbb3b90e65a2018c57258f7a8f60ed799d", 0x11, &(0x7f00000020c0), 0x0, &(0x7f0000002140)="0d647a303ea1b94f7125dd80a915ef908e120e914e7760441e40c42d870d42a60080596ae6bd3b1eee6fdd5b574d17a9b0589fd273264120c801ee7399d94eaed2d350f425cc225c398d4106f9c32e2f6a70f8860d2513102230b824d34c3677103dab0e853a3e9cdd004f") r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r6, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r7 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r6, r7) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, r6, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000900)="bc94ab7a05737880fa91355f2e53e501703d4baa7b03dc527d272a836c94b0f1a82f1e4a53ed29f8ee2ebbf7ccd2b04608279e12479039561d6155028034659e433a1347971dfe4edbc2481e39c26ec527817f2c8b20fa693aa753b7ee2d34fdbced68e1e83e5db30454af2b6dda2a9655e74ccd184936ba06c3f36af2b4cedb903a736f5061d94944a87dd0f0dad8d6baebd43f", 0x94}, {&(0x7f00000009c0)="38733a217abfd935cf21774ebb57afd68d05faa55a7310d9faa3f41cf993f4b1a16d832007c460fb443a91bb1d2980a089ca4f1b7f24da6a61cf83292097d7f90453efda40c9fdc25072a5e4ab070ab7d36c671506c478db0ed12f9833715184e6ea4a4163f53d346e53cc521c457cdfccbff91a776b075c1c72715c661acbfcbdeb2d294bc896ec3b06f64bbc507a8efae8ddc03697c0f3f8579c9757f340ab172b651bd39fc6a27a8d1c962f3f508f89ef494d1970fde2b28dec8c5068fd5029c591f3995abe8afd606537019cb4bdf8e159d15f232989a9aedc8df9be7fd12769002526256dc1", 0xe8}, {&(0x7f0000000b40)="4a64a2c8f585c0b5472cef1ec0a29c3112d4cba106efb46761a88250a40ae1aac7e88426988dcae4ac2f25e2dfbe7227760b75960f8b6cfc7af041fd83bb05384cb852e9ec181cf9e5bccea8863f8f1f3fe36d239f1ccdcfd1db882d874a5db5e97b87cc8784432f7adf6860e0a9b6475383001f451ea78825e8d94a8d1fb6fc7ed521af7e1acc16f20d1727659e7fe36ef1b98b641b78e58edf6ab47bec69e5dab73a23b7a512772759537d", 0xac}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r4, r2, r4, r0, r5, r4, r0, r1]}}], 0x50, 0x400c080}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="fdd9b154238614e02313c52fc14ec50f9b789397f8282e6ff33fa0d8457ee74f47183f5e52bc214f782c0395538c25f599fd0eb1c813af6885915780242a864488ad4f89986408f09e29cc859d6e60f384a2457f45c7eab60c4460b92ecedadc7d929b7a54becdb722391d9ad146047873d2abc7f2c1f2040cdd255db51206a7330f9f7258e6fff6854b9970d825bd7ab2c8be2691993eef90eee8e124dd6096289b6224abab91eaa8a6a73487b9cbd097efe24773b4bbc183bb9a648d3d528c55a4506740dd0819b06f78000000", 0xce}, {&(0x7f0000000ec0)="5ef7f95f94ddf747", 0x8}, {&(0x7f0000000f00)="145b1ae6", 0x4}, {&(0x7f0000000f40)="49b971c02ab6a3dbbf25fbf85b92dec63685588fdccaa40becc2a52bcd89862b369891e664b58c3feb50c66f5789d80fbc001d914bab5182a60851f47ade931509d9c0cdfdddee7581c2dd76be4b1c0cebf5fdd26278dfee68c84ff0ca5ee69fc536076944a1f09ad8d3baa14d1fed75735ac52bacf2cdffa4b56595d79cf4789b2cda109544147c22fde404d5068b9daf327a038e", 0x95}, {&(0x7f0000001000)="2150efa9a341c9ecfd05b1afb521d9d5956dbdadba7cf07a7e29749513a3db1d5d0fd1326ff3add44dfb83f5cc4c2c3ac2478332961a5026a845d1b69cb44e957aa3709abf93c87b9d9d2fd2cb917b4a6805a3d4e524012f7895c2de3963b2c2f2eed605448e9765c12facd28f5a2314ccd28ce37b9e161ca2e0e037b54b92120d0fb60519320117d4a27ebc9c70783722e5fa9b92bb74c819d4fac95cca78f0b18dff2ba12e82fb448ca80b94388f4e252ef99b4e458b73cf47b49ba6ca5f5766df5156bfcbaa0e6614f2a5b60dcbca0d5c4a8b5a255f5629f2e3c5f721b801053974889e26", 0xe6}, {&(0x7f0000001cc0)="fa6ea64ec0b7fdc0f27b75304f308c70c45b4904d5e5ecc2a0e5334cee46e9f06b53c97cbae2393aae76e442a04f7ab410b41934467959fabff3023658cb7a13e23264343c7060bbcb70c43ceaaf3277937bc8bdb602387f2301b21b70f6ceb844c026756a6b71ce983e42e0c30c3c4e48642253bd9587278d6359e6eccc353f18071ac43959380d8c5eaf2b01094a2d80563e6bce4ab403b5", 0x99}], 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000037000001000000010000d5028dfc7b9d", @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xe0, 0x8}}, {{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f00000018c0)="0dd3000e1c71f529b7e6c3dad1af7a0094152b77ecee6c39aff3d418176a68625e9133d3cbd2f891fae4f75e3117cebd565ff95b4b29dc6bef85fd2d04ed93d3b01d87e25fc50f2e213e8c6c57acae807875cd22e8a23ccd45067b", 0x5b}, {&(0x7f0000001940)="2d76cb6c72323d1e05a451855142be932d73083170d0ffaf81388df13b7a691b5475426a02d431f89baf5cc8265bbd427d1273651f7c2330462bd3ed245208a489eab8394e680bd639961e501964b45f7100eebc299da176bbb3e68b851db257e443547355473f9144acb8192ef472e84df8151de671f1d6c21c46", 0x7b}, {&(0x7f00000019c0)="7c8957df54c1bb12b853c9253394a51f0ff49cbc5f05fa4b7459430d104e01a2df1ad3bb30ec8334d304aa0632a52741c849cd262afe44a94ad79890081b201d7bfd51f1441f262e01ab6df93a9b6b72bfd283b9fd7723d81f27fa63533b8b236047b5e4686b406027cffc488537e71d38f317d37993be93c334c8a50c415f30432d66493d7d40c9c48d8e56cf03dc5b435b07cad2391c", 0x97}, {&(0x7f0000001a80)="e9cb9719022c01734cb63b7dae64b8612f69db40d17fa291b91b52c6501186f66fa2fb6c9b9f7bab6610d6b5e5ed5d4ddc2f5d44bf461722e51542e0df24a165d5691138d1f4165b4b33221b0f9f0413132201a1d1c2c6083a8c2b8f4327c35f84c4edcbb203eba16b74f40dfb9fc4268d6d2379c2889998c3c16d1f54abaf207b8a6212ffc9caf3cd332ef6ac3e461eb909f5606d0243f3c2371e7f647ce8b34e5d304cc255b4abe48b40eb7e15686972f1", 0xb2}, {&(0x7f0000001b40)="408c0505395ef25faaa6aae128472304ca9339294728563012704b50b4b5a8a4f1d535c7ad4be54a1451bb7194101c878561a74e24a67aa2db05b85d808ccf1c31e0bd2dfb5e69f42cb830c73d49a31bf3c5abbe665b050de7950544e4b08e773343d031a31634d9fa8d95cd1eeed96ed56d35646939daa9b0d6962590e187d9f34c292bde86a3d7cd8f991b2236d9d514c14498b182b5131c42a70a26ef637b908843ce546592ec0f4e864ba0143d1c3add1b7e7cf62e6474205e0fe08d13266f4569b4", 0xc4}], 0x5, &(0x7f0000002280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB='\x00\x00'], 0xa8, 0x4000000}}], 0x3, 0x40000c4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x50, 0x9, 0xfffffffc, 0x0, 0xffff2aef, 0x60, 0x802, 0x8, 0x1000}}) listen(0xffffffffffffffff, 0x3) r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000240)={0x65, 0xa, 0x0, 0x2001}, 0x8, 0xb, 0x0, 0x0, 0x2000, 0x208001, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r12, 0x800448d2, &(0x7f0000000100)) 4.421840743s ago: executing program 4 (id=3119): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 3.149106438s ago: executing program 4 (id=3132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000300)=""/156, 0x9c, 0x0, &(0x7f0000000580)=""/4096, 0x1000}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) (fail_nth: 1) 1.51135412s ago: executing program 4 (id=3146): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = syz_clone(0x40000500, &(0x7f0000002080)="fbb3b90e65a2018c57258f7a8f60ed799d", 0x11, &(0x7f00000020c0), 0x0, &(0x7f0000002140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r5, 0x0, 0x0) r7 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r6, r7) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, r6, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000900)="bc94ab7a05737880fa91355f2e53e501703d4baa7b03dc527d272a836c94b0f1a82f1e4a53ed29f8ee2ebbf7ccd2b04608279e12479039561d6155028034659e433a1347971dfe4edbc2481e39c26ec527817f2c8b20fa693aa753b7ee2d34fdbced68e1e83e5db30454af2b6dda2a9655e74ccd184936ba06c3f36af2b4cedb903a736f5061d94944a87dd0f0dad8d6baebd43f", 0x94}, {&(0x7f00000009c0)="38733a217abfd935cf21774ebb57afd68d05faa55a7310d9faa3f41cf993f4b1a16d832007c460fb443a91bb1d2980a089ca4f1b7f24da6a61cf83292097d7f90453efda40c9fdc25072a5e4ab070ab7d36c671506c478db0ed12f9833715184e6ea4a4163f53d346e53cc521c457cdfccbff91a776b075c1c72715c661acbfcbdeb2d294bc896ec3b06f64bbc507a8efae8ddc03697c0f3f8579c9757f340ab172b651bd39fc6a27a8d1c962f3f508f89ef494d1970fde2b28dec8c5068fd5029c591f3995abe8afd606537019cb4bdf8e159d15f232989a9aedc8df9be7fd12769002526256dc1", 0xe8}, {&(0x7f0000000b40)="4a64a2c8f585c0b5472cef1ec0a29c3112d4cba106efb46761a88250a40ae1aac7e88426988dcae4ac2f25e2dfbe7227760b75960f8b6cfc7af041fd83bb05384cb852e9ec181cf9e5bccea8863f8f1f3fe36d239f1ccdcfd1db882d874a5db5e97b87cc8784432f7adf6860e0a9b6475383001f451ea78825e8d94a8d1fb6fc7ed521af7e1acc16f20d1727659e7fe36ef1b98b641b78e58edf6ab47bec69e5dab73a23b7a512772759537d", 0xac}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r4, r2, r4, r0, r5, r4, r0, r1]}}], 0x50, 0x400c080}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="fdd9b154238614e02313c52fc14ec50f9b789397f8282e6ff33fa0d8457ee74f47183f5e52bc214f782c0395538c25f599fd0eb1c813af6885915780242a864488ad4f89986408f09e29cc859d6e60f384a2457f45c7eab60c4460b92ecedadc7d929b7a54becdb722391d9ad146047873d2abc7f2c1f2040cdd255db51206a7330f9f7258e6fff6854b9970d825bd7ab2c8be2691993eef90eee8e124dd6096289b6224abab91eaa8a6a73487b9cbd097efe24773b4bbc183bb9a648d3d528c55a4506740dd0819b06f78000000", 0xce}, {&(0x7f0000000ec0)="5ef7f95f94ddf747", 0x8}, {&(0x7f0000000f00)="145b1ae6", 0x4}, {&(0x7f0000000f40)="49b971c02ab6a3dbbf25fbf85b92dec63685588fdccaa40becc2a52bcd89862b369891e664b58c3feb50c66f5789d80fbc001d914bab5182a60851f47ade931509d9c0cdfdddee7581c2dd76be4b1c0cebf5fdd26278dfee68c84ff0ca5ee69fc536076944a1f09ad8d3baa14d1fed75735ac52bacf2cdffa4b56595d79cf4789b2cda109544147c22fde404d5068b9daf327a038e", 0x95}, {&(0x7f0000001000)="2150efa9a341c9ecfd05b1afb521d9d5956dbdadba7cf07a7e29749513a3db1d5d0fd1326ff3add44dfb83f5cc4c2c3ac2478332961a5026a845d1b69cb44e957aa3709abf93c87b9d9d2fd2cb917b4a6805a3d4e524012f7895c2de3963b2c2f2eed605448e9765c12facd28f5a2314ccd28ce37b9e161ca2e0e037b54b92120d0fb60519320117d4a27ebc9c70783722e5fa9b92bb74c819d4fac95cca78f0b18dff2ba12e82fb448ca80b94388f4e252ef99b4e458b73cf47b49ba6ca5f5766df5156bfcbaa0e6614f2a5b60dcbca0d5c4a8b5a255f5629f2e3c5f721b801053974889e26", 0xe6}, {&(0x7f0000001cc0)="fa6ea64ec0b7fdc0f27b75304f308c70c45b4904d5e5ecc2a0e5334cee46e9f06b53c97cbae2393aae76e442a04f7ab410b41934467959fabff3023658cb7a13e23264343c7060bbcb70c43ceaaf3277937bc8bdb602387f2301b21b70f6ceb844c026756a6b71ce983e42e0c30c3c4e48642253bd9587278d6359e6eccc353f18071ac43959380d8c5eaf2b01094a2d80563e6bce4ab403b5", 0x99}], 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000037000001000000010000d5028dfc7b9d", @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xe0, 0x8}}, {{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f00000018c0)="0dd3000e1c71f529b7e6c3dad1af7a0094152b77ecee6c39aff3d418176a68625e9133d3cbd2f891fae4f75e3117cebd565ff95b4b29dc6bef85fd2d04ed93d3b01d87e25fc50f2e213e8c6c57acae807875cd22e8a23ccd45067b", 0x5b}, {&(0x7f0000001940)="2d76cb6c72323d1e05a451855142be932d73083170d0ffaf81388df13b7a691b5475426a02d431f89baf5cc8265bbd427d1273651f7c2330462bd3ed245208a489eab8394e680bd639961e501964b45f7100eebc299da176bbb3e68b851db257e443547355473f9144acb8192ef472e84df8151de671f1d6c21c46", 0x7b}, {&(0x7f00000019c0)="7c8957df54c1bb12b853c9253394a51f0ff49cbc5f05fa4b7459430d104e01a2df1ad3bb30ec8334d304aa0632a52741c849cd262afe44a94ad79890081b201d7bfd51f1441f262e01ab6df93a9b6b72bfd283b9fd7723d81f27fa63533b8b236047b5e4686b406027cffc488537e71d38f317d37993be93c334c8a50c415f30432d66493d7d40c9c48d8e56cf03dc5b435b07cad2391c", 0x97}, {&(0x7f0000001a80)="e9cb9719022c01734cb63b7dae64b8612f69db40d17fa291b91b52c6501186f66fa2fb6c9b9f7bab6610d6b5e5ed5d4ddc2f5d44bf461722e51542e0df24a165d5691138d1f4165b4b33221b0f9f0413132201a1d1c2c6083a8c2b8f4327c35f84c4edcbb203eba16b74f40dfb9fc4268d6d2379c2889998c3c16d1f54abaf207b8a6212ffc9caf3cd332ef6ac3e461eb909f5606d0243f3c2371e7f647ce8b34e5d304cc255b4abe48b40eb7e15686972f1", 0xb2}, {&(0x7f0000001b40)="408c0505395ef25faaa6aae128472304ca9339294728563012704b50b4b5a8a4f1d535c7ad4be54a1451bb7194101c878561a74e24a67aa2db05b85d808ccf1c31e0bd2dfb5e69f42cb830c73d49a31bf3c5abbe665b050de7950544e4b08e773343d031a31634d9fa8d95cd1eeed96ed56d35646939daa9b0d6962590e187d9f34c292bde86a3d7cd8f991b2236d9d514c14498b182b5131c42a70a26ef637b908843ce546592ec0f4e864ba0143d1c3add1b7e7c", 0xb5}], 0x5, &(0x7f0000002280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000000}}], 0x3, 0x40000c4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000240)={0x65, 0xa, 0x0, 0x2001}, 0x8, 0xb, 0x0, 0x0, 0x2000, 0x208001, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)) 1.479481693s ago: executing program 3 (id=3148): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES64], 0x38}}, 0x20000004) 1.326399618s ago: executing program 3 (id=3150): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = syz_clone(0x40000500, &(0x7f0000002080)="fbb3b90e65a2018c57258f7a8f60ed799d", 0x11, &(0x7f00000020c0), 0x0, &(0x7f0000002140)="0d647a303ea1b94f7125dd80a915ef908e120e914e7760441e40c42d870d42a60080596ae6bd3b1eee6fdd5b574d17a9b0589fd273264120c801ee7399d94eaed2d350f425cc225c398d4106f9c32e2f6a70f8860d2513102230b824d34c3677103dab0e853a3e9cdd004f") r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r6, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r7 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r6, r7) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, r6, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000900)="bc94ab7a05737880fa91355f2e53e501703d4baa7b03dc527d272a836c94b0f1a82f1e4a53ed29f8ee2ebbf7ccd2b04608279e12479039561d6155028034659e433a1347971dfe4edbc2481e39c26ec527817f2c8b20fa693aa753b7ee2d34fdbced68e1e83e5db30454af2b6dda2a9655e74ccd184936ba06c3f36af2b4cedb903a736f5061d94944a87dd0f0dad8d6baebd43f", 0x94}, {&(0x7f00000009c0)="38733a217abfd935cf21774ebb57afd68d05faa55a7310d9faa3f41cf993f4b1a16d832007c460fb443a91bb1d2980a089ca4f1b7f24da6a61cf83292097d7f90453efda40c9fdc25072a5e4ab070ab7d36c671506c478db0ed12f9833715184e6ea4a4163f53d346e53cc521c457cdfccbff91a776b075c1c72715c661acbfcbdeb2d294bc896ec3b06f64bbc507a8efae8ddc03697c0f3f8579c9757f340ab172b651bd39fc6a27a8d1c962f3f508f89ef494d1970fde2b28dec8c5068fd5029c591f3995abe8afd606537019cb4bdf8e159d15f232989a9aedc8df9be7fd12769002526256dc1", 0xe8}, {&(0x7f0000000b40)="4a64a2c8f585c0b5472cef1ec0a29c3112d4cba106efb46761a88250a40ae1aac7e88426988dcae4ac2f25e2dfbe7227760b75960f8b6cfc7af041fd83bb05384cb852e9ec181cf9e5bccea8863f8f1f3fe36d239f1ccdcfd1db882d874a5db5e97b87cc8784432f7adf6860e0a9b6475383001f451ea78825e8d94a8d1fb6fc7ed521af7e1acc16f20d1727659e7fe36ef1b98b641b78e58edf6ab47bec69e5dab73a23b7a512772759537d", 0xac}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r4, r2, r4, r0, r5, r4, r0, r1]}}], 0x50, 0x400c080}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="fdd9b154238614e02313c52fc14ec50f9b789397f8282e6ff33fa0d8457ee74f47183f5e52bc214f782c0395538c25f599fd0eb1c813af6885915780242a864488ad4f89986408f09e29cc859d6e60f384a2457f45c7eab60c4460b92ecedadc7d929b7a54becdb722391d9ad146047873d2abc7f2c1f2040cdd255db51206a7330f9f7258e6fff6854b9970d825bd7ab2c8be2691993eef90eee8e124dd6096289b6224abab91eaa8a6a73487b9cbd097efe24773b4bbc183bb9a648d3d528c55a4506740dd0819b06f78000000", 0xce}, {&(0x7f0000000ec0)="5ef7f95f94ddf747", 0x8}, {&(0x7f0000000f00)="145b1ae6", 0x4}, {&(0x7f0000000f40)="49b971c02ab6a3dbbf25fbf85b92dec63685588fdccaa40becc2a52bcd89862b369891e664b58c3feb50c66f5789d80fbc001d914bab5182a60851f47ade931509d9c0cdfdddee7581c2dd76be4b1c0cebf5fdd26278dfee68c84ff0ca5ee69fc536076944a1f09ad8d3baa14d1fed75735ac52bacf2cdffa4b56595d79cf4789b2cda109544147c22fde404d5068b9daf327a038e", 0x95}, {&(0x7f0000001000)="2150efa9a341c9ecfd05b1afb521d9d5956dbdadba7cf07a7e29749513a3db1d5d0fd1326ff3add44dfb83f5cc4c2c3ac2478332961a5026a845d1b69cb44e957aa3709abf93c87b9d9d2fd2cb917b4a6805a3d4e524012f7895c2de3963b2c2f2eed605448e9765c12facd28f5a2314ccd28ce37b9e161ca2e0e037b54b92120d0fb60519320117d4a27ebc9c70783722e5fa9b92bb74c819d4fac95cca78f0b18dff2ba12e82fb448ca80b94388f4e252ef99b4e458b73cf47b49ba6ca5f5766df5156bfcbaa0e6614f2a5b60dcbca0d5c4a8b5a255f5629f2e3c5f721b801053974889e26", 0xe6}, {&(0x7f0000001cc0)="fa6ea64ec0b7fdc0f27b75304f308c70c45b4904d5e5ecc2a0e5334cee46e9f06b53c97cbae2393aae76e442a04f7ab410b41934467959fabff3023658cb7a13e23264343c7060bbcb70c43ceaaf3277937bc8bdb602387f2301b21b70f6ceb844c026756a6b71ce983e42e0c30c3c4e48642253bd9587278d6359e6eccc353f18071ac43959380d8c5eaf2b01094a2d80563e6bce4ab403b5", 0x99}], 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000037000001000000010000d5028dfc7b9d", @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xe0, 0x8}}, {{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f00000018c0)="0dd3000e1c71f529b7e6c3dad1af7a0094152b77ecee6c39aff3d418176a68625e9133d3cbd2f891fae4f75e3117cebd565ff95b4b29dc6bef85fd2d04ed93d3b01d87e25fc50f2e213e8c6c57acae807875cd22e8a23ccd45067b", 0x5b}, {&(0x7f0000001940)="2d76cb6c72323d1e05a451855142be932d73083170d0ffaf81388df13b7a691b5475426a02d431f89baf5cc8265bbd427d1273651f7c2330462bd3ed245208a489eab8394e680bd639961e501964b45f7100eebc299da176bbb3e68b851db257e443547355473f9144acb8192ef472e84df8151de671f1d6c21c46", 0x7b}, {&(0x7f00000019c0)="7c8957df54c1bb12b853c9253394a51f0ff49cbc5f05fa4b7459430d104e01a2df1ad3bb30ec8334d304aa0632a52741c849cd262afe44a94ad79890081b201d7bfd51f1441f262e01ab6df93a9b6b72bfd283b9fd7723d81f27fa63533b8b236047b5e4686b406027cffc488537e71d38f317d37993be93c334c8a50c415f30432d66493d7d40c9c48d8e56cf03dc5b435b07cad2391c", 0x97}, {&(0x7f0000001a80)="e9cb9719022c01734cb63b7dae64b8612f69db40d17fa291b91b52c6501186f66fa2fb6c9b9f7bab6610d6b5e5ed5d4ddc2f5d44bf461722e51542e0df24a165d5691138d1f4165b4b33221b0f9f0413132201a1d1c2c6083a8c2b8f4327c35f84c4edcbb203eba16b74f40dfb9fc4268d6d2379c2889998c3c16d1f54abaf207b8a6212ffc9caf3cd332ef6ac3e461eb909f5606d0243f3c2371e7f647ce8b34e5d304cc255b4abe48b40eb7e15686972f1", 0xb2}, {&(0x7f0000001b40)="408c0505395ef25faaa6aae128472304ca9339294728563012704b50b4b5a8a4f1d535c7ad4be54a1451bb7194101c878561a74e24a67aa2db05b85d808ccf1c31e0bd2dfb5e69f42cb830c73d49a31bf3c5abbe665b050de7950544e4b08e773343d031a31634d9fa8d95cd1eeed96ed56d35646939daa9b0d6962590e187d9f34c292bde86a3d7cd8f991b2236d9d514c14498b182b5131c42a70a26ef637b908843ce546592ec0f4e864ba0143d1c3add1b7e7cf62e6474205e0fe08d13266f4569b4", 0xc4}], 0x5, &(0x7f0000002280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00'], 0xa8, 0x4000000}}], 0x3, 0x40000c4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x50, 0x9, 0xfffffffc, 0x0, 0xffff2aef, 0x60, 0x802, 0x8, 0x1000}}) listen(0xffffffffffffffff, 0x3) r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000240)={0x65, 0xa, 0x0, 0x2001}, 0x8, 0xb, 0x0, 0x0, 0x2000, 0x208001, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r12, 0x800448d2, &(0x7f0000000100)) 1.161509285s ago: executing program 3 (id=3154): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1000, {[0x9, 0x2, 0xfffffffe, 0xfffffef9, 0x0, 0x40001, 0x2, 0x5]}}, 0x5c) 1.146294436s ago: executing program 4 (id=3155): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = syz_clone(0x40000500, &(0x7f0000002080)="fbb3b90e65a2018c57258f7a8f60ed799d", 0x11, &(0x7f00000020c0), 0x0, &(0x7f0000002140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r5, 0x0, 0x0) r7 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r6, r7) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, r6, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000900)="bc94ab7a05737880fa91355f2e53e501703d4baa7b03dc527d272a836c94b0f1a82f1e4a53ed29f8ee2ebbf7ccd2b04608279e12479039561d6155028034659e433a1347971dfe4edbc2481e39c26ec527817f2c8b20fa693aa753b7ee2d34fdbced68e1e83e5db30454af2b6dda2a9655e74ccd184936ba06c3f36af2b4cedb903a736f5061d94944a87dd0f0dad8d6baebd43f", 0x94}, {&(0x7f00000009c0)="38733a217abfd935cf21774ebb57afd68d05faa55a7310d9faa3f41cf993f4b1a16d832007c460fb443a91bb1d2980a089ca4f1b7f24da6a61cf83292097d7f90453efda40c9fdc25072a5e4ab070ab7d36c671506c478db0ed12f9833715184e6ea4a4163f53d346e53cc521c457cdfccbff91a776b075c1c72715c661acbfcbdeb2d294bc896ec3b06f64bbc507a8efae8ddc03697c0f3f8579c9757f340ab172b651bd39fc6a27a8d1c962f3f508f89ef494d1970fde2b28dec8c5068fd5029c591f3995abe8afd606537019cb4bdf8e159d15f232989a9aedc8df9be7fd12769002526256dc1", 0xe8}, {&(0x7f0000000b40)="4a64a2c8f585c0b5472cef1ec0a29c3112d4cba106efb46761a88250a40ae1aac7e88426988dcae4ac2f25e2dfbe7227760b75960f8b6cfc7af041fd83bb05384cb852e9ec181cf9e5bccea8863f8f1f3fe36d239f1ccdcfd1db882d874a5db5e97b87cc8784432f7adf6860e0a9b6475383001f451ea78825e8d94a8d1fb6fc7ed521af7e1acc16f20d1727659e7fe36ef1b98b641b78e58edf6ab47bec69e5dab73a23b7a512772759537d", 0xac}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r4, r2, r4, r0, r5, r4, r0, r1]}}], 0x50, 0x400c080}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="fdd9b154238614e02313c52fc14ec50f9b789397f8282e6ff33fa0d8457ee74f47183f5e52bc214f782c0395538c25f599fd0eb1c813af6885915780242a864488ad4f89986408f09e29cc859d6e60f384a2457f45c7eab60c4460b92ecedadc7d929b7a54becdb722391d9ad146047873d2abc7f2c1f2040cdd255db51206a7330f9f7258e6fff6854b9970d825bd7ab2c8be2691993eef90eee8e124dd6096289b6224abab91eaa8a6a73487b9cbd097efe24773b4bbc183bb9a648d3d528c55a4506740dd0819b06f78000000", 0xce}, {&(0x7f0000000ec0)="5ef7f95f94ddf747", 0x8}, {&(0x7f0000000f00)="145b1ae6", 0x4}, {&(0x7f0000000f40)="49b971c02ab6a3dbbf25fbf85b92dec63685588fdccaa40becc2a52bcd89862b369891e664b58c3feb50c66f5789d80fbc001d914bab5182a60851f47ade931509d9c0cdfdddee7581c2dd76be4b1c0cebf5fdd26278dfee68c84ff0ca5ee69fc536076944a1f09ad8d3baa14d1fed75735ac52bacf2cdffa4b56595d79cf4789b2cda109544147c22fde404d5068b9daf327a038e", 0x95}, {&(0x7f0000001000)="2150efa9a341c9ecfd05b1afb521d9d5956dbdadba7cf07a7e29749513a3db1d5d0fd1326ff3add44dfb83f5cc4c2c3ac2478332961a5026a845d1b69cb44e957aa3709abf93c87b9d9d2fd2cb917b4a6805a3d4e524012f7895c2de3963b2c2f2eed605448e9765c12facd28f5a2314ccd28ce37b9e161ca2e0e037b54b92120d0fb60519320117d4a27ebc9c70783722e5fa9b92bb74c819d4fac95cca78f0b18dff2ba12e82fb448ca80b94388f4e252ef99b4e458b73cf47b49ba6ca5f5766df5156bfcbaa0e6614f2a5b60dcbca0d5c4a8b5a255f5629f2e3c5f721b801053974889e26", 0xe6}, {&(0x7f0000001cc0)="fa6ea64ec0b7fdc0f27b75304f308c70c45b4904d5e5ecc2a0e5334cee46e9f06b53c97cbae2393aae76e442a04f7ab410b41934467959fabff3023658cb7a13e23264343c7060bbcb70c43ceaaf3277937bc8bdb602387f2301b21b70f6ceb844c026756a6b71ce983e42e0c30c3c4e48642253bd9587278d6359e6eccc353f18071ac43959380d8c5eaf2b01094a2d80563e6bce4ab403b5", 0x99}], 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000037000001000000010000d5028dfc7b9d", @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xe0, 0x8}}, {{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f00000018c0)="0dd3000e1c71f529b7e6c3dad1af7a0094152b77ecee6c39aff3d418176a68625e9133d3cbd2f891fae4f75e3117cebd565ff95b4b29dc6bef85fd2d04ed93d3b01d87e25fc50f2e213e8c6c57acae807875cd22e8a23ccd45067b", 0x5b}, {&(0x7f0000001940)="2d76cb6c72323d1e05a451855142be932d73083170d0ffaf81388df13b7a691b5475426a02d431f89baf5cc8265bbd427d1273651f7c2330462bd3ed245208a489eab8394e680bd639961e501964b45f7100eebc299da176bbb3e68b851db257e443547355473f9144acb8192ef472e84df8151de671f1d6c21c46", 0x7b}, {&(0x7f00000019c0)="7c8957df54c1bb12b853c9253394a51f0ff49cbc5f05fa4b7459430d104e01a2df1ad3bb30ec8334d304aa0632a52741c849cd262afe44a94ad79890081b201d7bfd51f1441f262e01ab6df93a9b6b72bfd283b9fd7723d81f27fa63533b8b236047b5e4686b406027cffc488537e71d38f317d37993be93c334c8a50c415f30432d66493d7d40c9c48d8e56cf03dc5b435b07cad2391c", 0x97}, {&(0x7f0000001a80)="e9cb9719022c01734cb63b7dae64b8612f69db40d17fa291b91b52c6501186f66fa2fb6c9b9f7bab6610d6b5e5ed5d4ddc2f5d44bf461722e51542e0df24a165d5691138d1f4165b4b33221b0f9f0413132201a1d1c2c6083a8c2b8f4327c35f84c4edcbb203eba16b74f40dfb9fc4268d6d2379c2889998c3c16d1f54abaf207b8a6212ffc9caf3cd332ef6ac3e461eb909f5606d0243f3c2371e7f647ce8b34e5d304cc255b4abe48b40eb7e15686972f1", 0xb2}, {&(0x7f0000001b40)="408c0505395ef25faaa6aae128472304ca9339294728563012704b50b4b5a8a4f1d535c7ad4be54a1451bb7194101c878561a74e24a67aa2db05b85d808ccf1c31e0bd2dfb5e69f42cb830c73d49a31bf3c5abbe665b050de7950544e4b08e773343d031a31634d9fa8d95cd1eeed96ed56d35646939daa9b0d6962590e187d9f34c292bde86a3d7cd8f991b2236d9d514c14498b182b5131c42a70a26ef637b908843ce546592ec0f4e864ba0143d1c3add", 0xb2}], 0x5, &(0x7f0000002280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000000}}], 0x3, 0x40000c4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000240)={0x65, 0xa, 0x0, 0x2001}, 0x8, 0xb, 0x0, 0x0, 0x2000, 0x208001, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)) 1.131910578s ago: executing program 3 (id=3156): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1000, {[0x9, 0x2, 0xfffffffe, 0xfffffef9, 0x0, 0x40001, 0x2, 0x5]}}, 0x5c) 1.125314608s ago: executing program 2 (id=3157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x45cab649}, 0x18) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r2) 1.097365261s ago: executing program 2 (id=3158): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000400), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xfff3, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 1.091813232s ago: executing program 3 (id=3159): syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5d2, &(0x7f00000005c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x5, &(0x7f0000000000)) 1.041734927s ago: executing program 2 (id=3160): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 1.017476459s ago: executing program 2 (id=3161): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES64], 0x38}}, 0x20000004) 947.171676ms ago: executing program 2 (id=3162): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='smaps_rollup\x00') close_range(r6, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffa896a77afab986dd606410a60008"], 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000080)=""/44) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) setresuid(0xee00, 0xee00, 0x0) unshare(0x28000600) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) 762.197254ms ago: executing program 4 (id=3164): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 446.921436ms ago: executing program 1 (id=3169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x45cab649}, 0x18) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r2) 428.324927ms ago: executing program 1 (id=3170): r0 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000001860000000000000000000a97600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x20, 0x1fffffffffffffcd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x20}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='kfree\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="00000000000000ff01000002000000000000000010d61689769be61e9671ab0294ae7062d8604968d094c6afd1a00c8c433b7ffe74465d3e347e91daaf0c7ac4b5de6fddbbabd2a539757edddf5b4de3523a61a168a65c3b0d6cc84754ffffff7f000000009ff01bd31f09e89d66e82ae982cf0e84485eb6d2f236", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00'}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x2000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 413.395418ms ago: executing program 0 (id=3171): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000400), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xfff3, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 362.480614ms ago: executing program 0 (id=3172): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 286.136881ms ago: executing program 1 (id=3173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x45cab649}, 0x18) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r2) 270.544493ms ago: executing program 1 (id=3174): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x6}, 0x18) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 258.838174ms ago: executing program 0 (id=3175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xfff3, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 239.471616ms ago: executing program 3 (id=3176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000300)=""/156, 0x9c, 0x0, &(0x7f0000000580)=""/4096, 0x1000}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115001c00ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) 130.404127ms ago: executing program 1 (id=3177): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = syz_clone(0x40000500, &(0x7f0000002080)="fbb3b90e65a2018c57258f7a8f60ed799d", 0x11, &(0x7f00000020c0), 0x0, &(0x7f0000002140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r5, 0x0, 0x0) r7 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r6, r7) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, r6, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000900)="bc94ab7a05737880fa91355f2e53e501703d4baa7b03dc527d272a836c94b0f1a82f1e4a53ed29f8ee2ebbf7ccd2b04608279e12479039561d6155028034659e433a1347971dfe4edbc2481e39c26ec527817f2c8b20fa693aa753b7ee2d34fdbced68e1e83e5db30454af2b6dda2a9655e74ccd184936ba06c3f36af2b4cedb903a736f5061d94944a87dd0f0dad8d6baebd43f", 0x94}, {&(0x7f00000009c0)="38733a217abfd935cf21774ebb57afd68d05faa55a7310d9faa3f41cf993f4b1a16d832007c460fb443a91bb1d2980a089ca4f1b7f24da6a61cf83292097d7f90453efda40c9fdc25072a5e4ab070ab7d36c671506c478db0ed12f9833715184e6ea4a4163f53d346e53cc521c457cdfccbff91a776b075c1c72715c661acbfcbdeb2d294bc896ec3b06f64bbc507a8efae8ddc03697c0f3f8579c9757f340ab172b651bd39fc6a27a8d1c962f3f508f89ef494d1970fde2b28dec8c5068fd5029c591f3995abe8afd606537019cb4bdf8e159d15f232989a9aedc8df9be7fd12769002526256dc1", 0xe8}, {&(0x7f0000000b40)="4a64a2c8f585c0b5472cef1ec0a29c3112d4cba106efb46761a88250a40ae1aac7e88426988dcae4ac2f25e2dfbe7227760b75960f8b6cfc7af041fd83bb05384cb852e9ec181cf9e5bccea8863f8f1f3fe36d239f1ccdcfd1db882d874a5db5e97b87cc8784432f7adf6860e0a9b6475383001f451ea78825e8d94a8d1fb6fc7ed521af7e1acc16f20d1727659e7fe36ef1b98b641b78e58edf6ab47bec69e5dab73a23b7a512772759537d", 0xac}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r4, r2, r4, r0, r5, r4, r0, r1]}}], 0x50, 0x400c080}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="fdd9b154238614e02313c52fc14ec50f9b789397f8282e6ff33fa0d8457ee74f47183f5e52bc214f782c0395538c25f599fd0eb1c813af6885915780242a864488ad4f89986408f09e29cc859d6e60f384a2457f45c7eab60c4460b92ecedadc7d929b7a54becdb722391d9ad146047873d2abc7f2c1f2040cdd255db51206a7330f9f7258e6fff6854b9970d825bd7ab2c8be2691993eef90eee8e124dd6096289b6224abab91eaa8a6a73487b9cbd097efe24773b4bbc183bb9a648d3d528c55a4506740dd0819b06f78000000", 0xce}, {&(0x7f0000000ec0)="5ef7f95f94ddf747", 0x8}, {&(0x7f0000000f00)="145b1ae6", 0x4}, {&(0x7f0000000f40)="49b971c02ab6a3dbbf25fbf85b92dec63685588fdccaa40becc2a52bcd89862b369891e664b58c3feb50c66f5789d80fbc001d914bab5182a60851f47ade931509d9c0cdfdddee7581c2dd76be4b1c0cebf5fdd26278dfee68c84ff0ca5ee69fc536076944a1f09ad8d3baa14d1fed75735ac52bacf2cdffa4b56595d79cf4789b2cda109544147c22fde404d5068b9daf327a038e", 0x95}, {&(0x7f0000001000)="2150efa9a341c9ecfd05b1afb521d9d5956dbdadba7cf07a7e29749513a3db1d5d0fd1326ff3add44dfb83f5cc4c2c3ac2478332961a5026a845d1b69cb44e957aa3709abf93c87b9d9d2fd2cb917b4a6805a3d4e524012f7895c2de3963b2c2f2eed605448e9765c12facd28f5a2314ccd28ce37b9e161ca2e0e037b54b92120d0fb60519320117d4a27ebc9c70783722e5fa9b92bb74c819d4fac95cca78f0b18dff2ba12e82fb448ca80b94388f4e252ef99b4e458b73cf47b49ba6ca5f5766df5156bfcbaa0e6614f2a5b60dcbca0d5c4a8b5a255f5629f2e3c5f721b801053974889e26", 0xe6}, {&(0x7f0000001cc0)="fa6ea64ec0b7fdc0f27b75304f308c70c45b4904d5e5ecc2a0e5334cee46e9f06b53c97cbae2393aae76e442a04f7ab410b41934467959fabff3023658cb7a13e23264343c7060bbcb70c43ceaaf3277937bc8bdb602387f2301b21b70f6ceb844c026756a6b71ce983e42e0c30c3c4e48642253bd9587278d6359e6eccc353f18071ac43959380d8c5eaf2b01094a2d80563e6bce4ab403b5", 0x99}], 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000037000001000000010000d5028dfc7b9d", @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xe0, 0x8}}, {{&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f00000018c0)="0dd3000e1c71f529b7e6c3dad1af7a0094152b77ecee6c39aff3d418176a68625e9133d3cbd2f891fae4f75e3117cebd565ff95b4b29dc6bef85fd2d04ed93d3b01d87e25fc50f2e213e8c6c57acae807875cd22e8a23ccd45067b", 0x5b}, {&(0x7f0000001940)="2d76cb6c72323d1e05a451855142be932d73083170d0ffaf81388df13b7a691b5475426a02d431f89baf5cc8265bbd427d1273651f7c2330462bd3ed245208a489eab8394e680bd639961e501964b45f7100eebc299da176bbb3e68b851db257e443547355473f9144acb8192ef472e84df8151de671f1d6c21c46", 0x7b}, {&(0x7f00000019c0)="7c8957df54c1bb12b853c9253394a51f0ff49cbc5f05fa4b7459430d104e01a2df1ad3bb30ec8334d304aa0632a52741c849cd262afe44a94ad79890081b201d7bfd51f1441f262e01ab6df93a9b6b72bfd283b9fd7723d81f27fa63533b8b236047b5e4686b406027cffc488537e71d38f317d37993be93c334c8a50c415f30432d66493d7d40c9c48d8e56cf03dc5b435b07cad2391c", 0x97}, {&(0x7f0000001a80)="e9cb9719022c01734cb63b7dae64b8612f69db40d17fa291b91b52c6501186f66fa2fb6c9b9f7bab6610d6b5e5ed5d4ddc2f5d44bf461722e51542e0df24a165d5691138d1f4165b4b33221b0f9f0413132201a1d1c2c6083a8c2b8f4327c35f84c4edcbb203eba16b74f40dfb9fc4268d6d2379c2889998c3c16d1f54abaf207b8a6212ffc9caf3cd332ef6ac3e461eb909f5606d0243f3c2371e7f647ce8b34e5d304cc255b4abe48b40eb7e15686972f1", 0xb2}, {&(0x7f0000001b40)="408c0505395ef25faaa6aae128472304ca9339294728563012704b50b4b5a8a4f1d535c7ad4be54a1451bb7194101c878561a74e24a67aa2db05b85d808ccf1c31e0bd2dfb5e69f42cb830c73d49a31bf3c5abbe665b050de7950544e4b08e773343d031a31634d9fa8d95cd1eeed96ed56d35646939daa9b0d6962590e187d9f34c292bde86a3d7cd8f991b2236d9d514c14498b182b5131c42a70a26ef637b908843ce546592ec0f4e864ba0143d1c3add1b7e7c", 0xb5}], 0x5, &(0x7f0000002280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000000}}], 0x3, 0x40000c4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000240)={0x65, 0xa, 0x0, 0x2001}, 0x8, 0xb, 0x0, 0x0, 0x2000, 0x208001, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)) 99.57091ms ago: executing program 0 (id=3178): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 51.422284ms ago: executing program 0 (id=3179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x45cab649}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r2) 38.579786ms ago: executing program 2 (id=3180): socket(0x2b, 0x80801, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.1055ms ago: executing program 0 (id=3181): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1000, {[0x9, 0x2, 0xfffffffe, 0xfffffef9, 0x0, 0x40001, 0x2, 0x5]}}, 0x5c) 0s ago: executing program 1 (id=3182): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xfb, 0x3ad, &(0x7f0000000800)="$eJzs3UFPXFUUAOAztGUoCsPCmKgx3tSNbiaAf6DEtImRREM7proweZVBJ0wZMjPBDDGWnVtX/ojGpTsT4x9gUffu3LFxyaLpMzNvKANFmrTA2Ph9CbzDu/fk3nkPXs7mcfbu/Hhvfa1TXcu6MXE9xURETOxHzA2ivtJ+nhdR/0wpJmPUTrxfufPn27c+/+LjpeXlGysp3Vy6/cFiSmn2nd++/e7na793X/nsl9lfy7E79+Xe34t/7b6++8be49vfNDqp0UkbrW7K0t1Wq5vdbdbTaqOzXk3p02Y969RTY6NTbx8ZX2u2Njd7KdtYnZnebNc7nZRt9NJ6vZe6rdRt91L2ddbYSNVqNc1MB/efMV57sLKSLRXx1Cnzrp/lpjhzl08dbbeXslJElJ8aqT04x00BAP9RR+v/OKH+79f8hWP1/07/2+Tx+v/WcPS56v8rof6/SKP1/1BpbJvhnPTr/8nh3++IsvofAAAAAAAAAAAAAABeDvt5XsnzvLKfj7z6URq+T5znlTFujQtweP+L4/Gvce+P8zXyjzumIpo/bNW2asWxGF9ai0Y0ox7zUYlH/UfCgSK++dHyjfk0UIqZe/cH+dceRtQuHc1fiErMjeRPDZ4vg/yFIj8N82cP9jY9mr8YlXjt5PXz8pH8WkT/OBnvvTuSX41K/PFVtKIZq4OlD/O/X0jpw0+Wj+WXB/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+H+opgNvRdH3fqsWcTW2hv37q4cTSsOUYX/84ocn/fXnoxKPTu7PP5/yS0/3578cb14e3+cGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFGd3vZ61mzW2xcVHPT8H5yZPAj+PatUTN85NnQ1nrXWwzPd/MRZXYTHeZ6f1+Wduthb+SLBlYjT7mA+/C158bVejYhT5pQjYvxX43mDn85xiXE9kQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGB8Dpt+j3snAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjFOnt72eNZv1dqe3PRHD4MmZswnG/RkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeJv8EAAD//2/6BuI=") bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x4}, 0x8) r0 = syz_io_uring_setup(0x21fd, &(0x7f0000000000)={0x0, 0x971f, 0x1000, 0x0, 0x25d}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x18) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000240001052abd7000fedbdf250900000006000300000000000600040000000000060003000000000006000400000000000600040000000000060003000000000006000300000000000600030017c8"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000400)='+j\xf5@\x00\xc9\xd2\xf5\x81\xf7\xc6\x051\xdc\xb1h-OC\xf6\xbd\xd2>\x12`\x0fO|\xf3O+\x9bf\x050\"G\x91\xf9\xb3\rCC\x88y\xb4\xadOF\xd7$\xea4\xfd\nW\xaa\xf0:\xefbj\x9f*Q+\x8c\x9e\x0eY\xb2\x8d\x1aG\x13\x0e\xdb>![\x86yI\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00') r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981dd"], 0x1000f) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=@base={0xa, 0x4, 0x7, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'virt_wifi0\x00', 0x0}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001f00)=@generic={&(0x7f0000001ec0)='./file1\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x13, 0x0, &(0x7f00000003c0), &(0x7f00000005c0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x4, '\x00', r6, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0xa, &(0x7f0000001f40)=[r7], &(0x7f0000001f80)=[{0x5, 0x4, 0xb, 0xb}, {0x1, 0x4, 0x6, 0x1}, {0x0, 0x2, 0x4, 0x3}, {0x5, 0x5, 0x6, 0x9}, {0x2, 0x3, 0x7, 0x4}, {0x0, 0x1, 0x0, 0x4}, {0x2, 0x2, 0xf, 0xa}, {0x4, 0x5, 0x8, 0x2}, {0x4, 0x4, 0x3, 0x2}, {0x2, 0x4, 0x0, 0x1}], 0x10, 0x6e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/4, 0x4}], &(0x7f0000000180)=[0x384e, 0x65, 0xe797, 0x5, 0xc8, 0x22, 0x5c9d, 0x47d]}, 0x20) syz_emit_ethernet(0x1f2, &(0x7f0000001cc0)={@remote, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "ec5f41", 0x1bc, 0x2f, 0xff, @private2, @private0, {[@fragment={0x3a, 0x0, 0x9, 0x1, 0x0, 0x1a, 0x66}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x3c, 0x3, [0x4], "f2c6fc48f1089c63957813ad96c56fbdc6515339c1c282be8b0c085b0d4569c3cfa65714eb3e6e23e654d21570a9b993642a836dd44db0d6feca4ac3"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "4292ddfb9647db4e49d4946514b043812c500d78ce633c4dcabfab82956bad8e77b1fb69c2b63e05a36bf81ed05b42be7d99f06a94a958a4b8f4d3d61758c85797d4896e9fbddbbb56e69500e552a05357560cfd59541d2841fa3b2f41d9ac1606b708db948a0a3ceaee5deaa30be57af86db66c63bf59fffd"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "3535ba995f08486cb9a63012852fe84ae76f3d0f9d080b75378f3c69b8c0c64b7b12d95bc54461670d5710d519aeceb5385f0ca33dd900f1aa06ed59d377b29ed921aed22e82826d"}, {0x8, 0x88be, 0x1, {{0x7, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0xe9}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0x80, 0x2, 0x1, 0x0, 0x2, 0x8}, 0x2, {0xffff7fff, 0xfff, 0x3, 0x12}}}, {0x8, 0x6558, 0x3, "8db92f61c57b576e34446ec525dfdb7519f41fdb2543a4d28d726b7bcbd4c474e475241a9d888fc0367ad2ea6a705277809fad2f740d44585a5ef70f2c7c3a2c31bf3a1647a012ead85eb323835f887756af1083bf37cab75230c0a9528a46bacc356646288409c99141d5940cf20a2313"}}}}}}}, &(0x7f00000002c0)={0x0, 0x4, [0x288, 0x4b9, 0x751, 0x666]}) kernel console output (not intermixed with test programs): 8] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.943822][T10088] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.956161][T10095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.965118][T10104] lo speed is unknown, defaulting to 1000 [ 165.969684][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.044138][T10105] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 166.067055][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.108817][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.208425][T10118] lo speed is unknown, defaulting to 1000 [ 166.227854][T10122] loop2: detected capacity change from 0 to 2048 [ 166.307186][T10122] Alternate GPT is invalid, using primary GPT. [ 166.313612][T10122] loop2: p1 p2 p3 [ 166.397743][T10125] lo speed is unknown, defaulting to 1000 [ 166.531148][T10142] lo speed is unknown, defaulting to 1000 [ 166.575736][T10145] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 166.645167][T10150] lo speed is unknown, defaulting to 1000 [ 166.719776][T10151] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 166.823682][T10168] netlink: 'syz.3.2262': attribute type 9 has an invalid length. [ 166.835921][T10168] hsr0: entered promiscuous mode [ 166.841009][T10168] macvlan2: entered promiscuous mode [ 166.846587][T10168] macvlan2: entered allmulticast mode [ 166.851995][T10168] hsr0: entered allmulticast mode [ 166.857100][T10168] hsr_slave_0: entered allmulticast mode [ 166.862757][T10168] hsr_slave_1: entered allmulticast mode [ 166.892551][T10170] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20000 [ 166.999615][T10174] lo speed is unknown, defaulting to 1000 [ 167.038234][T10178] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 167.227376][T10199] loop4: detected capacity change from 0 to 2048 [ 167.275352][T10204] 9pnet: Could not find request transport: fd [ 173.186144][T10537] __dump_stack+0x1d/0x30 [ 173.186171][T10537] dump_stack_lvl+0xe8/0x140 [ 173.186195][T10537] dump_stack+0x15/0x1b [ 173.186212][T10537] should_fail_ex+0x265/0x280 [ 173.186231][T10537] should_failslab+0x8c/0xb0 [ 173.186258][T10537] kmem_cache_alloc_noprof+0x50/0x480 [ 173.186290][T10537] ? vm_area_alloc+0x2c/0xb0 [ 173.186330][T10537] vm_area_alloc+0x2c/0xb0 [ 173.186367][T10537] mmap_region+0xa99/0x1620 [ 173.186431][T10537] do_mmap+0x9b3/0xbe0 [ 173.186456][T10537] __se_sys_remap_file_pages+0x537/0x5e0 [ 173.186495][T10537] ? fput+0x8f/0xc0 [ 173.186520][T10537] __x64_sys_remap_file_pages+0x67/0x80 [ 173.186550][T10537] x64_sys_call+0x23b3/0x3000 [ 173.186578][T10537] do_syscall_64+0xd2/0x200 [ 173.186597][T10537] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 173.186624][T10537] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 173.186656][T10537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.186683][T10537] RIP: 0033:0x7f9c22ffefc9 [ 173.186702][T10537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.186724][T10537] RSP: 002b:00007f9c21a5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 173.186748][T10537] RAX: ffffffffffffffda RBX: 00007f9c23255fa0 RCX: 00007f9c22ffefc9 [ 173.186764][T10537] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 173.186781][T10537] RBP: 00007f9c21a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.186796][T10537] R10: 0000000003000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.186812][T10537] R13: 00007f9c23256038 R14: 00007f9c23255fa0 R15: 00007ffe6be6fff8 [ 173.186838][T10537] [ 173.526796][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 173.526878][ T29] audit: type=1326 audit(1761359840.520:19401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 173.556851][ T29] audit: type=1326 audit(1761359840.520:19402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 173.580440][ T29] audit: type=1326 audit(1761359840.520:19403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 173.604678][ T29] audit: type=1326 audit(1761359840.520:19404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 173.628402][ T29] audit: type=1326 audit(1761359840.520:19405): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 173.652510][ T29] audit: type=1326 audit(1761359840.520:19406): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 173.664567][T10558] 9pnet: Could not find request transport: fd [ 174.486119][T10612] __dump_stack+0x1d/0x30 [ 174.486144][T10612] dump_stack_lvl+0xe8/0x140 [ 174.486164][T10612] dump_stack+0x15/0x1b [ 174.486232][T10612] should_fail_ex+0x265/0x280 [ 174.486257][T10612] should_failslab+0x8c/0xb0 [ 174.486290][T10612] kmem_cache_alloc_noprof+0x50/0x480 [ 174.486337][T10612] ? __anon_vma_prepare+0x70/0x2f0 [ 174.486364][T10612] __anon_vma_prepare+0x70/0x2f0 [ 174.486389][T10612] do_wp_page+0x18ee/0x2510 [ 174.486422][T10612] ? __rcu_read_lock+0x37/0x50 [ 174.486495][T10612] handle_mm_fault+0x77d/0x2be0 [ 174.486560][T10612] ? __rcu_read_unlock+0x4f/0x70 [ 174.486586][T10612] ? mt_find+0x208/0x320 [ 174.486615][T10612] do_user_addr_fault+0x3fe/0x1080 [ 174.486643][T10612] ? avc_has_perm_noaudit+0x1b1/0x200 [ 174.486671][T10612] exc_page_fault+0x62/0xa0 [ 174.486780][T10612] asm_exc_page_fault+0x26/0x30 [ 174.486804][T10612] RIP: 0010:__put_user_8+0xd/0x20 [ 174.486931][T10612] Code: 89 01 31 c9 0f 01 ca e9 11 83 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 174.486953][T10612] RSP: 0018:ffffc900116dfd90 EFLAGS: 00050202 [ 174.486980][T10612] RAX: 000770616d000000 RBX: 0000000000000000 RCX: 0000200000001080 [ 174.486996][T10612] RDX: 00000000000006cf RSI: 0000000000000000 RDI: ffff88810a8cc010 [ 174.487008][T10612] RBP: ffff888135560ad0 R08: 000188810a8cc017 R09: 0000000000000000 [ 174.487023][T10612] R10: ffffffff00000000 R11: ffffffff81cee750 R12: 0000000000002000 [ 174.487034][T10612] R13: ffff88810a8cc000 R14: ffff88810a8cc000 R15: 0000200000001080 [ 174.487052][T10612] ? __pfx_do_msg_fill+0x10/0x10 [ 174.487095][T10612] do_msg_fill+0x31/0xb0 [ 174.487129][T10612] ? __pfx_do_msg_fill+0x10/0x10 [ 174.487220][T10612] do_msgrcv+0x988/0xa00 [ 174.487254][T10612] ? __pfx_do_msg_fill+0x10/0x10 [ 174.487328][T10612] __x64_sys_msgrcv+0x6b/0x80 [ 174.487356][T10612] x64_sys_call+0x298e/0x3000 [ 174.487514][T10612] do_syscall_64+0xd2/0x200 [ 174.487535][T10612] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.487568][T10612] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.487599][T10612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.487681][T10612] RIP: 0033:0x7f987ebfefc9 [ 174.487768][T10612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.487789][T10612] RSP: 002b:00007f987d667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 174.487809][T10612] RAX: ffffffffffffffda RBX: 00007f987ee55fa0 RCX: 00007f987ebfefc9 [ 174.487824][T10612] RDX: 0000000000002000 RSI: 0000200000001080 RDI: 0000000000000000 [ 174.487839][T10612] RBP: 00007f987d667090 R08: 0000000000003000 R09: 0000000000000000 [ 174.487906][T10612] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 174.487920][T10612] R13: 00007f987ee56038 R14: 00007f987ee55fa0 R15: 00007ffd76e3de68 [ 174.487952][T10612] [ 174.881998][T10624] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 174.902325][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.109454][T10647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.319350][T10652] lo speed is unknown, defaulting to 1000 [ 175.787520][T10657] loop3: detected capacity change from 0 to 512 [ 175.825277][T10657] EXT4-fs (loop3): 1 orphan inode deleted [ 175.833040][T10657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.847792][ T1580] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1 [ 175.861461][T10657] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.055113][T10664] lo speed is unknown, defaulting to 1000 [ 176.155877][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.337858][T10675] loop3: detected capacity change from 0 to 512 [ 176.344638][T10675] EXT4-fs: Ignoring removed orlov option [ 176.350741][T10675] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 176.361660][T10675] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.2446: corrupted in-inode xattr: e_value size too large [ 176.405352][T10685] netlink: 'syz.2.2450': attribute type 9 has an invalid length. [ 176.416311][T10685] macvlan3: entered promiscuous mode [ 176.421687][T10685] macvlan3: entered allmulticast mode [ 176.428917][T10675] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2446: couldn't read orphan inode 15 (err -117) [ 176.442051][T10675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.563587][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.586353][T10693] lo speed is unknown, defaulting to 1000 [ 176.593651][T10694] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 176.635604][T10697] !60ªX¹¦À: left allmulticast mode [ 176.640824][T10697] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 176.713314][T10692] lo speed is unknown, defaulting to 1000 [ 176.752352][T10699] loop3: detected capacity change from 0 to 256 [ 177.204639][T10726] netlink: 'syz.0.2463': attribute type 9 has an invalid length. [ 177.212497][T10726] __nla_validate_parse: 1 callbacks suppressed [ 177.212514][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 177.275651][T10726] hsr0: entered promiscuous mode [ 177.280754][T10726] macvlan2: entered promiscuous mode [ 177.286231][T10726] macvlan2: entered allmulticast mode [ 177.291657][T10726] hsr0: entered allmulticast mode [ 177.296816][T10726] hsr_slave_0: entered allmulticast mode [ 177.302461][T10726] hsr_slave_1: entered allmulticast mode [ 177.398075][T10733] lo speed is unknown, defaulting to 1000 [ 177.430525][T10735] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 177.683439][T10744] netlink: 'syz.3.2468': attribute type 9 has an invalid length. [ 177.691308][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2468'. [ 177.735089][T10744] macvlan3: entered promiscuous mode [ 177.740662][T10744] macvlan3: entered allmulticast mode [ 177.836238][T10747] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 177.917069][T10750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.138020][T10759] lo speed is unknown, defaulting to 1000 [ 178.251411][T10763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2474'. [ 178.270737][T10760] lo speed is unknown, defaulting to 1000 [ 178.759233][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 178.759250][ T29] audit: type=1326 audit(1761359845.750:19769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 178.790664][ T29] audit: type=1326 audit(1761359845.760:19770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 178.814260][ T29] audit: type=1326 audit(1761359845.760:19771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 178.837936][ T29] audit: type=1326 audit(1761359845.760:19772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 178.861858][ T29] audit: type=1326 audit(1761359845.760:19773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 178.885709][ T29] audit: type=1326 audit(1761359845.760:19774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 178.909527][ T29] audit: type=1326 audit(1761359845.760:19775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 178.912788][T10795] loop1: detected capacity change from 0 to 512 [ 178.933156][ T29] audit: type=1326 audit(1761359845.760:19776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 178.963220][ T29] audit: type=1326 audit(1761359845.760:19777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 178.987104][ T29] audit: type=1326 audit(1761359845.770:19778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 178.990021][T10792] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2488'. [ 179.053850][T10795] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2486: error while reading EA inode 32 err=-116 [ 179.068608][T10798] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 179.093995][T10795] EXT4-fs (loop1): Remounting filesystem read-only [ 179.100798][T10795] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 179.115922][T10795] EXT4-fs (loop1): 1 orphan inode deleted [ 179.131968][T10795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.296792][T10819] 9pnet: Could not find request transport: fd [ 184.923941][T11143] __dump_stack+0x1d/0x30 [ 184.923971][T11143] dump_stack_lvl+0xe8/0x140 [ 184.923996][T11143] dump_stack+0x15/0x1b [ 184.924094][T11143] should_fail_ex+0x265/0x280 [ 184.924120][T11143] should_fail+0xb/0x20 [ 184.924139][T11143] should_fail_usercopy+0x1a/0x20 [ 184.924163][T11143] _copy_from_user+0x1c/0xb0 [ 184.924187][T11143] btf_new_fd+0x20f/0x790 [ 184.924275][T11143] bpf_btf_load+0x112/0x130 [ 184.924304][T11143] __sys_bpf+0x357/0x7c0 [ 184.924332][T11143] __x64_sys_bpf+0x41/0x50 [ 184.924394][T11143] x64_sys_call+0x2aee/0x3000 [ 184.924424][T11143] do_syscall_64+0xd2/0x200 [ 184.924447][T11143] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 184.924483][T11143] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 184.924528][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.924548][T11143] RIP: 0033:0x7f1ddf47efc9 [ 184.924568][T11143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.924587][T11143] RSP: 002b:00007f1dddee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.924681][T11143] RAX: ffffffffffffffda RBX: 00007f1ddf6d5fa0 RCX: 00007f1ddf47efc9 [ 184.924697][T11143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 184.924712][T11143] RBP: 00007f1dddee7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.924728][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.924744][T11143] R13: 00007f1ddf6d6038 R14: 00007f1ddf6d5fa0 R15: 00007fff061f99c8 [ 184.924770][T11143] [ 185.180683][T11150] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.225184][T11150] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2625'. [ 185.268629][T11156] lo speed is unknown, defaulting to 1000 [ 185.943424][T11171] loop2: detected capacity change from 0 to 256 [ 185.975398][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.995896][T11174] lo speed is unknown, defaulting to 1000 [ 186.026141][T11177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.042496][T11184] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 186.060284][T11187] netlink: 'syz.3.2633': attribute type 9 has an invalid length. [ 186.068108][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2633'. [ 186.086781][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2636'. [ 186.100590][T11186] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 186.123466][T11189] netlink: 'syz.2.2636': attribute type 39 has an invalid length. [ 186.180756][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2636'. [ 186.380867][T11209] lo speed is unknown, defaulting to 1000 [ 186.829161][T11227] netlink: 'syz.1.2648': attribute type 9 has an invalid length. [ 186.837072][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'. [ 186.924115][T11237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2653'. [ 186.941388][T11237] netlink: 'syz.4.2653': attribute type 39 has an invalid length. [ 187.028173][T11251] netlink: 'syz.1.2659': attribute type 9 has an invalid length. [ 187.121093][T11257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.145138][T11261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.195503][T11269] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20000 [ 187.254366][T11279] netlink: 'syz.4.2672': attribute type 9 has an invalid length. [ 187.267775][T11271] netlink: 'syz.1.2668': attribute type 39 has an invalid length. [ 187.328643][T11289] lo speed is unknown, defaulting to 1000 [ 187.426741][T11302] 9pnet: Could not find request transport: fd p4 [ 188.138109][T11339] loop3: p4 size 8388608 extends beyond EOD, truncated [ 188.217346][T11343] netlink: 'syz.4.2696': attribute type 9 has an invalid length. [ 188.225303][T11343] __nla_validate_parse: 8 callbacks suppressed [ 188.225338][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'. [ 188.349326][T11353] lo speed is unknown, defaulting to 1000 [ 188.394546][T11355] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 188.529896][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.672147][T11366] lo speed is unknown, defaulting to 1000 [ 188.984225][T11360] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 188.990877][T11360] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 188.998623][T11360] vhci_hcd vhci_hcd.0: Device attached [ 189.049964][T11381] vhci_hcd: connection closed [ 189.050423][ T153] vhci_hcd: stop threads [ 189.059567][ T153] vhci_hcd: release socket [ 189.064100][ T153] vhci_hcd: disconnect device [ 189.316430][T11389] lo speed is unknown, defaulting to 1000 [ 189.784537][T11399] loop4: detected capacity change from 0 to 736 [ 189.860818][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 189.860866][ T29] audit: type=1326 audit(1761359856.850:20708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 189.891534][ T29] audit: type=1326 audit(1761359856.860:20709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 189.915320][ T29] audit: type=1326 audit(1761359856.860:20710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 189.938847][ T29] audit: type=1326 audit(1761359856.860:20711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 189.962516][ T29] audit: type=1326 audit(1761359856.860:20712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 190.050689][ T29] audit: type=1326 audit(1761359857.040:20713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7262efc9 code=0x7ffc0000 [ 190.074727][ T29] audit: type=1326 audit(1761359857.040:20714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fec7262efc9 code=0x7ffc0000 [ 190.098624][ T29] audit: type=1326 audit(1761359857.040:20715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.0.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7262efc9 code=0x7ffc0000 [ 190.127238][ T29] audit: type=1400 audit(1761359857.120:20716): avc: denied { read append } for pid=11408 comm="syz.0.2717" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 190.152364][ T29] audit: type=1400 audit(1761359857.120:20717): avc: denied { open } for pid=11408 comm="syz.0.2717" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 190.241802][T11411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.320449][T11415] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 190.420486][T11426] netlink: 'syz.0.2724': attribute type 9 has an invalid length. [ 190.428496][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2724'. [ 190.440308][T11426] macvlan3: entered promiscuous mode [ 190.445855][T11426] macvlan3: entered allmulticast mode [ 190.524919][T11437] lo speed is unknown, defaulting to 1000 [ 190.663938][T11443] netlink: 'syz.4.2731': attribute type 1 has an invalid length. [ 190.740821][T11448] netlink: 'syz.2.2733': attribute type 9 has an invalid length. [ 190.748651][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2733'. [ 190.760245][T11448] macvlan4: entered promiscuous mode [ 190.765703][T11448] macvlan4: entered allmulticast mode [ 190.806256][ T3555] Bluetooth: hci0: Frame reassembly failed (-84) [ 191.207928][T11460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2737'. [ 191.219571][T11461] loop3: detected capacity change from 0 to 512 [ 191.263985][T11461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 191.276840][T11461] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.296107][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 191.343294][ T3555] Bluetooth: hci2: Frame reassembly failed (-84) [ 191.405561][T11478] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 191.425024][T11477] 9pnet: Could not find request transport: fd [ 192.918148][T11455] __dump_stack+0x1d/0x30 [ 192.918185][T11455] dump_stack_lvl+0xe8/0x140 [ 192.918210][T11455] dump_stack+0x15/0x1b [ 192.918267][T11455] should_fail_ex+0x265/0x280 [ 192.918292][T11455] should_failslab+0x8c/0xb0 [ 192.918330][T11455] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 192.918441][T11455] ? __alloc_skb+0x101/0x320 [ 192.918468][T11455] __alloc_skb+0x101/0x320 [ 192.918492][T11455] ? cancel_delayed_work_sync+0xa6/0xc0 [ 192.918589][T11455] hci_sock_dev_event+0xd0/0x2f0 [ 192.918610][T11455] hci_unregister_dev+0x244/0x2b0 [ 192.918641][T11455] hci_uart_tty_close+0x115/0x170 [ 192.918669][T11455] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 192.918763][T11455] tty_ldisc_kill+0x8d/0x140 [ 192.918785][T11455] tty_ldisc_hangup+0x2fa/0x370 [ 192.918806][T11455] __tty_hangup+0x3c2/0x540 [ 192.918826][T11455] tty_ioctl+0x601/0xb80 [ 192.918912][T11455] ? __pfx_tty_ioctl+0x10/0x10 [ 192.918932][T11455] __se_sys_ioctl+0xce/0x140 [ 192.918951][T11455] __x64_sys_ioctl+0x43/0x50 [ 192.918999][T11455] x64_sys_call+0x1816/0x3000 [ 192.919019][T11455] do_syscall_64+0xd2/0x200 [ 192.919037][T11455] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 192.919062][T11455] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 192.919163][T11455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.919186][T11455] RIP: 0033:0x7ffa662befc9 [ 192.919200][T11455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.919243][T11455] RSP: 002b:00007ffa64d1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.919271][T11455] RAX: ffffffffffffffda RBX: 00007ffa66515fa0 RCX: 00007ffa662befc9 [ 192.919287][T11455] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000005 [ 192.919301][T11455] RBP: 00007ffa64d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.919311][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.919322][T11455] R13: 00007ffa66516038 R14: 00007ffa66515fa0 R15: 00007ffe36d75018 [ 192.919341][T11455] [ 193.373113][T11456] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 193.373153][T11453] Bluetooth: hci2: command 0x1003 tx timeout [ 193.437669][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2764'. [ 193.453893][T11542] netlink: 'syz.4.2764': attribute type 39 has an invalid length. [ 193.464595][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2764'. [ 193.474732][T11544] FAULT_INJECTION: forcing a failure. [ 193.474732][T11544] name failslab, interval 1, probability 0, space 0, times 0 [ 193.488174][T11544] CPU: 1 UID: 0 PID: 11544 Comm: syz.0.2765 Not tainted syzkaller #0 PREEMPT(voluntary) [ 193.488207][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.488223][T11544] Call Trace: [ 193.488230][T11544] [ 193.488239][T11544] __dump_stack+0x1d/0x30 [ 193.488286][T11544] dump_stack_lvl+0xe8/0x140 [ 193.488306][T11544] dump_stack+0x15/0x1b [ 193.488322][T11544] should_fail_ex+0x265/0x280 [ 193.488396][T11544] ? alloc_async+0x2d/0x90 [ 193.488422][T11544] should_failslab+0x8c/0xb0 [ 193.488501][T11544] __kmalloc_cache_noprof+0x4c/0x4a0 [ 193.488591][T11544] alloc_async+0x2d/0x90 [ 193.488619][T11544] proc_do_submiturb+0x76d/0x1d20 [ 193.488657][T11544] proc_submiturb+0x7b/0xa0 [ 193.488684][T11544] usbdev_ioctl+0xcb6/0x1700 [ 193.488708][T11544] ? __pfx_usbdev_ioctl+0x10/0x10 [ 193.488769][T11544] __se_sys_ioctl+0xce/0x140 [ 193.488789][T11544] __x64_sys_ioctl+0x43/0x50 [ 193.488807][T11544] x64_sys_call+0x1816/0x3000 [ 193.488828][T11544] do_syscall_64+0xd2/0x200 [ 193.488844][T11544] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 193.488948][T11544] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 193.488975][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.489036][T11544] RIP: 0033:0x7fec7262efc9 [ 193.489053][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.489068][T11544] RSP: 002b:00007fec7108f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.489085][T11544] RAX: ffffffffffffffda RBX: 00007fec72885fa0 RCX: 00007fec7262efc9 [ 193.489095][T11544] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000003 [ 193.489106][T11544] RBP: 00007fec7108f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.489190][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.489200][T11544] R13: 00007fec72886038 R14: 00007fec72885fa0 R15: 00007fffce454ea8 [ 193.489221][T11544] [ 193.719368][T11548] lo speed is unknown, defaulting to 1000 [ 193.786399][T11555] lo speed is unknown, defaulting to 1000 [ 193.825536][T11557] lo speed is unknown, defaulting to 1000 [ 193.839715][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2767'. [ 193.856154][T11548] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2767'. [ 193.869886][T11559] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 193.917092][T11563] loop1: detected capacity change from 0 to 512 [ 193.923817][T11563] EXT4-fs: Ignoring removed orlov option [ 193.930198][T11563] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 193.941392][T11563] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2772: corrupted in-inode xattr: e_value size too large [ 193.956059][T11563] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2772: couldn't read orphan inode 15 (err -117) [ 193.968707][T11563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.030184][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.139910][T11592] loop2: detected capacity change from 0 to 512 [ 194.149004][T11592] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2784: EA inode hash validation failed [ 194.162708][T11592] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.2784: corrupted inode contents [ 194.175664][T11592] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.2784: mark_inode_dirty error [ 194.187698][T11592] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.2784: corrupted inode contents [ 194.200192][T11592] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.2784: mark_inode_dirty error [ 194.213148][T11592] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.2784: mark inode dirty (error -117) [ 194.234524][T11592] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 194.251276][T11592] EXT4-fs (loop2): 1 orphan inode deleted [ 194.260482][T11592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.303767][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.414897][T11608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.440194][T11610] lo speed is unknown, defaulting to 1000 [ 194.495413][T11612] lo speed is unknown, defaulting to 1000 [ 194.534226][T11610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2790'. [ 194.546337][T11610] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2790'. [ 194.775866][T11617] lo speed is unknown, defaulting to 1000 [ 194.873646][T11636] loop1: detected capacity change from 0 to 512 [ 194.877414][T11617] chnl_net:caif_netlink_parms(): no params data found [ 194.883745][T11636] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2796: EA inode hash validation failed [ 194.899685][T11636] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2796: corrupted inode contents [ 194.912197][T11636] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.2796: mark_inode_dirty error [ 194.924722][T11636] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2796: corrupted inode contents [ 194.936860][T11636] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.2796: mark_inode_dirty error [ 194.949112][T11636] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.2796: mark inode dirty (error -117) [ 194.961852][T11636] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 194.971020][T11636] EXT4-fs (loop1): 1 orphan inode deleted [ 194.977659][T11617] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.977754][T11636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.984887][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.004078][T11617] bridge_slave_0: entered allmulticast mode [ 195.010769][T11617] bridge_slave_0: entered promiscuous mode [ 195.018636][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 195.018653][ T29] audit: type=1326 audit(1761359862.010:21232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 195.048542][ T29] audit: type=1326 audit(1761359862.010:21233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 195.072602][ T29] audit: type=1326 audit(1761359862.010:21234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 195.099315][ T153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.114140][T11617] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.121273][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.126633][ T29] audit: type=1326 audit(1761359862.110:21235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 195.128891][T11617] bridge_slave_1: entered allmulticast mode [ 195.152150][ T29] audit: type=1326 audit(1761359862.110:21236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 195.158934][T11617] bridge_slave_1: entered promiscuous mode [ 195.183763][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.200057][ T29] audit: type=1326 audit(1761359862.190:21237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 195.223751][ T29] audit: type=1326 audit(1761359862.190:21238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 195.247478][ T29] audit: type=1326 audit(1761359862.190:21239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 195.271075][ T29] audit: type=1326 audit(1761359862.190:21240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 195.294798][ T29] audit: type=1326 audit(1761359862.190:21241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.4.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa662befc9 code=0x7ffc0000 [ 195.326949][T11617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.337801][T11617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.357419][ T153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.482445][T11617] team0: Port device team_slave_0 added [ 195.505885][ T153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.521581][T11617] team0: Port device team_slave_1 added [ 195.548079][T11661] loop2: detected capacity change from 0 to 512 [ 195.556931][T11661] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2802: error while reading EA inode 32 err=-116 [ 195.557221][T11617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.576268][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.576716][T11661] EXT4-fs (loop2): Remounting filesystem read-only [ 195.602284][T11617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.619661][T11661] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 195.629847][T11661] EXT4-fs (loop2): 1 orphan inode deleted [ 195.636077][T11661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.636998][ T153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.659721][T11617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.666747][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.692799][T11617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.719309][T11617] hsr_slave_0: entered promiscuous mode [ 195.725489][T11617] hsr_slave_1: entered promiscuous mode [ 195.731413][T11617] debugfs: 'hsr0' already exists in 'hsr' [ 195.737197][T11617] Cannot create hsr debugfs directory [ 195.817058][T11671] loop3: detected capacity change from 0 to 512 [ 195.826521][T11671] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.2808: EA inode hash validation failed [ 195.840075][T11671] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.2808: corrupted inode contents [ 195.852455][T11671] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.2808: mark_inode_dirty error [ 195.864085][T11671] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.2808: corrupted inode contents [ 195.876567][T11671] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.2808: mark_inode_dirty error [ 195.890070][T11671] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.2808: mark inode dirty (error -117) [ 195.902890][T11671] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 195.912002][T11671] EXT4-fs (loop3): 1 orphan inode deleted [ 195.918139][T11671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.945037][ T153] bond0 (unregistering): Released all slaves [ 195.952089][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.137625][ T153] hsr0: left allmulticast mode [ 196.142751][ T153] veth0_to_bridge: left promiscuous mode [ 196.148607][ T153] veth1_macvtap: left promiscuous mode [ 196.155643][ T153] veth0_macvtap: left promiscuous mode [ 196.171951][ T153] veth1_vlan: left promiscuous mode [ 196.177817][ T153] veth0_vlan: left promiscuous mode [ 196.393224][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.416084][T11675] lo speed is unknown, defaulting to 1000 [ 196.516830][T11695] loop1: detected capacity change from 0 to 512 [ 196.523645][T11695] EXT4-fs: Ignoring removed orlov option [ 196.529903][T11695] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 196.537240][T11697] loop2: detected capacity change from 0 to 512 [ 196.543654][T11695] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2817: corrupted in-inode xattr: e_value size too large [ 196.546800][T11697] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.2818: EA inode hash validation failed [ 196.559240][T11695] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2817: couldn't read orphan inode 15 (err -117) [ 196.584085][T11697] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.2818: corrupted inode contents [ 196.596618][T11697] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.2818: mark_inode_dirty error [ 196.597496][T11695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.608416][T11697] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.2818: corrupted inode contents [ 196.632992][T11701] loop4: detected capacity change from 0 to 512 [ 196.640861][T11697] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.2818: mark_inode_dirty error [ 196.661382][T11701] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2814: error while reading EA inode 32 err=-116 [ 196.663448][T11697] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.2818: mark inode dirty (error -117) [ 196.692539][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.694248][T11617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.708915][T11697] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 196.710855][T11617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.727471][T11617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.728071][T11701] EXT4-fs (loop4): Remounting filesystem read-only [ 196.743614][T11697] EXT4-fs (loop2): 1 orphan inode deleted [ 196.746335][T11617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.756258][T11697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.785253][T11701] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 196.806166][T11701] EXT4-fs (loop4): 1 orphan inode deleted [ 196.812437][T11701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.863011][T11617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.879424][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.894574][T11617] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.909184][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.916410][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.961088][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.968272][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.011647][T11617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.022125][T11617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.183871][T11617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.208013][T11744] loop1: detected capacity change from 0 to 512 [ 197.243935][T11744] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.2832: EA inode hash validation failed [ 197.273252][T11744] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2832: corrupted inode contents [ 197.296490][T11744] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.2832: mark_inode_dirty error [ 197.349807][T11617] veth0_vlan: entered promiscuous mode [ 197.359620][T11744] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2832: corrupted inode contents [ 197.374441][T11617] veth1_vlan: entered promiscuous mode [ 197.417771][T11744] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.2832: mark_inode_dirty error [ 197.435004][T11617] veth0_macvtap: entered promiscuous mode [ 197.442531][T11617] veth1_macvtap: entered promiscuous mode [ 197.448625][T11744] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.2832: mark inode dirty (error -117) [ 197.476610][T11744] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 197.490018][T11617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.499811][T11744] EXT4-fs (loop1): 1 orphan inode deleted [ 197.507835][T11617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.516780][T11744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.533703][ T3455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.546158][T11760] 9pnet: Could not find request transport: fd [ 212.804274][T12626] __dump_stack+0x1d/0x30 [ 212.804303][T12626] dump_stack_lvl+0xe8/0x140 [ 212.804328][T12626] dump_stack+0x15/0x1b [ 212.804359][T12626] should_fail_ex+0x265/0x280 [ 212.804384][T12626] should_failslab+0x8c/0xb0 [ 212.804469][T12626] kmem_cache_alloc_noprof+0x50/0x480 [ 212.804505][T12626] ? getname_flags+0x80/0x3b0 [ 212.804622][T12626] getname_flags+0x80/0x3b0 [ 212.804660][T12626] user_path_at+0x28/0x130 [ 212.804686][T12626] __se_sys_mount+0x25b/0x2e0 [ 212.804714][T12626] ? fput+0x8f/0xc0 [ 212.804871][T12626] __x64_sys_mount+0x67/0x80 [ 212.804903][T12626] x64_sys_call+0x2b51/0x3000 [ 212.804930][T12626] do_syscall_64+0xd2/0x200 [ 212.804952][T12626] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.804996][T12626] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 212.805107][T12626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.805138][T12626] RIP: 0033:0x7f3c880aefc9 [ 212.805176][T12626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.805210][T12626] RSP: 002b:00007f3c86b0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.805316][T12626] RAX: ffffffffffffffda RBX: 00007f3c88305fa0 RCX: 00007f3c880aefc9 [ 212.805340][T12626] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 212.805435][T12626] RBP: 00007f3c86b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 212.805463][T12626] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 212.805479][T12626] R13: 00007f3c88306038 R14: 00007f3c88305fa0 R15: 00007ffd1d2cf4a8 [ 212.805516][T12626] [ 213.055853][T12634] lo speed is unknown, defaulting to 1000 [ 213.139137][T12634] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 213.146965][T12639] netlink: 'syz.2.3131': attribute type 12 has an invalid length. [ 213.164185][T12639] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 213.195373][T12639] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 213.207788][T12639] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 213.383582][T12639] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 213.440999][T12640] lo speed is unknown, defaulting to 1000 [ 213.609945][T12647] FAULT_INJECTION: forcing a failure. [ 213.609945][T12647] name failslab, interval 1, probability 0, space 0, times 0 [ 213.623077][T12647] CPU: 1 UID: 0 PID: 12647 Comm: syz.4.3132 Not tainted syzkaller #0 PREEMPT(voluntary) [ 213.623111][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.623152][T12647] Call Trace: [ 213.623158][T12647] [ 213.623165][T12647] __dump_stack+0x1d/0x30 [ 213.623186][T12647] dump_stack_lvl+0xe8/0x140 [ 213.623210][T12647] dump_stack+0x15/0x1b [ 213.623231][T12647] should_fail_ex+0x265/0x280 [ 213.623305][T12647] should_failslab+0x8c/0xb0 [ 213.623334][T12647] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 213.623388][T12647] ? dup_task_struct+0x70/0x6b0 [ 213.623466][T12647] dup_task_struct+0x70/0x6b0 [ 213.623563][T12647] ? _parse_integer+0x27/0x40 [ 213.623596][T12647] copy_process+0x399/0x2000 [ 213.623700][T12647] ? kstrtouint+0x76/0xc0 [ 213.623733][T12647] ? bpf_send_signal_common+0x2ce/0x300 [ 213.623785][T12647] ? trace_reschedule_exit+0xd/0xc0 [ 213.623816][T12647] kernel_clone+0x16c/0x5c0 [ 213.623860][T12647] __x64_sys_clone+0xe6/0x120 [ 213.623905][T12647] x64_sys_call+0x119c/0x3000 [ 213.623933][T12647] do_syscall_64+0xd2/0x200 [ 213.624025][T12647] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 213.624052][T12647] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 213.624158][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.624178][T12647] RIP: 0033:0x7ffa662befc9 [ 213.624193][T12647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.624213][T12647] RSP: 002b:00007ffa64cdcfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 213.624266][T12647] RAX: ffffffffffffffda RBX: 00007ffa66516180 RCX: 00007ffa662befc9 [ 213.624282][T12647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060100000 [ 213.624297][T12647] RBP: 00007ffa64cdd090 R08: 0000200000000480 R09: 0000200000000480 [ 213.624313][T12647] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 213.624328][T12647] R13: 00007ffa66516218 R14: 00007ffa66516180 R15: 00007ffe36d75018 [ 213.624353][T12647] [ 214.517076][T12673] netlink: 'syz.2.3144': attribute type 9 has an invalid length. [ 214.524893][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 214.803000][T12678] loop1: detected capacity change from 0 to 512 [ 214.908466][T12673] hsr0: entered promiscuous mode [ 214.914865][T12678] EXT4-fs (loop1): 1 orphan inode deleted [ 214.921203][T12678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.934111][ T12] __quota_error: 367 callbacks suppressed [ 214.934129][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 214.934404][T12673] macvlan2: entered promiscuous mode [ 214.939884][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1 [ 214.952508][T12678] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.955912][T12673] macvlan2: entered allmulticast mode [ 214.982939][T12673] hsr0: entered allmulticast mode [ 214.988069][T12673] hsr_slave_0: entered allmulticast mode [ 214.993828][T12673] hsr_slave_1: entered allmulticast mode [ 215.009598][T12680] lo speed is unknown, defaulting to 1000 [ 215.029463][T12689] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 215.099316][T12694] lo speed is unknown, defaulting to 1000 [ 215.140025][T12701] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 215.140662][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3153'. [ 215.283523][T12708] lo speed is unknown, defaulting to 1000 [ 215.321076][T12718] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 215.329450][T12716] loop3: detected capacity change from 0 to 736 [ 215.493873][ T29] audit: type=1326 audit(1761359882.490:22240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c880aefc9 code=0x7ffc0000 [ 215.524421][T12462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.550364][ T29] audit: type=1326 audit(1761359882.520:22241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f3c880aefc9 code=0x7ffc0000 [ 215.574040][ T29] audit: type=1326 audit(1761359882.520:22242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c880aefc9 code=0x7ffc0000 [ 215.597650][ T29] audit: type=1326 audit(1761359882.520:22243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.3.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c880aefc9 code=0x7ffc0000 [ 215.641432][T12728] loop2: detected capacity change from 0 to 512 [ 215.655321][T12728] EXT4-fs (loop2): 1 orphan inode deleted [ 215.662049][T12728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.676742][ T52] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 215.686555][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 215.691750][T12736] lo speed is unknown, defaulting to 1000 [ 215.698589][T12728] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.732430][T12738] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 215.813856][T12741] lo speed is unknown, defaulting to 1000 [ 215.856710][T12742] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 215.928233][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 216.003451][T12751] netlink: 'syz.1.3170': attribute type 12 has an invalid length. [ 216.021273][T12751] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 216.035957][T12751] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 216.048351][T12751] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 216.060570][T12751] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 216.284498][T12768] lo speed is unknown, defaulting to 1000 [ 216.330001][T12771] vhci_hcd: default hub control req: 650a v0000 i0001 l0 [ 216.357192][T12304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.405316][T12780] loop1: detected capacity change from 0 to 512 [ 216.412408][T12780] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.412411][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3180'. [ 216.412524][T12776] ================================================================== [ 216.424192][T12776] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 216.424229][T12776] [ 216.424238][T12776] write to 0xffffffff88e542da of 8 bytes by task 12780 on cpu 0: [ 216.424270][T12776] vsnprintf+0x2ce/0x890 [ 216.424298][T12776] vscnprintf+0x41/0x90 [ 216.424325][T12776] printk_sprint+0x30/0x2d0 [ 216.424367][T12776] vprintk_store+0x599/0x860 [ 216.424393][T12776] vprintk_emit+0x10d/0x580 [ 216.424420][T12776] vprintk_default+0x26/0x30 [ 216.424447][T12776] vprintk+0x1d/0x30 [ 216.424475][T12776] _printk+0x79/0xa0 [ 216.424503][T12776] _fat_msg+0xa4/0xd0 [ 216.424522][T12776] fat_fill_super+0x666/0x1ce0 [ 216.424554][T12776] vfat_fill_super+0x24/0x30 [ 216.424601][T12776] get_tree_bdev_flags+0x291/0x300 [ 216.424631][T12776] get_tree_bdev+0x1f/0x30 [ 216.424655][T12776] vfat_get_tree+0x1c/0x30 [ 216.424689][T12776] vfs_get_tree+0x57/0x1d0 [ 216.424718][T12776] do_new_mount+0x24d/0x660 [ 216.424744][T12776] path_mount+0x4a5/0xb70 [ 216.424764][T12776] __se_sys_mount+0x28c/0x2e0 [ 216.424787][T12776] __x64_sys_mount+0x67/0x80 [ 216.424811][T12776] x64_sys_call+0x2b51/0x3000 [ 216.424836][T12776] do_syscall_64+0xd2/0x200 [ 216.424857][T12776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.424882][T12776] [ 216.424891][T12776] read to 0xffffffff88e542e0 of 8 bytes by task 12776 on cpu 1: [ 216.424912][T12776] data_push_tail+0xfd/0x420 [ 216.424932][T12776] data_alloc+0xfb/0x2e0 [ 216.424948][T12776] prb_reserve+0x807/0xaf0 [ 216.424964][T12776] vprintk_store+0x56d/0x860 [ 216.424987][T12776] vprintk_emit+0x10d/0x580 [ 216.425009][T12776] vprintk_default+0x26/0x30 [ 216.425030][T12776] vprintk+0x1d/0x30 [ 216.425070][T12776] _printk+0x79/0xa0 [ 216.425105][T12776] __nla_validate_parse+0x1738/0x1d00 [ 216.425131][T12776] __nla_parse+0x40/0x60 [ 216.425150][T12776] rtnl_dellink+0xed/0x550 [ 216.425171][T12776] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 216.425190][T12776] netlink_rcv_skb+0x123/0x220 [ 216.425250][T12780] FAT-fs (loop1): FAT read failed (blocknr 543) [ 216.425247][T12776] rtnetlink_rcv+0x1c/0x30 [ 216.425274][T12776] netlink_unicast+0x5c0/0x690 [ 216.425310][T12776] netlink_sendmsg+0x58b/0x6b0 [ 216.425331][T12776] __sock_sendmsg+0x145/0x180 [ 216.425357][T12776] ____sys_sendmsg+0x31e/0x4e0 [ 216.425390][T12776] ___sys_sendmsg+0x17b/0x1d0 [ 216.425423][T12776] __x64_sys_sendmsg+0xd4/0x160 [ 216.425456][T12776] x64_sys_call+0x191e/0x3000 [ 216.425480][T12776] do_syscall_64+0xd2/0x200 [ 216.425498][T12776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.425520][T12776] [ 216.425525][T12776] value changed: 0x00000000ffffee94 -> 0x203a2931706f6f6c [ 216.425537][T12776] [ 216.425542][T12776] Reported by Kernel Concurrency Sanitizer on: [ 216.425554][T12776] CPU: 1 UID: 0 PID: 12776 Comm: syz.2.3180 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.425581][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.425595][T12776] ================================================================== [ 216.444635][T12766] netlink: 'syz.3.3176': attribute type 28 has an invalid length. [ 216.514980][T12782] lo speed is unknown, defaulting to 1000 [ 216.517786][T12766] netlink: 'syz.3.3176': attribute type 3 has an invalid length. [ 216.517803][T12766] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3176'. [ 216.774148][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3182'.