last executing test programs: 1m41.73401744s ago: executing program 4 (id=738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10) io_uring_setup(0x1671, &(0x7f0000000180)={0x0, 0x603e, 0x2000, 0x3, 0x28e}) 1m41.631072928s ago: executing program 4 (id=741): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1m41.580796262s ago: executing program 4 (id=743): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 1m41.568942993s ago: executing program 4 (id=744): r0 = syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000580)={[{@dmode={'dmode', 0x3d, 0x51}}, {@mode={'mode', 0x3d, 0x2b}}, {@map_normal}, {@map_acorn}, {@session={'session', 0x3d, 0x3f}}, {@overriderock}, {}, {@dmode={'dmode', 0x3d, 0x81}}, {@unhide}, {@nojoliet}, {@session={'session', 0x3d, 0x9}}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'cp857'}}], [{@uid_eq}], 0x2c}, 0x3, 0x9ea, &(0x7f0000004100)="$eJzs3U1sHOUZB/D/+CNxTRQCpDRFQDahAQOpYzslNOLSxF4npv6obEciqipCSVJFsUoFRQLUQypVPRW1h6oHekPqpSckLnCpcmuvvfRQqeLcG+op6qFbzew6tmOv1wn+Ivx+1nrn45n3fd6d2Xnl8e684cus0WhUj3ucv/Dn7UyW3efs2GcffvR++fjljexJd14oPkn6ktSSniSHkt7RsdmZqQ4FXU8uJbmZFEn2pvm8IZdS/Db7luZvpvhjWW/lwj02jA1p8JW208cfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsRsXo2NDQcJHJiekLr9Taq4YAb7eya6m8T6tRv4tPO9abFOUjfX2LQ30fOri0+tHy19E83px7vBqQPH1574FHD7z0SE/X4vbrJHw3/tcaDPmuN3zr3feuv7awcOXNTUrky+ZcfXpibmZi6sy5em1ibqZ2+tSpoRPnx+dq4xOT9bmLc/P1qdrobP3M/MxsbWD02drw6dMna/XBizMXps+NDU7WFxe++O2RoaFTtZcHf1A/Mzs3M33i5cG50fMTk5MT0+eqmHJ1GfNieSB+f2K+Nl8/M1WrXb22cOXkiozWOCTKoOFOLSmDRjoFjQyNjAwPj4wMn3rh9AsvDg31LC3oTrVg6A5Ztcntgzb7slnHLzvvg66NRm7yGRzuXVer/89kJjKdC3kltTV/RjOW2cxkqs36lsX+/9iJ+rr1Lu//F3v5Q0urH0vV/z/ZnHuyXf/fJpft+3kr7+a9XM9rWchCruTNFWv33kOJjcbarfrT35uvxU63eOXPudQznYnMZSYTmcqZakmttaSW0zmVUxnKqzmf8cyllvFMZDL1zOVi5jKfenVEjWY29ZzJfE+zjQMZzbOpZTinczonU0s9g7mYmVzIdM5lLGeqUq7mWvW6n1wnx9tBwxsJGlknaJ3+v7XgLvp/vqI2+xQO96zR6v/3dA4dGN2OhAAAAIBN982/Zf/Bh//6r6Q3T1TX2AEAAID7TfVxvcfLp95y6okU4xOT9aHVgW9vf24AAADA5iiq79gVSfpzuDm1+E2oNS4CAAAAAF9G1f//nyyf+supwyn8/Q8AAAD3m8732O8YURxPLTfKVbXLzcjLrYjWfX77xycm64OjM5MvDefp6i4D1TcNVpXWnQNJ9fWD53KkGXWkv/ncv7LEvjJqePCl4fTlaKshA0+VT08NrBE5UkY+l2eakc8sRvZlVeTJMhIA7ndH1+mPN9r/P5fjzYjjj1W3b+95bI0+eEjPCgC7RecxdjpGFN9ZHP6nzd//3bl6uPmRgsG8njeykMs5Xn3boPrEQavU3CyyVGr/so8hHO9wNaB/2QgvxxevBxzet+b1gP5lA70cX3VFoF3syTVfu2LT9wYAbI+jq/rhdfr/RqM5ter6//p///f7SCEA7Cq3R7Dfwok76+zdmaYCAC3te+l1dG9hQgAAAAAAAAAAAAAAAAAAAAAAAAAAAHAf2Mr7/3cl2dqRBb7AxI0kuyCNbZ74d2u3r1rVWn5jxzNcNrE3X7ycvm0Z4eLdH+3ZxYf6vU3s4EkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbVMk3Wst70r2Jj1DSU5sf1Zb58ZOJ7DDilu5lXeyf6fzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC437Tu/9+V5vMDzUXp6UqOJbmU5Ic7neNmurXTCeywZff/L/d5GkV6mrs9Re/o2OzMVLn7s7dc/9mHH71fPu6lnrKAsoYVg0u0ami/1UPVVv1jV966/vM3flYbO1sleXZ+fHJs6tzs95YCHy0+TmppPhYt5vuLonUUr2z5x2VLO9db1jJe1Tu2ut5vrLX17XqP/eV37du2ZCmNawtXRsqa5uuvzL/902vvLAt6OEeSpwaSgZU1/aR8tKnpSHrXq7f4vPh1sT9/yKVq/5dpFI2i3EUPVu3/2tVrC1cGX39j4XKbnA7kcJLLSd/Gczq8ek8sqo66rt6y1qEqqPx1sEN563qge3+j0SxxuE0bHqoOmf67akOtfRsqHV73VhtPtsnokTx913v66Q41tvy30dScKz4v/lmczz/yq2Xjf3SV+/9YNvLuLGOqyGVHSvs2H1tq+cjyFa/eGdn2XckW+E1+nO/e3v9dy87/rX21PeejZTVu2fuiaPZCLdX0wTt6pNbZp12WrTwPNqPa5Pn1PL96uw55Pt/hjLJJ7/+Vis+LD4qB/Cc3jP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsfkXSvdbyruRYkgNJHizna0ljM+rr6i82o5gN2rNqyY1trH336Lo9VdzKrbyT/TuaDgAAAAAAAACb5uzYZx9+9H75qP4f351vFZ8kfc3/9PckOVD8vnd0bHZmqkNBvcmlJDfL6b67y6HcLvuW5m+Wc4fuvi0AwMb8PwAA//9F2m9c") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000540)='./file1\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r6) stat(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f00000023c0)=[{{&(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a00)="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", 0xfa}, {&(0x7f0000000080)}, {&(0x7f0000000680)="030ad8f1866bfe4f6d975dd37e406b469b2601dd8d1fc1917879623b9a1a765f9030c75232d0b986e61dea2123b989b66926fbf78bc8df64471a77a0ac0e585b282411555d55afeb135322c891a965b26914dc81cb2b8f273fc589deb5b5738b45fa7e212073ff9bae60f9537dd49f9908104b7d7cf065b35b74aa28f3b6f1158495244078b6c1181171799bd91a1c3f841c", 0x92}, {&(0x7f0000000300)="e9067e23045e44089444cb9d5255a0b38ab87830fdb945b152c895a126", 0x1d}, {&(0x7f0000000800)="580c3e9ae4b812e461f974f9d19c95902e7118d0f8cd4f867123b9e9bc057d04d4bb904949b73206cc2f80f19133e717a8fa3208a709876a24cfc11ac398cc5a58e5f54f9a2470951002c7f3724e8a035f63a690a64fbf303d778950e872d01f5f13233f3187492e585cce5ee905c135172d8e94b3e2a00f04740ee83f61c3bef6197c1e5bde045f8d405b7995b9e501ab4e9f6d9bad166b4b", 0x99}], 0x5, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x4000}}, {{&(0x7f0000000d00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000f80)="e36d4e2dbcbc5a741f806fccebe0f751ad674654065ef9d1f207b8fd2164838940f37a2cb1caa95a65285ed6e4cea7317699498e17b4dce49b4e5ff404ebcfb317becadb8dfa4eff02ac2828c8272e8d72487b5435e2d3c8d65659f1f146e9658bbe819f54a05ad2b22d9d239720f8f85cef85bcb254352af29838ff7dd15f6dce97f6270936238232502c272957a0413066c52b1f642392e87e6c0539a4cbf78fb3087e36e56767746cf52163806625648872be1d35252e3623fa81e5af7cb6f0801c27e12ffa58da55c8bf3f6ca180d9ba04b60bf8db9b87ee447c3cb2709b0000ed5c00c5472c4e2e730508bd48ef19dc6b8b7285dcab05965baad677664a84f3804c8e66bf3df64a3cc5f60c98763bd57f72d4d9daa24c413a3c905f8242baee5a647f288df8a9442e1e3449ec29b876a313cd28bd99b24962b2655d7de16ffa0789de97000e69f692aaf5faf2ef296b7e61c1f73fbb1e873cd7c46e9ace458015370a86b89dc853f20a95eb0707193393fea3d8436b69b1714954a73c25afa5668fe04f4bf6f3976fa5a04b376a7119b3775e0b31571b452700eadad735d6980f1c507e92907b1e14f5ae0c7ce2e170f7a2ac7f21688cf5e2607e8c519c1d2cec10ac723506db1648f7c1c33a28c4ec89d2f99a17b8c0cdd1b0b9a2a80015e2e2f610e2e1b98de6ee355cdd5126291cdc03575449fb6496c2516e859ee7858885b10958444bbef3015c9e55b494e6ae66c39ea0d118cd99cbf8496121549484ecc741086629c5d07411a3c2f9cd5d9651ef2bb67f10c5b8bdf6354fd8281e930ff88b2a01482c9dacc79d120ba51a342bd192ddacd1311a97e4d8a222d55c78983b1e1c6c5f3b8e5428b7bbc047358bd41b960357aaa58151136f187448fa936044c84d32a994c7885618fcd9b3bef9337e43bd34e745528b749070fe4e293bf44171ad0a3403446def281868497d51ec45fe244669e7d510053b977107a163104c420751d39629197a817785ad8ca3e99e65e29d279f1316c5c8213009c0ba1493081c1d4a09edf4fb075ae4d867da0e015a3474c937f9eb28da27d5e0da329b13e9bfbcbd685ab726d1d5ab0270f847a2e72e877b6eb975e60c1b0ba41503d548f299f9ab6e95590a64ebe2fb0e993af7bf1ca4ed17094cb0c4135efacd4af351b572e3cd3f39bdc5b37d3ff2048a1e817d68d506df8847833e045d8f999b80b937511ba21c6ee08ef070195daadceb6d15f8beb8a075cae4883afe7b3590ef544324fc01efd3a0855d5b422dbe9ea62d6d85e6e5f2f679edb395de49adc682121644cb9dddd7fd816e825f28baa79db639b16829bb401b325ec2e7aeca9389f7cbb6c10fbcd9dfa5f1439f8b3b3461b4248573ba8507736e22bd9c3453f332caeeb1d890be0fb8b711008ba1227331729e3a74398f31eddfd6de8fba7176f75f80edc4efe84cef9a34560ab651d2d448920a2749b34bba36b22272c92f5c09f4151c356292b7b036a94743cf909ed5cee30a52ba793f4612ad0decf7ddf08f4bd9a0d531d3063fa88e15398717aa4e4aa6fe6e4864018a2c4b5264c57b8a3c28dac2b394fae0e5e5d8f399443eff5e1e5a086ae83ce76729f012c4ade196a32c757c22838915876da782075b11867f1a0bc335c1b9accad5d4358461c1cd9632576ece13839fbd1700be3bf97dd89714efc215fdb875bbd5249058bba153e3bcd2a510a3b70f68d3ee1e091c399fae1ffb236166910ded4fbe668b991f9c792901572e07820d5d8c6afc705b2d8771768723981ee34a8348270f4fb5dd16b5a31fa96e777efd2115f83e280d0c5ebcf583c756abc4f8522b31a65eac19611e1650e4debd73ccc63bae37d0fe6c19fb6fd6b343d475a97d7958da50038aa532deeb01545ca76d3a4d6c91e553d2ebf2e97f4d6a0d2bbf2e19d063f614b9b3bd370a63bbd6a21c285b01f754d5bdc32d2356613d224e6fc7f101e397ae47144850b853b4d87e95f2cc14d20dd3461c8e624819693a8dd5c54c81057cd5a604d8348dee9174fa77717d52132888ebdf4f139b2d75ad9bca22fc1b5d4ed494fe92cf660a65316b9803ac463ded03988cc0f8b4915eb01982f4f00dec993fac29f3f244f724503a31934aab00934938c6c9e6afe73d21fdfbfb112148451e21b09987ba52c176f5e0ccf2cb8638095c7bcdee5488d229b8992f7fd8dfecf2a0955587ac44d61385a49e446ed1319ae07a15439cc39f63c5e63ae8f94b6c24f19fe3e920af4402e42e608e7ae37c7277bc17d0185f3be48d954d102cfc4c57cac94a72d7433d52591a596370da1947e68dfc4f4131ac6e215d53da7e74c08431c7b843408bc3d0dafea6713844b3284d1de32c5a0a0d2d18c4a79fd900caebc3d56767031e4b3d40cc7e5362bb8c947ff44f7f33fb36f57685a3bdcfb7d8a313280829d64ec26f8e81b0fbefb5a18cd4f21decd8d0f2a119d2c1f4be0aeacf9a3bb83674d715e7c5a1f09b721548abc52c43ffb579b9ddfc040667802f615417cef821557dfbc0c0bb12fbd05d41c3f7b9c4884ad05079ebb1b6f0822342d95c3f37a094642b8a39206d1d9ee1fb26924fb550aa0dab682172f45daaf96b50365aa4179acbca21712273a5e46aa79aab62156a0db8cd274d6777879ec9985a892c5f377987d7b9e1aeaa454f540958b586bfce3a2eef024bac468b09cf8633a905a44c3420ee1f3be79901124f722d9d2c378ef6846039795778fe4c88483dcd7ffcce2daf66b59b52121431be549dd7b6bfe6b56d2c77fd6fe64eb658cf46483c2b5ae3efd1d8129ee1a5b4248c9667404b5e8b137110df5572b1de8764e8a01c42d5408ca870370b9ed6c6ccdd31ec289e0050de11a2bd8bed71a1efeaeeb09e61d1ed47edb3556e82597ba8b74d3466e2934fcb2b978be3b72e581e31d6c189882a93af02bc11ef5dfc2d7026da651d38ec31f215450c2d117b0a3820a84f8542f948ce5ee599b4bc9f5d3e43a316004054ffd8ecc81c6c3494ee2a89c84a44ead0bdce2ec308195a420ed6d2f5d5561bb4bf4cb18f53112e83243c47aaed0a0d6b12114175a7eaf0b45c3b6967aebf48400fd383b30676d0924d7f7364cc8116573e3a874467d9e5f2e2c9fbbffae550152e6893f44ae9633e117d161e672229972af2c0859256d25629d0a0b5d3448c6d8b8f5ef33665795f1974a9be5e1f848cea4ee34b0f85c7abf692afb10683499de04ebac035dfab77d791b7a107548fa11f9b1c526e3bde502c2e836ae3001e94cc243c6439f82b5210544ccb753d8fb8e2113aba183cdea7e3faaa05c8de7661fa85511b8ed2e31c071840c0161e53adc347d9dbe6fcc9839052e4e6d59384f87301ac5aea9f1c3ccfbf935a720f2196d2fa98ac842e6804f230ed80820fcc34a00e471a75bf0adc6651b02f350df7af18ebd6eab0c02fcd642062d9f9a35bb879be7962e79b479aaec78ba0c153d6e30bd9f4f5d6791bb5fdf4191ec6e2eb23100c62d4acde6183bb7a2384ec591dca9c052275a3f52eb2931bd6cba526f063c51af50c32d8e2dc26af034aba7890c08d7aaf99dbcf678caf8ca146ea95ae7a104a885da2888413343ed07d310251764c4603561347f4dc362b2e8e58c73b440f4b1219c1548a95a9fb74cba60f5a01849efd4e021a9edf769debb30bc19b1bcc53221a108bedbd2e47e24b220bb4b6eea3f688262da9aae9e5492de9b41fa38bd5e99666d46d6a727b4194853664723f61b502c96cf998e5870dc8c054a27161fe91248f3c5cc1222306ae090b395fe4a2ca580ad3bc374d8c2c164d6df929a12d31e217c13c390585c8b15f3b9da387d7a31217a33ba5d9f16aa2a002a7d5bbf8a211610b0e09df86bd6462b1b2a9f23fcf6bee0621705a8e70f9db070ddd164d957587d17852efdbc5c4d6b2920274078f9cf6228d3e179017b20903b89f93112eb610ab61b40b22f06ec701edecb5978fef36877a66dc2ffdca63821880dfe03a4d3f7686055a4c4a95b0815e6637cfd1a57093abb36549b14810337de691e29133b47b7ab8541f5b4ad38f4e866ab09e329fd736e44fdef9e9ce6ba99404a8642b67d1a5803ba087518178563e3fa72758d245249998f6e52495a3cb30967bc5eefaf4be0aed31528305500d85839cb8a9606ee340bbcd29ce8d7f6c34e535bd582bedefc4508e4d4234a01bbd707b0917dee144cd8ce96c9d44e43310a534328db234e00a656d4bdcb1c2987ad054a52640c90f0039cc0640732fe552b8395a442af8e387c10abea506d2b626c9ec384536b69fdd7251b5bf67326b0bc0ed6977383dbd3b06a230d805e0e6c479880604302b605fa92541b750b325fdf8186b3cce980b36e000b3e923814cb4850156de426d291a203118efbca0e524812cdc037d526fd16369946cc0a0f30b60417c6d021b072944f56646df810a5ed1f20d41ba23eb6a221f5c2bec20e2f6da07ff78735baedbac692fe018bdbd658a52c1e8ad5cdbcd950cc28c34efa550ce94cac70899d435a7d9e55e45a16bdad8a5b6c8354e2b12879e194bda41365ad8dcbde486d497d9a99abb37f65344a6925a126fec4c4bb749cd7ef1d4a85772725a36fbf9abccc59173350c315433fa78617835639d8b3224407b104bac8fc9f482916418e7303014ed200b1300fb5854face500772f0a5633b0315fa04d6f2e36400811b74e3962d7144d1dbadb6a2bc1b9968103e3540e56689a468025d173dc8835a42ef0865c551fa8ff0315e62021b77ddb0bac018f6e6f5efa14ea35a2b11c9d2250b9186617a1b9d6f783f871c8ef78c1964d0134c34642e48cd6dc0f560e244c9358ac89a20eabfad04a1c1d615553feffa610928f6ffdf627723f5355bf7317c580f40174655d2bfb1d5363260c77e43825128540223b8ee9327d58a77d7569f6b327bf08187e8b683d53a033c0825b62b55d27931eb3db04d91834eb9b2e4b511e5e4ae2ef11395a0d9eeee374831f0b8b5baf7e4f73b5c3fd9b696300bd9a346dd46004d0e0890b8e175ffb2dbbd5107ab80be623054ac2fbd6cd35d12ad314c3f7c8ecfd948fa2e157b2615f2b2b6fb7f4903784ef693742786f66142da321f3f6f0ceca6fdd34e551550970cae522677ca7083f70161a757284f3a61ad944f98336aaba55c210d59644895880210e24698299253217e553db810239327b879c379388debb5e16dcb65d8619cb0dcd46b6bc84d0a0e41f9b926c32df397ad1914813b41e5bb80479ca521115f7584eb2a72aaabb21573b3bc3677afcdc9994bab951ebb490339f8f2f8c798b8917a8ad6559b4cac73099879b04203b57b816407013ca91104fa6db21cd510a25f4190de7af071bb25033af0a782b9ff50cac5ed5c93dd423cddc819b25c4df94127cf5965e41998e94ac613b951bd966192e9e1551a7a9927a8f0d54fc6e6cdfef97c03884a0dc1adf151a187d55c11ec5e82c111bc3984804ac76ea0e86f97a577bd5263af88fcf2a963184a98e2fb249583568bb8918f0b015dffac221d8a682085f4fb6e6dc1a061f7ff3dc84817a376f37974096e632ece34f7fad4aa8ca366edbaa9e0c23154b83f85082d5cbcdfa0e53a30bcc3ddfa3f9f5cbb423a0ba3526d310a683030870924a1c7b6ebe3858015728cedc649218eb23bd9c46f3be62e695ef7ca82e991d0a7b9e859a9dc81c704537075850c5978aa5a50c69742a476e26e2ff73b89737c1e63e777cd411eb850d1f6c146437bd7d97122074a3743d21bed425fb69530", 0x1000}, {&(0x7f0000000e00)="a32933a499ac5a4a49e66b014f6c1f0117f65ae24c8ce7bb5a8606b749743974240978ca820fdf60b2b73c20574dca4090bf1e8d02a4133db9f5b374e1bf237d05d0f4483aec540352b0be918caa8bd817fc73a04c2c410315ede8e53b3abec9d30934cbbcb4600283ca47b5bbce77732553bbfacd9ff53c7dec5764f6a2f6baee5c1784bec2a55dc69686bf05a20d55d69f3a0b0f0517afabb4b3c43f", 0x9d}, {&(0x7f0000001f80)="abf6a3e7a0f3eaa09cb60d8d52946388ea5d3eedf467c7ad9b1e40e7c877cb6b4bfc5796f460f2e39684b637cbff9b0d9249f65ab956326f1bbe7f934d5331d11d7dba2fefbd8a64a971dcf609bb18c385f8d642c609e2c37ba2735bb72e930fe9d1d513d18e7eb10cfda9b9cf29c2fd653ce2c51e2483afe69692df0ae8e5d0431aabd664b193e9f803970bb2b726564a34abd70b13ee5a5123736224923d72c249bf6e58c79170d09638f051a9d8d5da53ca35700a46b9e76b49a7db53be442ad492d532360d", 0xc7}], 0x3, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r6}}}], 0x20, 0x50}}, {{&(0x7f0000002080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000002100)="ffa894d3b2db51b2051cf8851076a08093a42b2656e2e49a3d767aca9d3fcffa52e95f5e82b67f9f1acb8507b3b366275da1a2bffc70f278c81f1cf5e853ba1b8303a3a5adad", 0x46}, {&(0x7f0000002180)="ef25b67a69764bf4a92e09126beb267376e02c474262b3a01d8d4beb7d461c78d6ca18dbe56246f3a2942e2e4da46d64e6e1e46cafa3d2b6230970de1bbd47dc3c0f985caffad72148e2c23e7a75558f94ed6f225101979ca1", 0x59}], 0x2, &(0x7f00000022c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r7, r6}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r1, r2]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r1, r0, r2]}}], 0x70, 0x1}}], 0x3, 0x20040040) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r10, 0xf, &(0x7f0000000140)={0x2}) sendmmsg$unix(r9, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cf1b263b5b99a48, '\x00', 0x0, 0x2}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x80296000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x8000, 0xa0, 0x7fffffff, 0x10, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x67, 0x0, 0x6, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@end]}}}}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) recvmmsg(r1, &(0x7f00000098c0)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x72e6848b}], 0x2, 0x10020, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r14, &(0x7f00000001c0)=[{{0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40010}}], 0x2, 0x0) 1m40.696135054s ago: executing program 4 (id=785): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) mlockall(0x7) 1m40.316306474s ago: executing program 4 (id=799): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) 1m40.300924276s ago: executing program 32 (id=799): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) 2.117294469s ago: executing program 2 (id=3019): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5b, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r3, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x124, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb72b}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x60}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3b}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x8880) 2.027780666s ago: executing program 2 (id=3022): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 1.916224285s ago: executing program 2 (id=3024): r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940), 0x1, 0x7b7, &(0x7f0000001900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x1cc) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r0, 0x0) poll(&(0x7f0000000000)=[{r2, 0xa080}], 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="ae63b2a6bea9bbbbbbbbbbbb08004500ff070000000000009078ac1e0601aac9191f4d8c5d6fa54e2417c100109078e24000"], 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ffffffffffffffe600"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000750000000000000000000000185100000300000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x1, 0x80) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.639119108s ago: executing program 2 (id=3031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000509000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3baaafa3e4e5d3e75b69ed2e25e5722fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af2", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000000000000000000000002000100000000000002060b000000000300050000000000020000000000000000000000000000000100180003060000000000000000"], 0x60}, 0x1, 0x7}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000680)={0x2, 0x9, 0x3, 0xd, 0xc9, 0x0, 0x1, 0x0, 0x80, 0x2, 0x5, 0x2, 0x8, 0x6}, 0xe) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000)=0x2000000a, 0x4) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x1056}]}, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0xadc}}, 0x24040810) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 1.351173591s ago: executing program 1 (id=3038): syz_mount_image$iso9660(&(0x7f0000001440), &(0x7f0000001480)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="636865636b3d2600000000000000c3e8bc9495fe"], 0x1, 0x1430, &(0x7f0000002940)="$eJzs3XlwnOV9wPHfu5ZsIRMwYIwhBDY2pI7jGEkGExfaRugwSmyLsewOTP4IDhaMBmFncNomtJ2hM5meoTmbNElP2qRumgRSmjZ3yH3fBwk5yEnuRLnJ6c6z+8gSYB0GyXL8fD4eWavVs/s+r1fWd9/Vap/gN9mBAwcabw/w450vO5KT5ehzSe9dN996U3r7sxtjcSyKC6rXRLRFRD2iJSJWRrT29G4f3DrDFV0bcWVE3B5RRcSSaL6flSujemYcP/Hx7VG9OG2X+XeAoi301x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByNqp7ejo7OKrYMbNt5eX1qjSXAp/n8+PVdVkt/1y6bcbsRVXqLtrbxpb5XHn9wxfDqhPT3qljeOKda3liQPNrihqUrll10Sktt/PLTTOiI2Pe0G67dNTo6fP1CT2SBbO7bNjA0OLC1e3NffWBosL5p48aO8y7tH6r3D2zpG7piaEff1nrP9r7uHYPb62t6Hlnv3LRpQ71v/RWDO7dt7u3e0jd+5oWP7uro2Fh/3PrL+rq3Dw1uO+9x64d6Lh3YsmVg2+bGmPTpNObC9IX4+IEd9R193Vvr9atHRoc3zDTJNKhzNoO6ZhrU1dHV1dnZ1dW58YJNF1zY0dFyvzM67iPuN2Lhv2hZWPPyfRweiFruf2yJgdgWO+PyqB/yT0/0xvYYjK1TfD4b7/+55/VNu93J/T+zedaZyyb6f3I0+r+i2f8VU/V/irkcuT/74mlxQ1wbu2I0RmM4rl/wGR3ZP5ujL7bFQAzFYAzE1uhunFPP59RjU2yMjdERT4xLoz+Goh79MRBboi+G4ooYih3R1/iK6ont0RfdsSMGY3vUY030xCOjHp2xKTbFhqhHX6yPK2Iwdsa22By90d24lqtjpPHvvmGaOR4c1DmbQV3TDNJ/Hrz5+lYOh+3AeP8BgHJc0tet/wBQmG1D2zu69B8AirLD8T8AAAAAAAAAAAAAAAAAAAAAAAAAAADMtSpq8e2IeF7vWDV5Zcq2xoL/U15scdW4ZC2q5lq+0bZxw4U9/Z39vR0dHR2dF5w//eq/c+6kGBza0V3v2Xvdk68f3rdveHd9556Rq/buHp71NTzYyx+mi5fdvWTpimUXbUofrL1meM/Ivr0j1+26Zt42CACTtEQt7o6Is28Zqx6eWx5rd/b217f8fn1gz9V7J42tjS8T8CBbOcN9i/m2+IhuTdsBOAq1Ri2ui4jLFo1Vq1Lj832A2qMaCwMu9PSm1HjcoYp4bWgsAByuxVGLwYjYfdIrq9URsSiOgeP7tnSfoLETO3v7GzsyOrJrz1Oi8RjGouaoZfe90PhjH0f5fYllEY9Nc11szUYAHrglUYtXRcR1J7bFOY2fBwAAx7q2qEXzeX9j1bkLPRkAAAAAAAAAAAAAAAAAAAAAAAAAAAA4RlRRixdExLO/NFZ1TDr/Qa7//5j+IzL7g6z/DwCHoSVq8ZO8/n+n9f/nnrYDcBRqjVr8aV7/v8v6/wBQhMVRiyfm9f83WP//6L8vYf1/AObAkqjFW/L6/+db/x8AitAWtWg+72+sumChJwMAAAAAAAAAAAAAAAAAAAAAAAAAAADHiOOiFu+IiJdf/oeNdWUmr0s/eYWZ42dYbiZ9en0+PZs1+VrzWoO1Kv2Zwx0CAGbUFrW4uHFqrOpe6MkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR7Va1OKDEVHdMVZFFRE3RtSj+b5joScHAMyPqhZfjYiHfXws1T8uXnb3kqUrll20KSIWxaLGXYJq8vjBoR3d9Z691z35+uF9+4Z313fuGblq7+7h2W6urad3++DW+diRWVk8z/Nf/KBn2Jbuk02ytjHhnb39jUmPjuza85R0dq1a9KA3BUC52qIWv2ycGquqhZ4MAHBEtFa1eEhEPOln+w8ed7Y0j/lbmh911A5kL1k+cWzalu8sjN9nGH/c4JRpTh/y/sXaa4b3jOzbO3LdrmtmOghvy9t15AsAD05V1eLdEbH5SSsbXa2i/f6PQedx34uIC59dz+OiPY0bf8B7SSPubVePjA6vv2rv6O40/jkR8Z6XnpnH1xan8flORbROjO9IY2+JiDtePT42GmOX5LFtE2M709gLI2LXbfce25bHHjcxtiuNXRURo8+999jj8tj2ibEb5vdfGQCOLun4/48i4gXr9h9s83TH/+PH8Dvy+/k+/m+ddKG2vN3Wudp5AChUOkZ+bz7+b53h+P+jEXHLr8/M45rH0u3580snHc8f+b0AAA5HOv6/LPX8hfsPPpafj//zYfbE8f/Tl00cw+/O7+f7+H/JfY7/03ZPm6udB4BCpf5fEhFdV+w/+PP22fR//Lh/vvvfdp/+p+2unKudB4BCpf4/ISKGLtt/8Dl0s+n/mtX58vnj+er/cffpf9ru6XO29wBQptT/Z0TEH1++/+Dz4o+m/rcfov9nzdneA0CZUv+7I+LOV+w/+Jj+bPp/Rv7tgPl+/H/pffqftrt6zvYeAMpUxfKqWebWOLVxqn9gS5+n8AMAAMCxpLG+z/Lxh/urU6Ny/A8AAADHmipW5J//t8dpzVNXx0iMxrDl/wEAAOBY0fj5/4rmcn4R1WlROf4HAACAY82qxu//N34HoPHyv21xQ+PlelpqjccGqmrmEdW6WNkcsTKvCrQ7j2g+vlC19w9s6VvfM7jlos54RONVBhq/aXDIa2tt/PrB2ji9Oer0/JpE7fe+xrY0qnP9RZ2xNs5ojjyj+YqEq9ccYmRXc+TZzZFnTzNyQxoJAMe6VTP0eDb9XxvnNEec03xVwJYzDlHWDmUFgKPFqsbz/xvPAZiy/zOMqM6f4fj/5INPKVgfV8XeGI3dsa7x2waNZxwc8lrbJz0NYd0MjwZMjO2MdTM8HjAxtivWzfCIwMTYDUf8dgGA+bRqhg7Ppv/rZjj+b/eUQgA4qux72g3X7hodHb5+Hk8s9D4CAPem0gAAAAAAAAAAAAAAAAAAAAAAAAAAADD3jsTr/zvhhBO/aScW+jsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsaGKWHSo82sRSyKiIyLOO/Kzmj83LvQEFlh1T9wTT40TFnoeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHmvz6/7Vovl/aPCtaahHnRsSVEfGEhZ7jXLpnoSewwCa9/n+6zeNAFS3Nmz2q1p7e7YNb083fWPuhdtfNt96U3h7IdtIVpC3ca3GJvIWpL3VS41LtvcP7rn3K3ifXey9pTPKSHf1berdu3v7YiYErqtsi6tF8Gzc+3z85903POsSe35b2dHbb7W9st/f+2z3tUJeefrvTGRkd7kpb2tF3+Y4/2DPy1EmfOrk6PWL1mog1997SNeltij08PVqn21o1Vv15dUI8P65s3P7pX6M6UKWb6MTG/h939cjo8Pqr9o7unmJOy6q0/7sj2mY/p9Ma308OqfFVV2tNW+1oDEp/LZ/++qY36Ro7p9iHk6qVEdF+WPuwcup9iFn8u+cZbZhiRqdUZx32LX3WDFs89DzHqjurS+OT8fRJ63/U0u1/bszmf2ca0xg56StlypG15sjGnndNe51T/q9kHjwjnhSPOXj71yZ9/8+31ZH5fjRpi0fo/0WjSMvvU6T83Weqy+R5Lm+OmmKep1arI1rOOKzvKKun/44yb///X1StiR/Ejdb/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjn5VxKJDnV+LODcilkXEienjesSBudherb2ai6t5wG5c0K0vvOqeuCeeGics9DwAAAAAAAAAmBuX9N518603pbfGz+MXxTnVayLamj/pb4mIZdXzWnt6tw9uneGKWiOujIjbH8Ac0uXi+ImPb08frXwAVwQAzEotavEXEVHdMVa9tmo+Ma4ezfcdCz05AGBepP7/Ze7/6/QfAIqQ+v9Xuf+v138AKELq/1/n/r9B/wGgCKn/f5P7/0b9B4AipP4/I/f/TfoPAEVI/b8p9//N+g8ARUj9/9vc/9v1HwCKkPr/zNz/t+g/ABQh9f9Zuf9v1X8AKELq/7Nz/9+m/wBQhNT/5+T+v13/AaAIqf/Pzf1/h/4DQBFS/5+X+/9O/QeAIqT+/13u/7v0HwCKkPr//Nz/d+s/ABQh9f8Fuf/v0X8AKELq/9/n/r9X/wGgCKn/L8z9f5/+A0ARUv9flPv/fv0HgCKk/r849/8D+g8ARUj9/4fc/w/qPwAUIfX/H3P/P6T/AFCE1P9/yv3/sP4DQBFS//859/8j+g8ARUj9/5fc/4/qPwAUIfX/X3P/P6b/AFCE1P+bc/8/rv8AUITU/3/L/f+E/gNAEVL//z33/5P6DwBFSP1/Se7/HfoPAEVI/X9p7v+n9B8AipD6/x+5/5/WfwAoQur//tz/O/UfAIqQ+v+fuf+f0X8AKELq/8ty/z+r/wBQhNT//8r9/5z+A0ARUv9fnvv/ef0HgCKk/r8i9/8u/QeAIqT+vzL3/wv6DwBFSP2/Jff/i/oPAEVI/b819/9L+g8ARUj9f1Xu/5f1HwCKkPr/37n/X9F/AChC6v9tuf9f1X8AKELq///k/t+t/wBQhNT/V+f+f03/AaAIqf//m/v/df0HgCKk/v9f7v839B8AipD6/5rc/2/qPwAUIfX/tbn/39J/AChC6v/rcv+/rf8AUITU/9fn/n9H/wGgCKn/b8j9/67+A0ARUv/fmPv/Pf0HgCKk/r8p939M/wGgCKn/b879/77+A0ARUv9vz/3/gf4DQBFS/9+S+/9D/QeAIqT+vzX3/0f6DwBFSP1/W+7/j/UfAIqQ+v/23P+f6D8AFCH1/x25/z/VfwAoQur/O3P/79F/AChC6v+7cv9/pv8AUITU/3fn/v9c/wGgCKn/78n9/4X+A0ARUv/fm/v/S/0HgCKk/r8v9/9X+g8ARUj9f3/u/6/1HwCKkPr/gdz/A/oPAEVI/f9Q7n/U9B8ASpD6/+Hc/0r/AaAIqf8fyf2v6T8AFCH1/6O5/4v0HwCKkPr/sdz/Fv0HgCKk/n88979V/wGgCKn/n8j9X6z/AFCE1P9P5v4v0X8AKELq/x25/236DwBFSP3/VO7/cfoPAEVI/f907n+7/gNAEVL/78z9X6r/AFCE1P/P5P4fr/8AUITU/8/m/j9E/wGgCKn/n8v9P0H/AaAIqf+fz/0/Uf8BoAip/3fl/i/TfwAoQur/F3L/T9J/AChC6v8Xc/9P1n8AKELq/5dy/0/RfwAoQur/l3P/l+s/ABQh9f8ruf+n6j8AFCH1/6u5/yv0HwCKkPp/d+7/afoPAEVI/f9a7v9K/QeAIqT+fz33/3T9B4AipP5/I/f/DP0HgCKk/n8z9/+h+g8ARUj9/1bu/5n6DwBFSP3/du7/w/QfAIqQ+v+d3P+z9B8AipD6/93c/7P1HwCKkPr/vdz/uv4DQBFS/8dy/x+u/wBQhNT/7+f+r9J/AChC6v8Pcv9X6z8AFCH1/4e5/+foPwAUIfX/R7n/5+o/ABQh9f/Huf+P0H8AKELq/09y/39L/wGgCKn/P839X6P/AFCE1P97cv8fqf8AUITU/5/l/q/VfwAoQur/z3P/H6X/AFCE1P9f5P6v038AKELq/y9z/x+t/wBQhNT/X+X+r9d/AChC6v+vc//P038AKELq/4Hc/w79B4AipP5H7n+n/gNAEVL/q9z/Lv0HgCLU8iMAqf8b9B8AipDqvyj3/3z9B4AipP635P5foP8AUITU/9bc/436DwBFSP1fnPt/of4DQBFS/5fk/j9G/wGgCKn/bbn/m/QfAIqQ+n9c7v9v6z8AFCH1vz33/yL9B4AipP4vzf2/WP8BoAip/8fn/v+O/gNAEVL/H5L7/7v6DwBFSP0/Iff/9/QfAIqQ+n9i7v9j9R8AipD6vyz3v1v/AaAIqf8n5f5fov8AUITU/5Nz/3v0HwCKkPp/Su5/r/4DQBFS/5fn/vfpPwAUIfX/1Nz/fv0HgCKk/q/I/d+s/wBQhNT/03L/L9V/AChC6v/K3P8B/QeAIqT+n577/zj9B4AipP6fkfv/eP0HgCKk/j8093+L/gNAEVL/z8z936r/AFCE1P+H5f5v038AKELq/1m5/4P6DwBF+P8AAAD///2ccz4=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000002f9078ac1e0021e00000012001880b009c90780100000000000000dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d6a7710ebcf55344ae76b3707a62e3502b74659d7dbde072d61b6d985015bcf5f2cda54def458f241cfc9238412ad5f1a0a4f358515e45cea781c9e9b26806f68dd72b3bd460f4ebd662fa5d823dfd0d963970deffa6dd57d8176d2b54e3bc06c34c945e45e27e747494b407f256d9ddc3e6e1f7c5f7bcbc61274dd72"], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007", @ANYRESDEC=r2], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x2000000000}, 0x18) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x211, 0x5, 0x0, 0x2, 0x0}) 1.350601801s ago: executing program 5 (id=3039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x3827, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 1.279975256s ago: executing program 1 (id=3041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3, 0x0, 0x7ffffffe, 0x4000}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x38}}, 0x0) write$binfmt_aout(r4, &(0x7f0000000140)={{0x107, 0x7a, 0x8, 0x38c, 0x23e, 0x1ff, 0x29a, 0x800}, "ab8baa45d41fa8f34a8bf2007ec65461301e0991f41960dbcfabac337c2303dbb09078a5d3a1d620a92f9b52985d5b5b3f09"}, 0x52) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r9 = dup(r8) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="001800"/17, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x25, r6}, 0x94) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.23835986s ago: executing program 5 (id=3043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000f428932ee9300500000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0xd6c8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000001800200000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"], 0x48) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@acl}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x1, 0x0, 0x1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) 1.126245299s ago: executing program 1 (id=3044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000040000000000e00000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x2, 0x818, 0x0, 0x0, 0x0, 0x2, 0x7, 0xd, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3}}) 1.11590367s ago: executing program 3 (id=3045): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000f428932ee9300500000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095000000000000"], 0x0, 0xd6c8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000001800200000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"], 0x48) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@acl}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x1, 0x0, 0x1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) 1.046061536s ago: executing program 1 (id=3046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80010140, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010005fc018c", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac1414aa000000000000000000000000fc01000000000000000000000000000000000000000000000000008001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000c0008"], 0xd8}}, 0x8814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x5f}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) r13 = socket(0x10, 0x3, 0x6) r14 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000d00)={0x200, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x13c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x48, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x200}, 0x1, 0x0, 0x0, 0xc884}, 0x810) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.019010327s ago: executing program 5 (id=3047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 996.948569ms ago: executing program 3 (id=3048): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r2 = io_uring_setup(0x3fe, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0xb, 0x8, 0x4, 0x2, 0x94, 0x4, 0x6, 0x2d, 0xf9, 0x80, 0x9, 0x9, 0x75, 0xe6}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14028a2b11c1259d, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="bd79a57a1f0df8d99ac3f6f7bbd31cc79654f4a5815e937b73b65e0b484619e340e47d4e0ea076b7bfa1f528139cfd28f997527721ba136aed", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200000008000000b704000000000000850000000100000095e91b8900c424fdeef923c334480774bcf184f1e08e7f46b99d82445f2f94a422bce07c5752acc8a1f2e59ad008266e662b1ebd0337f4fb6edb82b0d56c307b086b7af9e16063996f4d95f29d2ef9eb4ca5a205049a6095075bbe6d9c97d651a18e7c1996eb8f359888f4611cf459b854581e6058771a1429342506e5d8ca07c7cc44e0c359e550dbf5ed8e41bfc62971aa345044f94af0dc7e122d76d618dbdc552d0350b368f7d8"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 896.925977ms ago: executing program 1 (id=3051): r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940), 0x1, 0x7b7, &(0x7f0000001900)="$eJzs3d9rHNUeAPDvbJImTXtvc+HCbe9L83C5t1C6aXtjqyAY8UEECwV9tg2bbYjZZEt2U5qQB4sIgghaBAV98dkf9c1X0Wf/Bl9EpKVqWqz4ICuzP5Jtstn86CapyecDk5wze2bO+e7szJzZOewEsG8Npn8yEcci4p0k4kh9fhIRPdVUd8RIrdyDxYVcOiVRqbz0c1Itc39xIRdNy6QO1TNHI+LrNyJOZlbXW5qbnxwtFPIz9fxQeerqUGlu/tTE1Oh4fjw/fe7M8PDZ80+cP9e5WH/9dv7wnXef/9/nI7+//q9bb3+TxEgcrr/WHEenDMZg/T3pSd/ChzzX6cp2WbLbDWBL0l2zq7aXx7E4El3VFACwl6Xn/woAsM8kzv8AsM80vge4v7iQa0xLXw78Z7e+ldg5d5+NiL5a/I37m7VXuuv37Pqq90H77yfRXb8jGh283zUYER99+cqn6RTt7kO+P9yhGgFqXrsREZcHBlcf/5NVYxY26/QGygyuyG/HOAygta/S/s+Trfp/maX+Tyz1f5b1tth3t2Iw4kBzfvX+n7ndcsFnOlB5vf/3dG1sWxpoU/9vadDaQFc997c0czwiJgr59Nj294g4ET29VyYK+TMt117rJZ6498e9tepv7v/9cvPVT9L60//LJTK3u3sfXmZstDz6qHE33L0R8e/u5bF9D1Yd//uqUazc/um8i+1WfHw5+cJTb364VrE0/jTexrQ6/u1V+Tjiv9E6/oak7fjEoXTzn679bV3HF99/0L9W/c3bP53S+hvXAjsh3f797eMfSJrHa5Y6W//68bf+/B9IXq6mGweP66Pl8syZiAPJi6vnn11etpFvlE/jr0W6Mv5M289/eiV4eYMxdt/56bOtx79kW4ZYpvGPbWr7bz5x68FkV7v4R2K97V+79j1Rn7OR499GG/go7x0AAAAAAAAAAAAAAAAAAAAAAAAAbFQmIg5HkskupTOZbLb2DO9/Rn+mUCyVT14pzk6PRfVZ2QPRk2n81OWRWj5p/P7pQFP+7Ir8/yPiHxHxXu/Baj6bKxbGdjt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg7tMbz/1M/9u526wCAbdO3bol7+YeylUqlso3tAQC23/rnfwBgr2lz/j+4k+0AAHaO638A2H+c/wFg/9ni+b+n0+0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgz7p44UI6VX5bXMil+bFrc7OTxWunxvKlyezUbC6bK85czY4Xi+OFfDZXnFpvfYVi8epwTM9eHyrnS+Wh0tz8pani7HT50sTU6Hj+Ur5nR6ICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM0pzc1PjhYK+Zk9kXgrIh6DZmxHIonHohm7kvjh1HdH25W5uc7HeOSxiGInEr3RsRXu9pEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4K/hzwAAAP//k8okww==") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x1cc) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r0, 0x0) poll(&(0x7f0000000000)=[{r2, 0xa080}], 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB="ae63b2a6bea9bbbbbbbbbbbb08004500ff070000000000009078ac1e0601aac9191f4d8c5d6fa54e2417c100109078e24000"], 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ffffffffffffffe600"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000750000000000000000000000185100000300000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x1, 0x80) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 896.228187ms ago: executing program 5 (id=3052): syz_mount_image$iso9660(&(0x7f0000001440), &(0x7f0000001480)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="636865636b3d2600000000000000c3e8bc9495fe"], 0x1, 0x1430, &(0x7f0000002940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000002f9078ac1e0021e00000012001880b009c90780100000000000000dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d6a7710ebcf55344ae76b3707a62e3502b74659d7dbde072d61b6d985015bcf5f2cda54def458f241cfc9238412ad5f1a0a4f358515e45cea781c9e9b26806f68dd72b3bd460f4ebd662fa5d823dfd0d963970deffa6dd57d8176d2b54e3bc06c34c945e45e27e747494b407f256d9ddc3e6e1f7c5f7bcbc61274dd72"], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007", @ANYRESDEC=r2], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x2000000000}, 0x18) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x211, 0x5, 0x0, 0x2, 0x0}) 800.292075ms ago: executing program 5 (id=3054): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5b, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r3, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x130, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb72b}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x60}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3b}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x8880) 639.933218ms ago: executing program 5 (id=3057): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xeffffffa, 0xb, 0xfffefffc, 0x101, 0x7f, "db5909003a7f000700"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000340)={0x2, 0xfffffffd, 0x8, 0x6, 0x19, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x400) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x2) 576.653973ms ago: executing program 2 (id=3059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000f428932ee9300500000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095000000000000"], 0x0, 0xd6c8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000001800200000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"], 0x48) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@acl}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x1, 0x0, 0x1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) 575.590823ms ago: executing program 1 (id=3060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet(r7, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r8) 512.923538ms ago: executing program 3 (id=3062): creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd708fb31b29fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000008000000000000000000000001090000000000000002000100000000000000070c00000000050005000000000c0a000000000001fffc01000000070000000000000000"], 0x88}, 0x1, 0x7}, 0x4000004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="02186608050000002abd7000fedbdf25030007003cc0000002004e21640101000000000000000000dc4e477fd66eacdfea0269bb3ecb93eb4fa3732c8a575455602f4cd63d9e2b68f4b00309e0c7c47d6c24aa0daaecb31cd509c5d269d7f3ea3dcce3a4b8be3c32bf4d95072100898fa49e92c7943610224093611892338b8a65dd33162c31ba12be48064c67871eae2f95cf650c8b9fb3d8507fb6682345d769d507"], 0x28}}, 0xc004) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) (async) close_range(r5, r3, 0x2) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000380)) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000007c8c6c325553259c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000fffffffffffffff8000000000818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r10}, 0x10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 473.717442ms ago: executing program 0 (id=3063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 472.967772ms ago: executing program 2 (id=3064): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a00)={0xe, &(0x7f0000000740)}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x9a, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r7, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7fffeffd) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) 463.332152ms ago: executing program 0 (id=3065): syz_mount_image$iso9660(&(0x7f0000001440), &(0x7f0000001480)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="636865636b3d2600000000000000c3e8bc9495fe"], 0x1, 0x1430, &(0x7f0000002940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000002f9078ac1e0021e00000012001880b009c90780100000000000000dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d6a7710ebcf55344ae76b3707a62e3502b74659d7dbde072d61b6d985015bcf5f2cda54def458f241cfc9238412ad5f1a0a4f358515e45cea781c9e9b26806f68dd72b3bd460f4ebd662fa5d823dfd0d963970deffa6dd57d8176d2b54e3bc06c34c945e45e27e747494b407f256d9ddc3e6e1f7c5f7bcbc61274dd72"], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007", @ANYRESDEC=r2], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x2000000000}, 0x18) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x211, 0x5, 0x0, 0x2, 0x0}) 437.290744ms ago: executing program 3 (id=3066): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 436.884924ms ago: executing program 3 (id=3067): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (fail_nth: 6) 436.252664ms ago: executing program 0 (id=3068): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5b, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r3, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x130, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb72b}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x60}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3b}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x8880) 384.884829ms ago: executing program 0 (id=3069): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000040000000000e00000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = gettid() sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x2, 0x818, 0x0, 0x0, 0x0, 0x2, 0x7, 0xd, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3}}) 65.286104ms ago: executing program 0 (id=3070): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x91, &(0x7f0000000800)={[{@noblock_validity}, {@grpquota}, {@nogrpid}, {@jqfmt_vfsv0}, {@sysvgroups}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}, {@dax_inode}, {@journal_checksum}], [{@permit_directio}, {@hash}, {@pcr={'pcr', 0x3d, 0x22}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x1, 0x622, &(0x7f00000015c0)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setuid(r1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@none, 0x9, 0xd, 0xfff4, 0xb6, 0x5, "241407d72a4848fd77896dc23728eb65d740162e548a35ab14099f48c0690e8e3531722295a0813f4eef885cfd3dbe73f9e9901445adf4534a6204d701b09b6b1b1f25c79d2094b46dfb2fca5fe85d91dbeb6510f06e9ebfe3873d6a53067ad2dddaede9dff83c52f344f2e2ff05b2a95c77f80ac45d36ca95ff83d57ecd8dd9"}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='bcache_invalidate\x00', r4, 0x0, 0xb5}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708000000000000008a000000000000000800000000000007010000f8ffffffbfa400fbffffff0007040000f0ffffffb7020000a00f3596eb32865599", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="88291242a03c3f98722780b605a7", 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x738a}, 0x18) unshare(0x24040400) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c020000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="060000000000000062000000000000000000000000000000f9ffffffffffffff0100000000000000fcffffffffffffff040000000000000002000000000000000d000000000000000700000000000000322e000000000000000000000000000001040000b76b6e000100010000000000"], 0x21c}}, 0x0) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000680)) socket$kcm(0x29, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 769.67Âľs ago: executing program 3 (id=3071): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) syz_usbip_server_init(0x3) 0s ago: executing program 0 (id=3072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000f428932ee9300500000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0xd6c8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000001800200000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"], 0x48) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@acl}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x1, 0x0, 0x1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) kernel console output (not intermixed with test programs): 0] loop3: p1 < > p3 [ 138.606283][T10280] loop3: p3 size 134217728 extends beyond EOD, truncated [ 138.631664][T10286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.644839][T10286] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.658409][T10291] loop5: detected capacity change from 0 to 2368 [ 138.664901][T10280] Invalid logical block size (3) [ 138.665173][T10291] iso9660: Bad value for 'check' [ 138.679046][ T9] usb 1-1: new high-speed USB device number 3 using vhci_hcd [ 138.721629][T10295] macvtap3: entered promiscuous mode [ 138.727011][T10295] macvtap3: entered allmulticast mode [ 138.733460][T10295] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 139.009055][T10264] vhci_hcd: connection reset by peer [ 139.015063][ T41] vhci_hcd: stop threads [ 139.019384][ T41] vhci_hcd: release socket [ 139.023818][ T41] vhci_hcd: disconnect device [ 139.063492][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.411364][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 139.411382][ T29] audit: type=1326 audit(1755910149.715:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a453ebe9 code=0x7ffc0000 [ 139.419418][T10314] loop3: detected capacity change from 0 to 2048 [ 139.441217][ T29] audit: type=1326 audit(1755910149.715:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a453ebe9 code=0x7ffc0000 [ 139.472615][ T29] audit: type=1326 audit(1755910149.775:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a453ebe9 code=0x7ffc0000 [ 139.497659][ T29] audit: type=1326 audit(1755910149.775:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a453ebe9 code=0x7ffc0000 [ 139.521307][ T29] audit: type=1326 audit(1755910149.775:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a453ebe9 code=0x7ffc0000 [ 139.530024][T10314] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.2696: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 139.545036][ T29] audit: type=1326 audit(1755910149.775:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a453ebe9 code=0x7ffc0000 [ 139.584968][ T29] audit: type=1326 audit(1755910149.775:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a453ebe9 code=0x7ffc0000 [ 139.608880][ T29] audit: type=1326 audit(1755910149.775:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a453ebe9 code=0x7ffc0000 [ 139.632595][ T29] audit: type=1326 audit(1755910149.775:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a453ebe9 code=0x7ffc0000 [ 139.656412][ T29] audit: type=1326 audit(1755910149.775:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a453ebe9 code=0x7ffc0000 [ 139.712322][T10328] __nla_validate_parse: 5 callbacks suppressed [ 139.712399][T10328] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2699'. [ 139.727688][T10328] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 139.759887][T10332] loop3: detected capacity change from 0 to 512 [ 139.770661][T10332] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.813066][T10338] loop2: detected capacity change from 0 to 2368 [ 139.820142][T10338] iso9660: Bad value for 'check' [ 139.904012][T10348] FAULT_INJECTION: forcing a failure. [ 139.904012][T10348] name failslab, interval 1, probability 0, space 0, times 0 [ 139.916792][T10348] CPU: 1 UID: 0 PID: 10348 Comm: syz.3.2704 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.916823][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.916835][T10348] Call Trace: [ 139.916843][T10348] [ 139.916860][T10348] __dump_stack+0x1d/0x30 [ 139.916883][T10348] dump_stack_lvl+0xe8/0x140 [ 139.916904][T10348] dump_stack+0x15/0x1b [ 139.916985][T10348] should_fail_ex+0x265/0x280 [ 139.917004][T10348] should_failslab+0x8c/0xb0 [ 139.917026][T10348] kmem_cache_alloc_noprof+0x50/0x310 [ 139.917072][T10346] loop1: detected capacity change from 0 to 2048 [ 139.917095][T10348] ? skb_clone+0x151/0x1f0 [ 139.917118][T10348] skb_clone+0x151/0x1f0 [ 139.917139][T10348] __netlink_deliver_tap+0x2c9/0x500 [ 139.917191][T10348] netlink_unicast+0x66b/0x690 [ 139.917289][T10348] netlink_sendmsg+0x58b/0x6b0 [ 139.917312][T10348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.917333][T10348] __sock_sendmsg+0x145/0x180 [ 139.917360][T10348] ____sys_sendmsg+0x31e/0x4e0 [ 139.917391][T10348] ___sys_sendmsg+0x17b/0x1d0 [ 139.917422][T10348] __x64_sys_sendmsg+0xd4/0x160 [ 139.917446][T10348] x64_sys_call+0x191e/0x2ff0 [ 139.917508][T10348] do_syscall_64+0xd2/0x200 [ 139.917534][T10348] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 139.917558][T10348] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 139.917634][T10348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.917656][T10348] RIP: 0033:0x7fd8943eebe9 [ 139.917672][T10348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.917690][T10348] RSP: 002b:00007fd892e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.917712][T10348] RAX: ffffffffffffffda RBX: 00007fd894615fa0 RCX: 00007fd8943eebe9 [ 139.917783][T10348] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 139.917796][T10348] RBP: 00007fd892e57090 R08: 0000000000000000 R09: 0000000000000000 [ 139.917824][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.917837][T10348] R13: 00007fd894616038 R14: 00007fd894615fa0 R15: 00007fff80b85648 [ 139.917875][T10348] [ 139.921819][T10348] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 139.962105][T10346] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.2707: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 140.213719][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2709'. [ 140.226982][T10367] erspan0: entered promiscuous mode [ 140.232323][T10367] macvtap3: entered promiscuous mode [ 140.237851][T10367] macvtap3: entered allmulticast mode [ 140.243318][T10367] erspan0: entered allmulticast mode [ 140.252811][T10367] erspan0: left allmulticast mode [ 140.257932][T10367] erspan0: left promiscuous mode [ 140.274810][T10360] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 140.281362][T10360] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.289009][T10360] vhci_hcd vhci_hcd.0: Device attached [ 140.434437][T10376] loop1: detected capacity change from 0 to 512 [ 140.462327][T10376] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.867285][T10368] vhci_hcd: connection closed [ 140.867740][ T1918] vhci_hcd: stop threads [ 140.876844][ T1918] vhci_hcd: release socket [ 140.881328][ T1918] vhci_hcd: disconnect device [ 140.895394][T10383] loop1: detected capacity change from 0 to 512 [ 140.910777][T10383] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.984317][T10387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10387 comm=syz.1.2715 [ 141.408867][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2718'. [ 141.421431][T10394] ip6gretap0: entered promiscuous mode [ 141.427065][T10394] macvtap8: entered promiscuous mode [ 141.432687][T10394] macvtap8: entered allmulticast mode [ 141.438096][T10394] ip6gretap0: entered allmulticast mode [ 141.446069][T10394] ip6gretap0: left allmulticast mode [ 141.451562][T10394] ip6gretap0: left promiscuous mode [ 141.481924][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 141.494091][T10401] erspan0: entered promiscuous mode [ 141.499646][T10401] macvtap9: entered promiscuous mode [ 141.505039][T10401] macvtap9: entered allmulticast mode [ 141.510527][T10401] erspan0: entered allmulticast mode [ 141.519668][T10401] erspan0: left allmulticast mode [ 141.524850][T10401] erspan0: left promiscuous mode [ 141.551915][T10407] loop3: detected capacity change from 0 to 512 [ 141.581850][T10407] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.661168][T10412] loop3: detected capacity change from 0 to 512 [ 141.670741][T10412] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.671303][T10414] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 141.751011][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.793519][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.827331][T10437] lo speed is unknown, defaulting to 1000 [ 141.845359][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.873246][T10422] lo speed is unknown, defaulting to 1000 [ 141.879859][T10446] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 141.886500][T10446] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.894331][T10446] vhci_hcd vhci_hcd.0: Device attached [ 141.917009][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.947236][T10422] chnl_net:caif_netlink_parms(): no params data found [ 141.965540][T10454] FAULT_INJECTION: forcing a failure. [ 141.965540][T10454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.978621][T10454] CPU: 0 UID: 0 PID: 10454 Comm: syz.1.2733 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.978717][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.978727][T10454] Call Trace: [ 141.978733][T10454] [ 141.978739][T10454] __dump_stack+0x1d/0x30 [ 141.978757][T10454] dump_stack_lvl+0xe8/0x140 [ 141.978772][T10454] dump_stack+0x15/0x1b [ 141.978784][T10454] should_fail_ex+0x265/0x280 [ 141.978806][T10454] should_fail+0xb/0x20 [ 141.978818][T10454] should_fail_usercopy+0x1a/0x20 [ 141.978836][T10454] _copy_from_user+0x1c/0xb0 [ 141.978872][T10454] kstrtouint_from_user+0x69/0xf0 [ 141.978957][T10454] ? 0xffffffff81000000 [ 141.978967][T10454] ? selinux_file_permission+0x1e4/0x320 [ 141.978985][T10454] proc_fail_nth_write+0x50/0x160 [ 141.979008][T10454] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 141.979105][T10454] vfs_write+0x266/0x960 [ 141.979162][T10454] ? vfs_read+0x4e6/0x770 [ 141.979172][T10454] ? __rcu_read_unlock+0x4f/0x70 [ 141.979233][T10454] ? __fget_files+0x184/0x1c0 [ 141.979252][T10454] ksys_write+0xda/0x1a0 [ 141.979263][T10454] __x64_sys_write+0x40/0x50 [ 141.979274][T10454] x64_sys_call+0x27fe/0x2ff0 [ 141.979285][T10454] do_syscall_64+0xd2/0x200 [ 141.979413][T10454] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 141.979425][T10454] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 141.979477][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.979488][T10454] RIP: 0033:0x7f478243d69f [ 141.979496][T10454] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 141.979505][T10454] RSP: 002b:00007f4780e86030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 141.979516][T10454] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f478243d69f [ 141.979527][T10454] RDX: 0000000000000001 RSI: 00007f4780e860a0 RDI: 0000000000000004 [ 141.979533][T10454] RBP: 00007f4780e86090 R08: 0000000000000000 R09: 0000000000000000 [ 141.979540][T10454] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 141.979564][T10454] R13: 00007f4782666128 R14: 00007f4782666090 R15: 00007ffe59f91678 [ 141.979573][T10454] [ 142.213889][T10422] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.221158][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.228267][T10422] bridge_slave_0: entered allmulticast mode [ 142.234940][T10422] bridge_slave_0: entered promiscuous mode [ 142.243514][T10422] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.250681][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.257829][T10422] bridge_slave_1: entered allmulticast mode [ 142.258941][ T10] usb 7-1: device descriptor read/64, error -110 [ 142.264331][T10422] bridge_slave_1: entered promiscuous mode [ 142.290817][T10422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.300070][ T48] bridge_slave_1: left allmulticast mode [ 142.305835][ T48] bridge_slave_1: left promiscuous mode [ 142.311609][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.319460][ T48] bridge_slave_0: left allmulticast mode [ 142.325103][ T48] bridge_slave_0: left promiscuous mode [ 142.330752][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.410696][ T48] bond0 (unregistering): left allmulticast mode [ 142.417000][ T48] bond_slave_0: left allmulticast mode [ 142.422674][ T48] bond0 (unregistering): left promiscuous mode [ 142.428850][ T48] bond_slave_0: left promiscuous mode [ 142.438088][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.447632][ T48] bond0 (unregistering): Released all slaves [ 142.455673][ T48] bond1 (unregistering): Released all slaves [ 142.464401][T10422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.482017][T10422] team0: Port device team_slave_0 added [ 142.488346][T10422] team0: Port device team_slave_1 added [ 142.502623][T10422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.509638][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.535605][T10422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.547110][T10422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.554089][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.580141][T10422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.581900][T10447] vhci_hcd: connection reset by peer [ 142.599857][ T1652] vhci_hcd: stop threads [ 142.604154][ T1652] vhci_hcd: release socket [ 142.608639][ T1652] vhci_hcd: disconnect device [ 142.620840][ T48] hsr_slave_0: left promiscuous mode [ 142.626334][ T48] hsr_slave_1: left promiscuous mode [ 142.634458][ T48] team0: left allmulticast mode [ 142.639430][ T48] team_slave_0: left allmulticast mode [ 142.644904][ T48] team_slave_1: left allmulticast mode [ 142.650477][ T48] team0: left promiscuous mode [ 142.655412][ T48] team_slave_0: left promiscuous mode [ 142.660848][ T48] team_slave_1: left promiscuous mode [ 142.666405][ T48] veth1_macvtap: left promiscuous mode [ 142.671901][ T48] veth0_macvtap: left promiscuous mode [ 142.677463][ T48] veth1_vlan: left promiscuous mode [ 142.682874][ T48] veth0_vlan: left promiscuous mode [ 142.733100][ T48] team0 (unregistering): Port device team_slave_1 removed [ 142.743152][ T48] team0 (unregistering): Port device team_slave_0 removed [ 142.768991][T10422] hsr_slave_0: entered promiscuous mode [ 142.774906][T10422] hsr_slave_1: entered promiscuous mode [ 142.950619][ T48] IPVS: stop unused estimator thread 0... [ 143.070855][T10422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.079480][T10422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.087857][T10422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.096360][T10422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.132273][T10466] FAULT_INJECTION: forcing a failure. [ 143.132273][T10466] name failslab, interval 1, probability 0, space 0, times 0 [ 143.135461][T10422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.145025][T10466] CPU: 1 UID: 0 PID: 10466 Comm: syz.3.2734 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.145114][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.145126][T10466] Call Trace: [ 143.145134][T10466] [ 143.145141][T10466] __dump_stack+0x1d/0x30 [ 143.145164][T10466] dump_stack_lvl+0xe8/0x140 [ 143.145183][T10466] dump_stack+0x15/0x1b [ 143.145204][T10466] should_fail_ex+0x265/0x280 [ 143.145226][T10466] should_failslab+0x8c/0xb0 [ 143.145250][T10466] __kmalloc_noprof+0xa5/0x3e0 [ 143.145276][T10466] ? usb_alloc_urb+0x42/0xc0 [ 143.145302][T10466] ? alloc_async+0x2d/0x90 [ 143.145388][T10466] usb_alloc_urb+0x42/0xc0 [ 143.145414][T10466] alloc_async+0x41/0x90 [ 143.145443][T10466] proc_do_submiturb+0x76d/0x1d20 [ 143.145493][T10466] proc_submiturb+0x7b/0xa0 [ 143.145521][T10466] usbdev_ioctl+0xcc2/0x1710 [ 143.145546][T10466] ? __pfx_usbdev_ioctl+0x10/0x10 [ 143.145570][T10466] __se_sys_ioctl+0xce/0x140 [ 143.145656][T10466] __x64_sys_ioctl+0x43/0x50 [ 143.145693][T10466] x64_sys_call+0x1816/0x2ff0 [ 143.145714][T10466] do_syscall_64+0xd2/0x200 [ 143.145752][T10466] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.145776][T10466] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 143.145858][T10466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.145880][T10466] RIP: 0033:0x7fd8943eebe9 [ 143.145896][T10466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.145992][T10466] RSP: 002b:00007fd892e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.146064][T10466] RAX: ffffffffffffffda RBX: 00007fd894615fa0 RCX: 00007fd8943eebe9 [ 143.146078][T10466] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000003 [ 143.146091][T10466] RBP: 00007fd892e57090 R08: 0000000000000000 R09: 0000000000000000 [ 143.146104][T10466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.146117][T10466] R13: 00007fd894616038 R14: 00007fd894615fa0 R15: 00007fff80b85648 [ 143.146134][T10466] [ 143.361796][T10422] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.374101][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.381286][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.396287][T10472] loop3: detected capacity change from 0 to 512 [ 143.401324][T10422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.413022][T10422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.425109][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.431938][T10472] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.432445][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.487220][T10422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.561020][T10422] veth0_vlan: entered promiscuous mode [ 143.577363][T10422] veth1_vlan: entered promiscuous mode [ 143.594672][T10422] veth0_macvtap: entered promiscuous mode [ 143.602440][T10422] veth1_macvtap: entered promiscuous mode [ 143.614975][T10422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.626403][T10422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.637621][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.654910][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.667813][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.684388][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.702242][T10490] loop3: detected capacity change from 0 to 512 [ 143.721796][T10490] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.745786][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 143.754798][T10498] FAULT_INJECTION: forcing a failure. [ 143.754798][T10498] name failslab, interval 1, probability 0, space 0, times 0 [ 143.767618][T10498] CPU: 1 UID: 0 PID: 10498 Comm: syz.0.2740 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.767651][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.767663][T10498] Call Trace: [ 143.767669][T10498] [ 143.767676][T10498] __dump_stack+0x1d/0x30 [ 143.767724][T10498] dump_stack_lvl+0xe8/0x140 [ 143.767742][T10498] dump_stack+0x15/0x1b [ 143.767757][T10498] should_fail_ex+0x265/0x280 [ 143.767821][T10498] should_failslab+0x8c/0xb0 [ 143.767849][T10498] kmem_cache_alloc_node_noprof+0x57/0x320 [ 143.767884][T10498] ? __alloc_skb+0x101/0x320 [ 143.767927][T10498] __alloc_skb+0x101/0x320 [ 143.767963][T10498] netlink_ack+0xfd/0x500 [ 143.767984][T10498] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 143.768059][T10498] netlink_rcv_skb+0x192/0x220 [ 143.768142][T10498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.768171][T10498] genl_rcv+0x28/0x40 [ 143.768192][T10498] netlink_unicast+0x5bd/0x690 [ 143.768244][T10498] netlink_sendmsg+0x58b/0x6b0 [ 143.768265][T10498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.768284][T10498] __sock_sendmsg+0x145/0x180 [ 143.768311][T10498] ____sys_sendmsg+0x31e/0x4e0 [ 143.768367][T10498] ___sys_sendmsg+0x17b/0x1d0 [ 143.768443][T10498] __x64_sys_sendmsg+0xd4/0x160 [ 143.768466][T10498] x64_sys_call+0x191e/0x2ff0 [ 143.768488][T10498] do_syscall_64+0xd2/0x200 [ 143.768557][T10498] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.768584][T10498] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 143.768613][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.768637][T10498] RIP: 0033:0x7f8c2305ebe9 [ 143.768664][T10498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.768685][T10498] RSP: 002b:00007f8c21abf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.768705][T10498] RAX: ffffffffffffffda RBX: 00007f8c23285fa0 RCX: 00007f8c2305ebe9 [ 143.768717][T10498] RDX: 0000000000008800 RSI: 0000200000000480 RDI: 0000000000000004 [ 143.768786][T10498] RBP: 00007f8c21abf090 R08: 0000000000000000 R09: 0000000000000000 [ 143.768801][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.768815][T10498] R13: 00007f8c23286038 R14: 00007f8c23285fa0 R15: 00007ffc7821af38 [ 143.768833][T10498] [ 143.992277][ T9] vhci_hcd: vhci_device speed not set [ 144.074513][T10506] netlink: 'syz.3.2743': attribute type 13 has an invalid length. [ 144.082475][T10506] netlink: 'syz.3.2743': attribute type 17 has an invalid length. [ 144.109449][T10506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.252711][T10517] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 144.259246][T10517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 144.266873][T10517] vhci_hcd vhci_hcd.0: Device attached [ 144.916115][T10525] loop2: detected capacity change from 0 to 512 [ 144.931208][T10525] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.980811][T10518] vhci_hcd: connection closed [ 144.980978][ T1918] vhci_hcd: stop threads [ 144.989996][ T1918] vhci_hcd: release socket [ 144.994410][ T1918] vhci_hcd: disconnect device [ 145.149409][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 145.260723][T10550] loop5: detected capacity change from 0 to 512 [ 145.267419][T10550] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.275800][T10550] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 145.287069][T10550] EXT4-fs (loop5): 1 truncate cleaned up [ 145.287540][T10552] loop2: detected capacity change from 0 to 2368 [ 145.299688][T10552] iso9660: Bad value for 'check' [ 145.327880][T10555] tipc: Started in network mode [ 145.332959][T10555] tipc: Node identity 76549df0217b, cluster identity 4711 [ 145.340165][T10555] tipc: Enabled bearer , priority 0 [ 145.521982][T10562] loop3: detected capacity change from 0 to 512 [ 145.560838][T10562] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.620239][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 145.620309][ T29] audit: type=1400 audit(1755910155.925:4372): avc: denied { read write } for pid=10571 comm="syz.2.2761" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 145.649957][ T29] audit: type=1400 audit(1755910155.925:4373): avc: denied { open } for pid=10571 comm="syz.2.2761" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 145.650268][T10572] FAULT_INJECTION: forcing a failure. [ 145.650268][T10572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.686673][T10572] CPU: 1 UID: 0 PID: 10572 Comm: syz.2.2761 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.686782][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.686797][T10572] Call Trace: [ 145.686804][T10572] [ 145.686812][T10572] __dump_stack+0x1d/0x30 [ 145.686834][T10572] dump_stack_lvl+0xe8/0x140 [ 145.686928][T10572] dump_stack+0x15/0x1b [ 145.686944][T10572] should_fail_ex+0x265/0x280 [ 145.686965][T10572] should_fail+0xb/0x20 [ 145.686986][T10572] should_fail_usercopy+0x1a/0x20 [ 145.687084][T10572] copy_fpstate_to_sigframe+0x628/0x7d0 [ 145.687121][T10572] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 145.687224][T10572] ? x86_task_fpu+0x36/0x60 [ 145.687322][T10572] get_sigframe+0x34d/0x490 [ 145.687339][T10572] ? get_signal+0xdc8/0xf70 [ 145.687371][T10572] x64_setup_rt_frame+0xa8/0x580 [ 145.687486][T10572] arch_do_signal_or_restart+0x27c/0x480 [ 145.687509][T10572] exit_to_user_mode_loop+0x7a/0x100 [ 145.687610][T10572] do_syscall_64+0x1d6/0x200 [ 145.687637][T10572] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.687659][T10572] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.687727][T10572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.687775][T10572] RIP: 0033:0x7f73a453ebe7 [ 145.687794][T10572] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 145.687817][T10572] RSP: 002b:00007f73a2fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 145.687840][T10572] RAX: 0000000000000013 RBX: 00007f73a4765fa0 RCX: 00007f73a453ebe9 [ 145.687855][T10572] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 145.687893][T10572] RBP: 00007f73a2fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.687905][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.687918][T10572] R13: 00007f73a4766038 R14: 00007f73a4765fa0 R15: 00007ffe628398b8 [ 145.687939][T10572] [ 145.945383][ T41] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.990550][ T41] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.020908][ T41] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.063118][T10576] lo speed is unknown, defaulting to 1000 [ 146.072335][ T41] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.150854][ T41] dummy0: left allmulticast mode [ 146.156106][ T41] bridge0: port 3(dummy0) entered disabled state [ 146.169495][ T41] bridge_slave_1: left allmulticast mode [ 146.175174][ T41] bridge_slave_1: left promiscuous mode [ 146.180945][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.190019][ T41] bridge_slave_0: left allmulticast mode [ 146.195721][ T41] bridge_slave_0: left promiscuous mode [ 146.201510][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.277802][ T41] bond1 (unregistering): (slave gretap1): Releasing active interface [ 146.330533][ T41] tipc: Disabling bearer [ 146.413519][T10593] loop5: detected capacity change from 0 to 512 [ 146.430352][T10593] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.452799][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.462576][ T41] bond0 (unregistering): Released all slaves [ 146.472784][ T41] bond1 (unregistering): Released all slaves [ 146.480942][ T41] bond2 (unregistering): Released all slaves [ 146.488802][ T41] bond3 (unregistering): Released all slaves [ 146.499164][T10576] chnl_net:caif_netlink_parms(): no params data found [ 146.543431][T10576] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.550600][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.559327][T10576] bridge_slave_0: entered allmulticast mode [ 146.565968][T10576] bridge_slave_0: entered promiscuous mode [ 146.574462][T10576] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.581649][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.590758][T10576] bridge_slave_1: entered allmulticast mode [ 146.597357][T10576] bridge_slave_1: entered promiscuous mode [ 146.611952][ T41] tipc: Left network mode [ 146.625312][ T41] hsr_slave_0: left promiscuous mode [ 146.631504][ T41] hsr_slave_1: left promiscuous mode [ 146.637091][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.644541][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.652162][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.659739][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.669422][ T41] team0: left allmulticast mode [ 146.674269][ T41] team_slave_0: left allmulticast mode [ 146.679754][ T41] team_slave_1: left allmulticast mode [ 146.685266][ T41] team0: left promiscuous mode [ 146.690284][ T41] team_slave_0: left promiscuous mode [ 146.695678][ T41] team_slave_1: left promiscuous mode [ 146.701784][ T41] veth1_macvtap: left promiscuous mode [ 146.707284][ T41] veth0_macvtap: left promiscuous mode [ 146.714293][ T41] veth1_vlan: left promiscuous mode [ 146.719592][ T41] veth0_vlan: left promiscuous mode [ 146.805612][ T29] audit: type=1326 audit(1755910157.105:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.3.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 146.829298][ T29] audit: type=1326 audit(1755910157.105:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.3.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 146.852921][ T29] audit: type=1326 audit(1755910157.105:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.3.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 146.876614][ T29] audit: type=1326 audit(1755910157.105:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.3.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 146.900157][ T29] audit: type=1326 audit(1755910157.105:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.3.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 146.923738][ T29] audit: type=1326 audit(1755910157.105:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.3.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 146.947272][ T29] audit: type=1326 audit(1755910157.105:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.3.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 146.971167][ T29] audit: type=1326 audit(1755910157.105:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.3.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 146.997240][ T41] team0 (unregistering): Port device team_slave_1 removed [ 147.009010][ T41] team0 (unregistering): Port device team_slave_0 removed [ 147.070923][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.080271][ T9] lo speed is unknown, defaulting to 1000 [ 147.081723][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.086029][ T9] infiniband syz0: ib_query_port failed (-19) [ 147.115780][T10576] team0: Port device team_slave_0 added [ 147.131911][T10576] team0: Port device team_slave_1 added [ 147.156618][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.163647][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.189698][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.201658][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.208632][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.234592][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.268942][T10576] hsr_slave_0: entered promiscuous mode [ 147.275335][T10576] hsr_slave_1: entered promiscuous mode [ 147.281875][T10576] debugfs: 'hsr0' already exists in 'hsr' [ 147.287612][T10576] Cannot create hsr debugfs directory [ 147.429314][ T10] usb 7-1: enqueue for inactive port 0 [ 147.434856][ T10] usb 7-1: enqueue for inactive port 0 [ 147.509047][ T10] vhci_hcd: vhci_device speed not set [ 147.576298][T10619] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2772'. [ 147.590574][ T3412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 147.599230][T10618] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2772'. [ 147.600270][ T3412] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.664744][T10576] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.674923][T10625] loop5: detected capacity change from 0 to 512 [ 147.680733][T10576] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.691468][T10576] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.701714][T10576] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.709257][T10625] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.760194][T10576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.775482][T10576] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.786706][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.793801][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.812015][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.819129][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.892634][T10576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.974980][T10660] netlink: 'syz.3.2781': attribute type 11 has an invalid length. [ 147.982886][T10660] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2781'. [ 147.999572][T10576] veth0_vlan: entered promiscuous mode [ 148.007382][T10576] veth1_vlan: entered promiscuous mode [ 148.017800][T10664] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.043068][T10576] veth0_macvtap: entered promiscuous mode [ 148.051083][T10576] veth1_macvtap: entered promiscuous mode [ 148.062939][T10664] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.076497][T10576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.091552][T10576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.103158][ T1918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.114657][ T1918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.125185][T10664] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.139867][ T1918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.156571][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.181248][T10664] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.221875][T10673] IPVS: Error joining to the multicast group [ 148.240159][ T3425] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.255494][ T1918] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.271927][ T3425] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.303886][ T3425] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.411142][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2788'. [ 148.506282][T10701] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 148.512861][T10701] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 148.520578][T10701] vhci_hcd vhci_hcd.0: Device attached [ 148.532202][T10696] loop0: detected capacity change from 0 to 512 [ 148.574112][T10696] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 148.606248][T10696] EXT4-fs (loop0): 1 truncate cleaned up [ 148.764536][T10717] loop2: detected capacity change from 0 to 2048 [ 148.799057][ T10] usb 3-1: new high-speed USB device number 4 using vhci_hcd [ 148.860470][T10717] loop2: p1 < > p3 [ 148.865727][T10717] loop2: p3 size 134217728 extends beyond EOD, truncated [ 148.894508][T10721] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2798'. [ 148.909715][T10717] Invalid logical block size (3) [ 148.954020][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2801'. [ 149.033640][T10739] FAULT_INJECTION: forcing a failure. [ 149.033640][T10739] name failslab, interval 1, probability 0, space 0, times 0 [ 149.046363][T10739] CPU: 1 UID: 0 PID: 10739 Comm: syz.0.2799 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.046394][T10739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.046408][T10739] Call Trace: [ 149.046415][T10739] [ 149.046424][T10739] __dump_stack+0x1d/0x30 [ 149.046447][T10739] dump_stack_lvl+0xe8/0x140 [ 149.046486][T10739] dump_stack+0x15/0x1b [ 149.046501][T10739] should_fail_ex+0x265/0x280 [ 149.046521][T10739] should_failslab+0x8c/0xb0 [ 149.046543][T10739] kmem_cache_alloc_noprof+0x50/0x310 [ 149.046597][T10739] ? skb_clone+0x151/0x1f0 [ 149.046619][T10739] skb_clone+0x151/0x1f0 [ 149.046653][T10739] __netlink_deliver_tap+0x2c9/0x500 [ 149.046679][T10739] netlink_unicast+0x66b/0x690 [ 149.046767][T10739] netlink_sendmsg+0x58b/0x6b0 [ 149.046867][T10739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.046891][T10739] __sock_sendmsg+0x145/0x180 [ 149.046983][T10739] ____sys_sendmsg+0x31e/0x4e0 [ 149.047005][T10739] ___sys_sendmsg+0x17b/0x1d0 [ 149.047034][T10739] __x64_sys_sendmsg+0xd4/0x160 [ 149.047060][T10739] x64_sys_call+0x191e/0x2ff0 [ 149.047090][T10739] do_syscall_64+0xd2/0x200 [ 149.047115][T10739] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.047199][T10739] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.047229][T10739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.047272][T10739] RIP: 0033:0x7f8c2305ebe9 [ 149.047289][T10739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.047352][T10739] RSP: 002b:00007f8c21a7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.047377][T10739] RAX: ffffffffffffffda RBX: 00007f8c23286180 RCX: 00007f8c2305ebe9 [ 149.047441][T10739] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 149.047456][T10739] RBP: 00007f8c21a7d090 R08: 0000000000000000 R09: 0000000000000000 [ 149.047468][T10739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.047480][T10739] R13: 00007f8c23286218 R14: 00007f8c23286180 R15: 00007ffc7821af38 [ 149.047498][T10739] [ 149.259902][T10702] vhci_hcd: connection reset by peer [ 149.265344][ T3425] vhci_hcd: stop threads [ 149.269712][ T3425] vhci_hcd: release socket [ 149.274194][ T3425] vhci_hcd: disconnect device [ 149.338188][T10752] FAULT_INJECTION: forcing a failure. [ 149.338188][T10752] name failslab, interval 1, probability 0, space 0, times 0 [ 149.350945][T10752] CPU: 1 UID: 0 PID: 10752 Comm: syz.0.2809 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.350972][T10752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.350983][T10752] Call Trace: [ 149.350989][T10752] [ 149.350996][T10752] __dump_stack+0x1d/0x30 [ 149.351069][T10752] dump_stack_lvl+0xe8/0x140 [ 149.351088][T10752] dump_stack+0x15/0x1b [ 149.351103][T10752] should_fail_ex+0x265/0x280 [ 149.351123][T10752] should_failslab+0x8c/0xb0 [ 149.351146][T10752] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 149.351223][T10752] ? sock_alloc_inode+0x34/0xa0 [ 149.351285][T10752] ? __pfx_sock_alloc_inode+0x10/0x10 [ 149.351316][T10752] sock_alloc_inode+0x34/0xa0 [ 149.351422][T10752] alloc_inode+0x40/0x170 [ 149.351455][T10752] __sock_create+0x122/0x5b0 [ 149.351483][T10752] __sys_socketpair+0x170/0x430 [ 149.351514][T10752] ? ksys_write+0x192/0x1a0 [ 149.351565][T10752] __x64_sys_socketpair+0x52/0x60 [ 149.351591][T10752] x64_sys_call+0x2bf2/0x2ff0 [ 149.351636][T10752] do_syscall_64+0xd2/0x200 [ 149.351659][T10752] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 149.351683][T10752] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.351734][T10752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.351758][T10752] RIP: 0033:0x7f8c2305ebe9 [ 149.351777][T10752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.351799][T10752] RSP: 002b:00007f8c21abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 149.351823][T10752] RAX: ffffffffffffffda RBX: 00007f8c23285fa0 RCX: 00007f8c2305ebe9 [ 149.351909][T10752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.351924][T10752] RBP: 00007f8c21abf090 R08: 0000000000000000 R09: 0000000000000000 [ 149.351939][T10752] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 149.351954][T10752] R13: 00007f8c23286038 R14: 00007f8c23285fa0 R15: 00007ffc7821af38 [ 149.351973][T10752] [ 149.352061][T10752] socket: no more sockets [ 149.382885][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2810'. [ 149.418995][T10758] loop2: detected capacity change from 0 to 2048 [ 149.424922][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2810'. [ 149.595893][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2814'. [ 149.600854][T10758] loop2: p1 < > p3 [ 149.613341][T10758] loop2: p3 size 134217728 extends beyond EOD, truncated [ 149.704863][T10769] syzkaller0: entered promiscuous mode [ 149.710439][T10769] syzkaller0: entered allmulticast mode [ 149.731265][T10769] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=10769 comm=syz.5.2816 [ 149.931455][T10782] TC_ACT_REPEAT abuse ? [ 149.935854][T10782] TC_ACT_REPEAT abuse ? [ 149.940583][T10782] TC_ACT_REPEAT abuse ? [ 149.978406][T10782] TC_ACT_REPEAT abuse ? [ 149.982800][T10782] TC_ACT_REPEAT abuse ? [ 149.995370][T10790] Invalid option length (0) for dns_resolver key [ 150.002668][T10790] sd 0:0:1:0: device reset [ 150.211556][T10802] __nla_validate_parse: 4 callbacks suppressed [ 150.211575][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2826'. [ 150.283988][T10804] loop1: detected capacity change from 0 to 2048 [ 150.340088][T10804] loop1: p1 < > p3 [ 150.344702][T10804] loop1: p3 size 134217728 extends beyond EOD, truncated [ 150.377766][T10808] loop1: detected capacity change from 0 to 512 [ 150.384589][T10808] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.390412][T10810] sd 0:0:1:0: device reset [ 150.392715][T10808] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.395853][T10810] FAULT_INJECTION: forcing a failure. [ 150.395853][T10810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.407704][T10808] EXT4-fs (loop1): 1 truncate cleaned up [ 150.418613][T10810] CPU: 1 UID: 0 PID: 10810 Comm: syz.0.2830 Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.418651][T10810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.418663][T10810] Call Trace: [ 150.418670][T10810] [ 150.418688][T10810] __dump_stack+0x1d/0x30 [ 150.418710][T10810] dump_stack_lvl+0xe8/0x140 [ 150.418731][T10810] dump_stack+0x15/0x1b [ 150.418748][T10810] should_fail_ex+0x265/0x280 [ 150.418786][T10810] should_fail+0xb/0x20 [ 150.418804][T10810] should_fail_usercopy+0x1a/0x20 [ 150.418863][T10810] _copy_to_user+0x20/0xa0 [ 150.418897][T10810] simple_read_from_buffer+0xb5/0x130 [ 150.418919][T10810] proc_fail_nth_read+0x10e/0x150 [ 150.419006][T10810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.419031][T10810] vfs_read+0x1a5/0x770 [ 150.419051][T10810] ? __rcu_read_unlock+0x4f/0x70 [ 150.419073][T10810] ? __fget_files+0x184/0x1c0 [ 150.419098][T10810] ksys_read+0xda/0x1a0 [ 150.419122][T10810] __x64_sys_read+0x40/0x50 [ 150.419215][T10810] x64_sys_call+0x27bc/0x2ff0 [ 150.419236][T10810] do_syscall_64+0xd2/0x200 [ 150.419339][T10810] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.419363][T10810] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 150.419388][T10810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.419461][T10810] RIP: 0033:0x7f8c2305d5fc [ 150.419478][T10810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.419496][T10810] RSP: 002b:00007f8c21abf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.419518][T10810] RAX: ffffffffffffffda RBX: 00007f8c23285fa0 RCX: 00007f8c2305d5fc [ 150.419531][T10810] RDX: 000000000000000f RSI: 00007f8c21abf0a0 RDI: 0000000000000004 [ 150.419553][T10810] RBP: 00007f8c21abf090 R08: 0000000000000000 R09: 0000000000000000 [ 150.419566][T10810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.419578][T10810] R13: 00007f8c23286038 R14: 00007f8c23285fa0 R15: 00007ffc7821af38 [ 150.419676][T10810] [ 150.880965][T10841] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 150.887570][T10841] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 150.895180][T10841] vhci_hcd vhci_hcd.0: Device attached [ 150.895506][T10842] loop5: detected capacity change from 0 to 512 [ 150.906052][T10846] loop3: detected capacity change from 0 to 512 [ 150.915087][T10846] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.2841: Invalid inode bitmap blk 4 in block_group 0 [ 150.929304][T10842] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.138948][ T3412] usb 1-1: new high-speed USB device number 4 using vhci_hcd [ 151.153667][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 151.153683][ T29] audit: type=1400 audit(1755910161.455:4512): avc: denied { ioctl } for pid=10845 comm="syz.3.2841" path="socket:[33119]" dev="sockfs" ino=33119 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.586301][T10843] vhci_hcd: connection reset by peer [ 151.591737][T10846] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 151.599623][T10846] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2841'. [ 151.611657][ T31] vhci_hcd: stop threads [ 151.615957][ T31] vhci_hcd: release socket [ 151.620432][ T31] vhci_hcd: disconnect device [ 151.633515][T10867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=10867 comm=syz.5.2844 [ 151.716913][T10872] loop2: detected capacity change from 0 to 2368 [ 151.723699][T10872] iso9660: Bad value for 'check' [ 151.772166][T10874] loop3: detected capacity change from 0 to 2368 [ 151.779316][T10874] iso9660: Bad value for 'check' [ 151.879908][T10880] loop1: detected capacity change from 0 to 164 [ 151.887395][T10880] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.897089][T10880] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.905820][T10880] rock: directory entry would overflow storage [ 151.912038][T10880] rock: sig=0x4f50, size=4, remaining=3 [ 151.917586][T10880] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 151.927034][ T29] audit: type=1400 audit(1755910162.235:4513): avc: denied { remount } for pid=10877 comm="syz.1.2848" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 151.947144][ T29] audit: type=1326 audit(1755910162.235:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478243ebe9 code=0x7ffc0000 [ 151.970715][ T29] audit: type=1326 audit(1755910162.235:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f478243ebe9 code=0x7ffc0000 [ 151.994286][ T29] audit: type=1326 audit(1755910162.235:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478243ebe9 code=0x7ffc0000 [ 152.017769][ T29] audit: type=1326 audit(1755910162.235:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10877 comm="syz.1.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478243ebe9 code=0x7ffc0000 [ 152.558315][T10893] loop5: detected capacity change from 0 to 512 [ 152.571379][T10893] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.777857][ T29] audit: type=1326 audit(1755910163.075:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb704ecebe9 code=0x7ffc0000 [ 152.778454][T10902] FAULT_INJECTION: forcing a failure. [ 152.778454][T10902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.802814][ T29] audit: type=1326 audit(1755910163.075:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb704ecebe9 code=0x7ffc0000 [ 152.814670][T10902] CPU: 0 UID: 0 PID: 10902 Comm: syz.5.2855 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.814698][T10902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.814710][T10902] Call Trace: [ 152.814716][T10902] [ 152.814724][T10902] __dump_stack+0x1d/0x30 [ 152.814746][T10902] dump_stack_lvl+0xe8/0x140 [ 152.814834][T10902] dump_stack+0x15/0x1b [ 152.814851][T10902] should_fail_ex+0x265/0x280 [ 152.814872][T10902] should_fail+0xb/0x20 [ 152.814893][T10902] should_fail_usercopy+0x1a/0x20 [ 152.814915][T10902] _copy_from_user+0x1c/0xb0 [ 152.814942][T10902] do_sock_getsockopt+0xf1/0x240 [ 152.815030][T10902] __x64_sys_getsockopt+0x11e/0x1a0 [ 152.815054][T10902] x64_sys_call+0x2bc6/0x2ff0 [ 152.815075][T10902] do_syscall_64+0xd2/0x200 [ 152.815176][T10902] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.815274][T10902] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 152.815323][T10902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.815345][T10902] RIP: 0033:0x7fb704ecebe9 [ 152.815360][T10902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.815384][T10902] RSP: 002b:00007fb703937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 152.815405][T10902] RAX: ffffffffffffffda RBX: 00007fb7050f5fa0 RCX: 00007fb704ecebe9 [ 152.815418][T10902] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000006 [ 152.815431][T10902] RBP: 00007fb703937090 R08: 0000200000000c80 R09: 0000000000000000 [ 152.815444][T10902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.815457][T10902] R13: 00007fb7050f6038 R14: 00007fb7050f5fa0 R15: 00007ffd92223118 [ 152.815480][T10902] [ 153.008553][ T29] audit: type=1326 audit(1755910163.075:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb704ecebe9 code=0x7ffc0000 [ 153.032150][ T29] audit: type=1326 audit(1755910163.075:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.5.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb704ecd550 code=0x7ffc0000 [ 153.064815][T10907] FAULT_INJECTION: forcing a failure. [ 153.064815][T10907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.077918][T10907] CPU: 0 UID: 0 PID: 10907 Comm: syz.5.2858 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.077950][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.077982][T10907] Call Trace: [ 153.077988][T10907] [ 153.077995][T10907] __dump_stack+0x1d/0x30 [ 153.078016][T10907] dump_stack_lvl+0xe8/0x140 [ 153.078034][T10907] dump_stack+0x15/0x1b [ 153.078050][T10907] should_fail_ex+0x265/0x280 [ 153.078075][T10907] should_fail+0xb/0x20 [ 153.078122][T10907] should_fail_usercopy+0x1a/0x20 [ 153.078148][T10907] _copy_to_user+0x20/0xa0 [ 153.078181][T10907] simple_read_from_buffer+0xb5/0x130 [ 153.078208][T10907] proc_fail_nth_read+0x10e/0x150 [ 153.078298][T10907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.078376][T10907] vfs_read+0x1a5/0x770 [ 153.078399][T10907] ? __rcu_read_unlock+0x4f/0x70 [ 153.078425][T10907] ? __fget_files+0x184/0x1c0 [ 153.078456][T10907] ksys_read+0xda/0x1a0 [ 153.078483][T10907] __x64_sys_read+0x40/0x50 [ 153.078569][T10907] x64_sys_call+0x27bc/0x2ff0 [ 153.078594][T10907] do_syscall_64+0xd2/0x200 [ 153.078626][T10907] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.078664][T10907] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 153.078763][T10907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.078790][T10907] RIP: 0033:0x7fb704ecd5fc [ 153.078809][T10907] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 153.078830][T10907] RSP: 002b:00007fb703937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.078855][T10907] RAX: ffffffffffffffda RBX: 00007fb7050f5fa0 RCX: 00007fb704ecd5fc [ 153.078870][T10907] RDX: 000000000000000f RSI: 00007fb7039370a0 RDI: 0000000000000007 [ 153.078890][T10907] RBP: 00007fb703937090 R08: 0000000000000000 R09: 0000000000000000 [ 153.078905][T10907] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 153.078982][T10907] R13: 00007fb7050f6038 R14: 00007fb7050f5fa0 R15: 00007ffd92223118 [ 153.079002][T10907] [ 153.279789][T10909] FAULT_INJECTION: forcing a failure. [ 153.279789][T10909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.292903][T10909] CPU: 1 UID: 0 PID: 10909 Comm: syz.0.2857 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.293000][T10909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.293011][T10909] Call Trace: [ 153.293052][T10909] [ 153.293058][T10909] __dump_stack+0x1d/0x30 [ 153.293078][T10909] dump_stack_lvl+0xe8/0x140 [ 153.293143][T10909] dump_stack+0x15/0x1b [ 153.293158][T10909] should_fail_ex+0x265/0x280 [ 153.293177][T10909] should_fail+0xb/0x20 [ 153.293193][T10909] should_fail_usercopy+0x1a/0x20 [ 153.293212][T10909] _copy_from_iter+0xd2/0xe80 [ 153.293281][T10909] ? __build_skb_around+0x1a0/0x200 [ 153.293310][T10909] ? __alloc_skb+0x223/0x320 [ 153.293338][T10909] netlink_sendmsg+0x471/0x6b0 [ 153.293419][T10909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.293438][T10909] __sock_sendmsg+0x145/0x180 [ 153.293463][T10909] ____sys_sendmsg+0x31e/0x4e0 [ 153.293559][T10909] ___sys_sendmsg+0x17b/0x1d0 [ 153.293595][T10909] __x64_sys_sendmsg+0xd4/0x160 [ 153.293617][T10909] x64_sys_call+0x191e/0x2ff0 [ 153.293636][T10909] do_syscall_64+0xd2/0x200 [ 153.293666][T10909] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.293687][T10909] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 153.293717][T10909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.293788][T10909] RIP: 0033:0x7f8c2305ebe9 [ 153.293803][T10909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.293821][T10909] RSP: 002b:00007f8c21abf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.293840][T10909] RAX: ffffffffffffffda RBX: 00007f8c23285fa0 RCX: 00007f8c2305ebe9 [ 153.293851][T10909] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 153.293863][T10909] RBP: 00007f8c21abf090 R08: 0000000000000000 R09: 0000000000000000 [ 153.293874][T10909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.293933][T10909] R13: 00007f8c23286038 R14: 00007f8c23285fa0 R15: 00007ffc7821af38 [ 153.293949][T10909] [ 153.522380][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2859'. [ 153.551381][T10919] loop5: detected capacity change from 0 to 512 [ 153.558091][T10919] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.565078][T10919] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 153.576450][T10919] EXT4-fs (loop5): 1 truncate cleaned up [ 153.615899][T10924] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 153.622463][T10924] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 153.630123][T10924] vhci_hcd vhci_hcd.0: Device attached [ 153.658934][T10929] FAULT_INJECTION: forcing a failure. [ 153.658934][T10929] name failslab, interval 1, probability 0, space 0, times 0 [ 153.671684][T10929] CPU: 1 UID: 0 PID: 10929 Comm: syz.1.2862 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.671706][T10929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.671797][T10929] Call Trace: [ 153.671802][T10929] [ 153.671808][T10929] __dump_stack+0x1d/0x30 [ 153.671828][T10929] dump_stack_lvl+0xe8/0x140 [ 153.671844][T10929] dump_stack+0x15/0x1b [ 153.671858][T10929] should_fail_ex+0x265/0x280 [ 153.671904][T10929] ? legacy_init_fs_context+0x31/0x80 [ 153.671922][T10929] should_failslab+0x8c/0xb0 [ 153.671943][T10929] __kmalloc_cache_noprof+0x4c/0x320 [ 153.672055][T10929] legacy_init_fs_context+0x31/0x80 [ 153.672071][T10929] alloc_fs_context+0x3ef/0x4e0 [ 153.672087][T10929] fs_context_for_mount+0x22/0x30 [ 153.672103][T10929] do_new_mount+0xe9/0x5e0 [ 153.672121][T10929] ? security_capable+0x83/0x90 [ 153.672204][T10929] path_mount+0x4a4/0xb20 [ 153.672223][T10929] ? user_path_at+0x109/0x130 [ 153.672262][T10929] __se_sys_mount+0x28f/0x2e0 [ 153.672287][T10929] ? fput+0x8f/0xc0 [ 153.672314][T10929] __x64_sys_mount+0x67/0x80 [ 153.672336][T10929] x64_sys_call+0x2b4d/0x2ff0 [ 153.672359][T10929] do_syscall_64+0xd2/0x200 [ 153.672448][T10929] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 153.672463][T10929] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 153.672480][T10929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.672494][T10929] RIP: 0033:0x7f478243ebe9 [ 153.672540][T10929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.672552][T10929] RSP: 002b:00007f4780ea7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 153.672567][T10929] RAX: ffffffffffffffda RBX: 00007f4782665fa0 RCX: 00007f478243ebe9 [ 153.672575][T10929] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 153.672584][T10929] RBP: 00007f4780ea7090 R08: 0000200000000a40 R09: 0000000000000000 [ 153.672624][T10929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.672679][T10929] R13: 00007f4782666038 R14: 00007f4782665fa0 R15: 00007ffe59f91678 [ 153.672691][T10929] [ 153.898954][ T10] vhci_hcd: vhci_device speed not set [ 153.916722][T10937] loop1: detected capacity change from 0 to 256 [ 153.933512][T10937] FAT-fs (loop1): codepage cp861 not found [ 154.369051][T10925] vhci_hcd: connection closed [ 154.473098][ T41] vhci_hcd: stop threads [ 154.482240][ T41] vhci_hcd: release socket [ 154.486668][ T41] vhci_hcd: disconnect device [ 154.609299][T10949] FAULT_INJECTION: forcing a failure. [ 154.609299][T10949] name failslab, interval 1, probability 0, space 0, times 0 [ 154.621957][T10949] CPU: 1 UID: 0 PID: 10949 Comm: syz.5.2868 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.621982][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.621992][T10949] Call Trace: [ 154.621996][T10949] [ 154.622000][T10949] __dump_stack+0x1d/0x30 [ 154.622052][T10949] dump_stack_lvl+0xe8/0x140 [ 154.622062][T10949] dump_stack+0x15/0x1b [ 154.622070][T10949] should_fail_ex+0x265/0x280 [ 154.622095][T10949] ? legacy_init_fs_context+0x31/0x80 [ 154.622107][T10949] should_failslab+0x8c/0xb0 [ 154.622119][T10949] __kmalloc_cache_noprof+0x4c/0x320 [ 154.622134][T10949] legacy_init_fs_context+0x31/0x80 [ 154.622180][T10949] alloc_fs_context+0x3ef/0x4e0 [ 154.622191][T10949] fs_context_for_mount+0x22/0x30 [ 154.622201][T10949] do_new_mount+0xe9/0x5e0 [ 154.622211][T10949] ? security_capable+0x83/0x90 [ 154.622297][T10949] path_mount+0x4a4/0xb20 [ 154.622328][T10949] ? user_path_at+0x109/0x130 [ 154.622344][T10949] __se_sys_mount+0x28f/0x2e0 [ 154.622354][T10949] ? fput+0x8f/0xc0 [ 154.622376][T10949] __x64_sys_mount+0x67/0x80 [ 154.622430][T10949] x64_sys_call+0x2b4d/0x2ff0 [ 154.622498][T10949] do_syscall_64+0xd2/0x200 [ 154.622512][T10949] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.622524][T10949] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 154.622549][T10949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.622560][T10949] RIP: 0033:0x7fb704ecebe9 [ 154.622570][T10949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.622579][T10949] RSP: 002b:00007fb703937038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.622591][T10949] RAX: ffffffffffffffda RBX: 00007fb7050f5fa0 RCX: 00007fb704ecebe9 [ 154.622617][T10949] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 154.622624][T10949] RBP: 00007fb703937090 R08: 0000200000000240 R09: 0000000000000000 [ 154.622630][T10949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.622677][T10949] R13: 00007fb7050f6038 R14: 00007fb7050f5fa0 R15: 00007ffd92223118 [ 154.622739][T10949] [ 154.926570][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2871'. [ 154.955322][T10959] FAULT_INJECTION: forcing a failure. [ 154.955322][T10959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.968525][T10959] CPU: 0 UID: 0 PID: 10959 Comm: syz.5.2873 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.968552][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.968563][T10959] Call Trace: [ 154.968643][T10959] [ 154.968651][T10959] __dump_stack+0x1d/0x30 [ 154.968749][T10959] dump_stack_lvl+0xe8/0x140 [ 154.968772][T10959] dump_stack+0x15/0x1b [ 154.968792][T10959] should_fail_ex+0x265/0x280 [ 154.968836][T10959] should_fail+0xb/0x20 [ 154.968856][T10959] should_fail_usercopy+0x1a/0x20 [ 154.968888][T10959] _copy_from_iter+0xd2/0xe80 [ 154.968918][T10959] ? __build_skb_around+0x1a0/0x200 [ 154.969025][T10959] ? __alloc_skb+0x223/0x320 [ 154.969055][T10959] pfkey_sendmsg+0x126/0x900 [ 154.969079][T10959] ? avc_has_perm+0xf7/0x180 [ 154.969109][T10959] ? selinux_socket_sendmsg+0x175/0x1b0 [ 154.969209][T10959] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 154.969247][T10959] __sock_sendmsg+0x145/0x180 [ 154.969305][T10959] ____sys_sendmsg+0x31e/0x4e0 [ 154.969327][T10959] ___sys_sendmsg+0x17b/0x1d0 [ 154.969442][T10959] __x64_sys_sendmsg+0xd4/0x160 [ 154.969471][T10959] x64_sys_call+0x191e/0x2ff0 [ 154.969497][T10959] do_syscall_64+0xd2/0x200 [ 154.969529][T10959] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.969594][T10959] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 154.969645][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.969756][T10959] RIP: 0033:0x7fb704ecebe9 [ 154.969772][T10959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.969788][T10959] RSP: 002b:00007fb703937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.969810][T10959] RAX: ffffffffffffffda RBX: 00007fb7050f5fa0 RCX: 00007fb704ecebe9 [ 154.969825][T10959] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 154.969841][T10959] RBP: 00007fb703937090 R08: 0000000000000000 R09: 0000000000000000 [ 154.969855][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.969870][T10959] R13: 00007fb7050f6038 R14: 00007fb7050f5fa0 R15: 00007ffd92223118 [ 154.969956][T10959] [ 155.186000][T10962] netlink: 'syz.1.2874': attribute type 21 has an invalid length. [ 155.194459][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'. [ 155.223593][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2873'. [ 155.529869][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.537129][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.912050][T10959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.957181][T10959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.218954][ T3412] vhci_hcd: vhci_device speed not set [ 156.410353][T10959] bond0: left allmulticast mode [ 156.415254][T10959] bond_slave_0: left allmulticast mode [ 156.420771][T10959] bond_slave_1: left allmulticast mode [ 156.426279][T10959] bond0: left promiscuous mode [ 156.431129][T10959] bond_slave_0: left promiscuous mode [ 156.436587][T10959] bond_slave_1: left promiscuous mode [ 156.462990][T10959] team0: left allmulticast mode [ 156.467894][T10959] team_slave_0: left allmulticast mode [ 156.473775][T10959] team_slave_1: left allmulticast mode [ 156.479325][T10959] team0: left promiscuous mode [ 156.484226][T10959] team_slave_0: left promiscuous mode [ 156.489819][T10959] team_slave_1: left promiscuous mode [ 156.516327][ T3425] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.525393][ T3425] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.544552][ T3425] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.553781][ T3425] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.607594][T10986] loop5: detected capacity change from 0 to 512 [ 156.616259][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 156.616275][ T29] audit: type=1326 audit(1755910166.915:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10987 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478243ebe9 code=0x7ffc0000 [ 156.648198][ T29] audit: type=1326 audit(1755910166.945:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10987 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f478243ebe9 code=0x7ffc0000 [ 156.671740][ T29] audit: type=1326 audit(1755910166.945:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10987 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478243ebe9 code=0x7ffc0000 [ 156.695310][ T29] audit: type=1326 audit(1755910166.945:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10987 comm="syz.1.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478243ebe9 code=0x7ffc0000 [ 156.736045][T10990] FAULT_INJECTION: forcing a failure. [ 156.736045][T10990] name failslab, interval 1, probability 0, space 0, times 0 [ 156.748728][T10990] CPU: 0 UID: 0 PID: 10990 Comm: syz.1.2881 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.748753][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.748764][T10990] Call Trace: [ 156.748770][T10990] [ 156.748778][T10990] __dump_stack+0x1d/0x30 [ 156.748814][T10990] dump_stack_lvl+0xe8/0x140 [ 156.748885][T10990] dump_stack+0x15/0x1b [ 156.748904][T10990] should_fail_ex+0x265/0x280 [ 156.748929][T10990] should_failslab+0x8c/0xb0 [ 156.749005][T10990] kmem_cache_alloc_noprof+0x50/0x310 [ 156.749035][T10990] ? audit_log_start+0x365/0x6c0 [ 156.749070][T10990] audit_log_start+0x365/0x6c0 [ 156.749122][T10990] audit_seccomp+0x48/0x100 [ 156.749148][T10990] ? __seccomp_filter+0x68c/0x10d0 [ 156.749189][T10990] __seccomp_filter+0x69d/0x10d0 [ 156.749212][T10990] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 156.749242][T10990] ? vfs_write+0x7e8/0x960 [ 156.749261][T10990] ? __rcu_read_unlock+0x4f/0x70 [ 156.749332][T10990] ? __fget_files+0x184/0x1c0 [ 156.749424][T10990] __secure_computing+0x82/0x150 [ 156.749447][T10990] syscall_trace_enter+0xcf/0x1e0 [ 156.749472][T10990] do_syscall_64+0xac/0x200 [ 156.749501][T10990] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.749524][T10990] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 156.749595][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.749615][T10990] RIP: 0033:0x7f478243ebe9 [ 156.749630][T10990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.749659][T10990] RSP: 002b:00007f4780ea7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 156.749681][T10990] RAX: ffffffffffffffda RBX: 00007f4782665fa0 RCX: 00007f478243ebe9 [ 156.749696][T10990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 156.749710][T10990] RBP: 00007f4780ea7090 R08: 0000000000000001 R09: 0000000000000000 [ 156.749723][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.749735][T10990] R13: 00007f4782666038 R14: 00007f4782665fa0 R15: 00007ffe59f91678 [ 156.749754][T10990] [ 156.778921][ T29] audit: type=1326 audit(1755910167.035:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.1.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478243ebe9 code=0x7ffc0000 [ 156.780270][T10990] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 156.784772][ T29] audit: type=1326 audit(1755910167.035:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.1.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f478243d550 code=0x7ffc0000 [ 156.788922][T10990] audit: out of memory in audit_log_start [ 156.950728][T10986] EXT4-fs mount: 40 callbacks suppressed [ 156.950745][T10986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.952709][ T29] audit: type=1326 audit(1755910167.035:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.1.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f478243d69f code=0x7ffc0000 [ 156.955819][T10986] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.979599][ T29] audit: type=1326 audit(1755910167.095:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10989 comm="syz.1.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f478243d5fc code=0x7ffc0000 [ 157.101235][T10998] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 157.101721][T11003] FAULT_INJECTION: forcing a failure. [ 157.101721][T11003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.107957][T10998] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.121604][T11003] CPU: 1 UID: 0 PID: 11003 Comm: syz.0.2883 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.121633][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.121661][T11003] Call Trace: [ 157.121667][T11003] [ 157.121720][T11003] __dump_stack+0x1d/0x30 [ 157.121742][T11003] dump_stack_lvl+0xe8/0x140 [ 157.121762][T11003] dump_stack+0x15/0x1b [ 157.121779][T11003] should_fail_ex+0x265/0x280 [ 157.121811][T11003] should_fail+0xb/0x20 [ 157.121829][T11003] should_fail_usercopy+0x1a/0x20 [ 157.121850][T11003] _copy_from_iter+0x254/0xe80 [ 157.121880][T11003] j1939_sk_sendmsg+0x623/0xc00 [ 157.121906][T11003] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 157.121952][T11003] __sock_sendmsg+0x145/0x180 [ 157.121980][T11003] ____sys_sendmsg+0x345/0x4e0 [ 157.122004][T11003] ___sys_sendmsg+0x17b/0x1d0 [ 157.122076][T11003] __sys_sendmmsg+0x178/0x300 [ 157.122106][T11003] __x64_sys_sendmmsg+0x57/0x70 [ 157.122181][T11003] x64_sys_call+0x1c4a/0x2ff0 [ 157.122203][T11003] do_syscall_64+0xd2/0x200 [ 157.122359][T11003] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 157.122385][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.122453][T11003] RIP: 0033:0x7f8c2305ebe9 [ 157.122546][T11003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.122564][T11003] RSP: 002b:00007f8c21abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 157.122586][T11003] RAX: ffffffffffffffda RBX: 00007f8c23285fa0 RCX: 00007f8c2305ebe9 [ 157.122599][T11003] RDX: 0000000000000002 RSI: 000020000000a200 RDI: 0000000000000006 [ 157.122612][T11003] RBP: 00007f8c21abf090 R08: 0000000000000000 R09: 0000000000000000 [ 157.122624][T11003] R10: 0000000060000800 R11: 0000000000000246 R12: 0000000000000001 [ 157.122637][T11003] R13: 00007f8c23286038 R14: 00007f8c23285fa0 R15: 00007ffc7821af38 [ 157.122673][T11003] [ 157.317090][T10998] vhci_hcd vhci_hcd.0: Device attached [ 157.330749][T11000] vhci_hcd: connection closed [ 157.330958][ T48] vhci_hcd: stop threads [ 157.340089][ T48] vhci_hcd: release socket [ 157.344546][ T48] vhci_hcd: disconnect device [ 157.353157][ T5508] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.378802][T11014] netlink: 'syz.5.2885': attribute type 1 has an invalid length. [ 157.422621][T11018] loop5: detected capacity change from 0 to 512 [ 157.431140][T11022] sg_write: data in/out 197376/8 bytes for SCSI command 0xd7-- guessing data in; [ 157.431140][T11022] program syz.3.2888 not setting count and/or reply_len properly [ 157.431268][T11018] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.471308][T11018] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.500112][T11018] EXT4-fs (loop5): 1 truncate cleaned up [ 157.508267][T11018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.528540][T11027] loop3: detected capacity change from 0 to 1764 [ 157.541930][T11027] iso9660: Bad value for 'check' [ 157.560147][T11027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2890'. [ 157.585601][T11020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2887'. [ 157.691812][T11038] loop2: detected capacity change from 0 to 512 [ 157.711614][T11038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.725619][T11040] loop3: detected capacity change from 0 to 512 [ 157.728973][T11038] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.751700][T11040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.772148][T11040] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.803797][T10576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.846545][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.851143][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a935600: rx timeout, send abort [ 157.863829][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a935a00: rx timeout, send abort [ 157.878961][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a935600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 157.893368][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a935a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 157.956073][T11053] FAULT_INJECTION: forcing a failure. [ 157.956073][T11053] name failslab, interval 1, probability 0, space 0, times 0 [ 157.968831][T11053] CPU: 1 UID: 0 PID: 11053 Comm: syz.3.2897 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.968878][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.968897][T11053] Call Trace: [ 157.968905][T11053] [ 157.968914][T11053] __dump_stack+0x1d/0x30 [ 157.968939][T11053] dump_stack_lvl+0xe8/0x140 [ 157.969002][T11053] dump_stack+0x15/0x1b [ 157.969080][T11053] should_fail_ex+0x265/0x280 [ 157.969103][T11053] should_failslab+0x8c/0xb0 [ 157.969126][T11053] __kvmalloc_node_noprof+0x123/0x4e0 [ 157.969158][T11053] ? io_alloc_cache_init+0x31/0xa0 [ 157.969255][T11053] io_alloc_cache_init+0x31/0xa0 [ 157.969280][T11053] io_ring_ctx_alloc+0x2f6/0x6a0 [ 157.969307][T11053] io_uring_create+0x10f/0x610 [ 157.969356][T11053] __se_sys_io_uring_setup+0x1f7/0x210 [ 157.969452][T11053] __x64_sys_io_uring_setup+0x31/0x40 [ 157.969476][T11053] x64_sys_call+0x2b21/0x2ff0 [ 157.969501][T11053] do_syscall_64+0xd2/0x200 [ 157.969525][T11053] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.969550][T11053] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 157.969656][T11053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.969692][T11053] RIP: 0033:0x7fd8943eebe9 [ 157.969712][T11053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.969756][T11053] RSP: 002b:00007fd892e56fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 157.969782][T11053] RAX: ffffffffffffffda RBX: 00007fd894615fa0 RCX: 00007fd8943eebe9 [ 157.969797][T11053] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003c0c [ 157.969811][T11053] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 157.969832][T11053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 157.969846][T11053] R13: 0000000000000000 R14: 0000000000003c0c R15: 0000000000000000 [ 157.969868][T11053] [ 158.181600][T11054] loop1: detected capacity change from 0 to 2368 [ 158.188248][T11054] iso9660: Bad value for 'check' [ 158.252042][T11063] FAULT_INJECTION: forcing a failure. [ 158.252042][T11063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.265208][T11063] CPU: 1 UID: 0 PID: 11063 Comm: gtp Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.265234][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.265245][T11063] Call Trace: [ 158.265308][T11063] [ 158.265317][T11063] __dump_stack+0x1d/0x30 [ 158.265343][T11063] dump_stack_lvl+0xe8/0x140 [ 158.265364][T11063] dump_stack+0x15/0x1b [ 158.265382][T11063] should_fail_ex+0x265/0x280 [ 158.265406][T11063] should_fail+0xb/0x20 [ 158.265468][T11063] should_fail_usercopy+0x1a/0x20 [ 158.265493][T11063] _copy_to_user+0x20/0xa0 [ 158.265522][T11063] simple_read_from_buffer+0xb5/0x130 [ 158.265597][T11063] proc_fail_nth_read+0x10e/0x150 [ 158.265636][T11063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.265719][T11063] vfs_read+0x1a5/0x770 [ 158.265742][T11063] ? __rcu_read_unlock+0x4f/0x70 [ 158.265765][T11063] ? __fget_files+0x184/0x1c0 [ 158.265790][T11063] ? __sys_setsockopt+0x18e/0x200 [ 158.265844][T11063] ksys_read+0xda/0x1a0 [ 158.265868][T11063] __x64_sys_read+0x40/0x50 [ 158.265891][T11063] x64_sys_call+0x27bc/0x2ff0 [ 158.265913][T11063] do_syscall_64+0xd2/0x200 [ 158.265944][T11063] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.266090][T11063] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 158.266117][T11063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.266140][T11063] RIP: 0033:0x7fd8943ed5fc [ 158.266159][T11063] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 158.266178][T11063] RSP: 002b:00007fd892e57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.266201][T11063] RAX: ffffffffffffffda RBX: 00007fd894615fa0 RCX: 00007fd8943ed5fc [ 158.266236][T11063] RDX: 000000000000000f RSI: 00007fd892e570a0 RDI: 0000000000000006 [ 158.266251][T11063] RBP: 00007fd892e57090 R08: 0000000000000000 R09: 0000000000000000 [ 158.266264][T11063] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 158.266278][T11063] R13: 00007fd894616038 R14: 00007fd894615fa0 R15: 00007fff80b85648 [ 158.266299][T11063] [ 158.633466][T11074] loop3: detected capacity change from 0 to 512 [ 158.674737][T11074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.706157][T11074] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.720931][T11069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2905'. [ 158.801144][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.813558][ T5508] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.833075][T11088] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 158.839626][T11088] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.847267][T11088] vhci_hcd vhci_hcd.0: Device attached [ 158.867834][T11092] loop1: detected capacity change from 0 to 2368 [ 158.880052][T11092] iso9660: Bad value for 'check' [ 158.954398][T11102] loop3: detected capacity change from 0 to 1024 [ 158.962135][T11102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.977489][T11107] FAULT_INJECTION: forcing a failure. [ 158.977489][T11107] name failslab, interval 1, probability 0, space 0, times 0 [ 158.990196][T11107] CPU: 0 UID: 0 PID: 11107 Comm: syz.5.2916 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.990224][T11107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.990239][T11107] Call Trace: [ 158.990247][T11107] [ 158.990318][T11107] __dump_stack+0x1d/0x30 [ 158.990340][T11107] dump_stack_lvl+0xe8/0x140 [ 158.990388][T11107] dump_stack+0x15/0x1b [ 158.990405][T11107] should_fail_ex+0x265/0x280 [ 158.990428][T11107] should_failslab+0x8c/0xb0 [ 158.990452][T11107] kmem_cache_alloc_noprof+0x50/0x310 [ 158.990524][T11107] ? audit_log_start+0x365/0x6c0 [ 158.990577][T11107] audit_log_start+0x365/0x6c0 [ 158.990611][T11107] audit_seccomp+0x48/0x100 [ 158.990661][T11107] ? __seccomp_filter+0x68c/0x10d0 [ 158.990685][T11107] __seccomp_filter+0x69d/0x10d0 [ 158.990714][T11107] ? vfs_write+0x7e8/0x960 [ 158.990759][T11107] __secure_computing+0x82/0x150 [ 158.990781][T11107] syscall_trace_enter+0xcf/0x1e0 [ 158.990809][T11107] do_syscall_64+0xac/0x200 [ 158.990837][T11107] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.990911][T11107] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 158.990938][T11107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.990963][T11107] RIP: 0033:0x7fb704ecebe9 [ 158.990980][T11107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.990999][T11107] RSP: 002b:00007fb703937038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 158.991053][T11107] RAX: ffffffffffffffda RBX: 00007fb7050f5fa0 RCX: 00007fb704ecebe9 [ 158.991066][T11107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 158.991080][T11107] RBP: 00007fb703937090 R08: 0000000000000001 R09: 0000000000000000 [ 158.991093][T11107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.991106][T11107] R13: 00007fb7050f6038 R14: 00007fb7050f5fa0 R15: 00007ffd92223118 [ 158.991126][T11107] [ 158.992418][T11102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.108922][T10971] usb 1-1: new high-speed USB device number 5 using vhci_hcd [ 159.226366][T11102] EXT4-fs: Ignoring removed orlov option [ 159.232371][T11102] EXT4-fs (loop3): can't enable nombcache during remount [ 159.402362][T11119] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 159.411294][T11119] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 159.434168][T11121] FAULT_INJECTION: forcing a failure. [ 159.434168][T11121] name failslab, interval 1, probability 0, space 0, times 0 [ 159.446918][T11121] CPU: 1 UID: 0 PID: 11121 Comm: syz.2.2919 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.446940][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.446974][T11121] Call Trace: [ 159.446982][T11121] [ 159.446990][T11121] __dump_stack+0x1d/0x30 [ 159.447014][T11121] dump_stack_lvl+0xe8/0x140 [ 159.447037][T11121] dump_stack+0x15/0x1b [ 159.447055][T11121] should_fail_ex+0x265/0x280 [ 159.447136][T11121] should_failslab+0x8c/0xb0 [ 159.447184][T11121] kmem_cache_alloc_noprof+0x50/0x310 [ 159.447201][T11121] ? sctp_get_port_local+0x438/0xae0 [ 159.447237][T11121] sctp_get_port_local+0x438/0xae0 [ 159.447273][T11121] sctp_do_bind+0x398/0x4b0 [ 159.447293][T11121] sctp_connect_new_asoc+0x153/0x3a0 [ 159.447423][T11121] __sctp_connect+0x424/0x7a0 [ 159.447441][T11121] ? selinux_sctp_bind_connect+0x20d/0x250 [ 159.447463][T11121] sctp_getsockopt_connectx3+0x220/0x300 [ 159.447606][T11121] sctp_getsockopt+0x910/0xaa0 [ 159.447621][T11121] sock_common_getsockopt+0x5d/0x70 [ 159.447635][T11121] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 159.447701][T11121] do_sock_getsockopt+0x1fd/0x240 [ 159.447713][T11121] __x64_sys_getsockopt+0x11e/0x1a0 [ 159.447725][T11121] x64_sys_call+0x2bc6/0x2ff0 [ 159.447736][T11121] do_syscall_64+0xd2/0x200 [ 159.447768][T11121] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.447780][T11121] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 159.447793][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.447820][T11121] RIP: 0033:0x7fba3975ebe9 [ 159.447875][T11121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.447884][T11121] RSP: 002b:00007fba381c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 159.447895][T11121] RAX: ffffffffffffffda RBX: 00007fba39985fa0 RCX: 00007fba3975ebe9 [ 159.447902][T11121] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 159.447909][T11121] RBP: 00007fba381c7090 R08: 0000200000000180 R09: 0000000000000000 [ 159.447915][T11121] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.447921][T11121] R13: 00007fba39986038 R14: 00007fba39985fa0 R15: 00007fff47448848 [ 159.447943][T11121] [ 159.667433][T11089] vhci_hcd: connection reset by peer [ 159.687009][ T41] vhci_hcd: stop threads [ 159.691313][ T41] vhci_hcd: release socket [ 159.695761][ T41] vhci_hcd: disconnect device [ 159.704072][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.724339][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2922'. [ 159.775547][T11135] netlink: 'syz.3.2926': attribute type 21 has an invalid length. [ 159.841997][T11127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2921'. [ 160.024507][T11156] loop5: detected capacity change from 0 to 2048 [ 160.043099][T11156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.089902][ T5508] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.340634][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2936'. [ 160.567653][T11174] loop5: detected capacity change from 0 to 764 [ 160.810336][T11183] loop2: detected capacity change from 0 to 1024 [ 160.846931][T11183] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 160.856923][T11183] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 160.948153][T11183] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 160.960940][T11179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2943'. [ 160.996528][T11183] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #5: comm syz.2.2944: unexpected bad inode w/o EXT4_IGET_BAD [ 161.034166][T11183] EXT4-fs (loop2): no journal found [ 161.039521][T11183] EXT4-fs (loop2): can't get journal size [ 161.068610][T11183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.149116][T10576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.185514][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2947'. [ 161.260678][T11200] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 161.297497][T11200] loop3: detected capacity change from 0 to 512 [ 161.304716][T11204] FAULT_INJECTION: forcing a failure. [ 161.304716][T11204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.317997][T11204] CPU: 0 UID: 0 PID: 11204 Comm: syz.5.2953 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.318084][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.318097][T11204] Call Trace: [ 161.318104][T11204] [ 161.318114][T11204] __dump_stack+0x1d/0x30 [ 161.318139][T11204] dump_stack_lvl+0xe8/0x140 [ 161.318162][T11204] dump_stack+0x15/0x1b [ 161.318242][T11204] should_fail_ex+0x265/0x280 [ 161.318269][T11204] should_fail+0xb/0x20 [ 161.318290][T11204] should_fail_usercopy+0x1a/0x20 [ 161.318334][T11204] _copy_from_user+0x1c/0xb0 [ 161.318365][T11204] tipc_setsockopt+0x388/0x620 [ 161.318473][T11204] ? __pfx_tipc_setsockopt+0x10/0x10 [ 161.318553][T11204] __sys_setsockopt+0x184/0x200 [ 161.318573][T11204] __x64_sys_setsockopt+0x64/0x80 [ 161.318666][T11204] x64_sys_call+0x20ec/0x2ff0 [ 161.318693][T11204] do_syscall_64+0xd2/0x200 [ 161.318768][T11204] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.318791][T11204] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 161.318850][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.318881][T11204] RIP: 0033:0x7fb704ecebe9 [ 161.318901][T11204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.318921][T11204] RSP: 002b:00007fb703937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.318942][T11204] RAX: ffffffffffffffda RBX: 00007fb7050f5fa0 RCX: 00007fb704ecebe9 [ 161.318963][T11204] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 161.318977][T11204] RBP: 00007fb703937090 R08: 0000000000000010 R09: 0000000000000000 [ 161.318990][T11204] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 161.319003][T11204] R13: 00007fb7050f6038 R14: 00007fb7050f5fa0 R15: 00007ffd92223118 [ 161.319023][T11204] [ 161.553564][T11209] loop2: detected capacity change from 0 to 128 [ 161.566532][T11200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.590151][T11213] wg2: entered promiscuous mode [ 161.595071][T11213] wg2: entered allmulticast mode [ 161.599056][T11200] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.619186][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 161.619203][ T29] audit: type=1326 audit(1755910171.925:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.3.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8943ed550 code=0x7ffc0000 [ 161.670975][ T29] audit: type=1326 audit(1755910171.925:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.3.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd8943ed937 code=0x7ffc0000 [ 161.694463][ T29] audit: type=1326 audit(1755910171.925:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.3.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8943ed550 code=0x7ffc0000 [ 161.718164][ T29] audit: type=1326 audit(1755910171.925:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.3.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 161.741797][ T29] audit: type=1326 audit(1755910171.925:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.3.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 161.744672][T11217] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 161.765621][ T29] audit: type=1326 audit(1755910171.925:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.3.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 161.803433][ T29] audit: type=1326 audit(1755910171.925:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.3.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 161.826933][ T29] audit: type=1326 audit(1755910171.925:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.3.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 161.850629][ T29] audit: type=1326 audit(1755910171.925:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.3.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 161.874113][ T29] audit: type=1326 audit(1755910171.925:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.3.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8943eebe9 code=0x7ffc0000 [ 161.901346][T11222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11222 comm=syz.0.2959 [ 161.914341][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2959'. [ 162.019428][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2963'. [ 162.101851][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.119373][T11241] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 162.141545][T11243] pim6reg1: entered promiscuous mode [ 162.146889][T11243] pim6reg1: entered allmulticast mode [ 162.242570][T11248] loop3: detected capacity change from 0 to 512 [ 162.251699][T11248] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2967: casefold flag without casefold feature [ 162.265107][T11248] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2967: couldn't read orphan inode 15 (err -117) [ 162.279472][T11248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.313275][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.428290][T11255] loop2: detected capacity change from 0 to 512 [ 162.434828][T11255] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.441777][T11255] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.452806][T11255] EXT4-fs (loop2): 1 truncate cleaned up [ 162.458740][T11255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.610904][T11264] FAULT_INJECTION: forcing a failure. [ 162.610904][T11264] name failslab, interval 1, probability 0, space 0, times 0 [ 162.623661][T11264] CPU: 1 UID: 0 PID: 11264 Comm: syz.5.2972 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.623694][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.623805][T11264] Call Trace: [ 162.623814][T11264] [ 162.623823][T11264] __dump_stack+0x1d/0x30 [ 162.623849][T11264] dump_stack_lvl+0xe8/0x140 [ 162.623872][T11264] dump_stack+0x15/0x1b [ 162.623937][T11264] should_fail_ex+0x265/0x280 [ 162.623964][T11264] should_failslab+0x8c/0xb0 [ 162.623993][T11264] __kmalloc_cache_node_noprof+0x54/0x320 [ 162.624065][T11264] ? page_pool_create_percpu+0x4d/0x630 [ 162.624122][T11264] page_pool_create_percpu+0x4d/0x630 [ 162.624156][T11264] ? bpf_test_run_xdp_live+0x114/0xfe0 [ 162.624253][T11264] page_pool_create+0x1a/0x30 [ 162.624284][T11264] bpf_test_run_xdp_live+0x12e/0xfe0 [ 162.624308][T11264] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 162.624410][T11264] ? __pfx_autoremove_wake_function+0x10/0x10 [ 162.624448][T11264] ? 0xffffffffa02054c0 [ 162.624463][T11264] ? synchronize_rcu+0x45/0x320 [ 162.624489][T11264] ? 0xffffffffa02054c0 [ 162.624501][T11264] ? 0xffffffffa02054c0 [ 162.624532][T11264] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 162.624564][T11264] ? 0xffffffffa02019cc [ 162.624584][T11264] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 162.624615][T11264] bpf_prog_test_run_xdp+0x4f5/0x910 [ 162.624641][T11264] ? __rcu_read_unlock+0x4f/0x70 [ 162.624752][T11264] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 162.624884][T11264] bpf_prog_test_run+0x227/0x390 [ 162.624930][T11264] __sys_bpf+0x4b9/0x7b0 [ 162.624963][T11264] __x64_sys_bpf+0x41/0x50 [ 162.624990][T11264] x64_sys_call+0x2aea/0x2ff0 [ 162.625081][T11264] do_syscall_64+0xd2/0x200 [ 162.625232][T11264] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.625329][T11264] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 162.625356][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.625390][T11264] RIP: 0033:0x7fb704ecebe9 [ 162.625443][T11264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.625461][T11264] RSP: 002b:00007fb703937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.625483][T11264] RAX: ffffffffffffffda RBX: 00007fb7050f5fa0 RCX: 00007fb704ecebe9 [ 162.625530][T11264] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 162.625544][T11264] RBP: 00007fb703937090 R08: 0000000000000000 R09: 0000000000000000 [ 162.625556][T11264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.625567][T11264] R13: 00007fb7050f6038 R14: 00007fb7050f5fa0 R15: 00007ffd92223118 [ 162.625585][T11264] [ 163.020638][T11272] loop5: detected capacity change from 0 to 512 [ 163.030877][T11272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.054358][T11272] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.231384][ T5508] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.250330][T11290] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 163.365431][T11302] FAULT_INJECTION: forcing a failure. [ 163.365431][T11302] name failslab, interval 1, probability 0, space 0, times 0 [ 163.378162][T11302] CPU: 1 UID: 0 PID: 11302 Comm: syz.0.2983 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.378263][T11302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.378277][T11302] Call Trace: [ 163.378283][T11302] [ 163.378290][T11302] __dump_stack+0x1d/0x30 [ 163.378310][T11302] dump_stack_lvl+0xe8/0x140 [ 163.378328][T11302] dump_stack+0x15/0x1b [ 163.378394][T11302] should_fail_ex+0x265/0x280 [ 163.378418][T11302] should_failslab+0x8c/0xb0 [ 163.378446][T11302] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 163.378528][T11302] ? sidtab_sid2str_get+0xa0/0x130 [ 163.378554][T11302] kmemdup_noprof+0x2b/0x70 [ 163.378578][T11302] sidtab_sid2str_get+0xa0/0x130 [ 163.378598][T11302] security_sid_to_context_core+0x1eb/0x2e0 [ 163.378693][T11302] security_sid_to_context+0x27/0x40 [ 163.378743][T11302] selinux_lsmprop_to_secctx+0x67/0xf0 [ 163.378764][T11302] security_lsmprop_to_secctx+0x43/0x80 [ 163.378796][T11302] audit_log_task_context+0x77/0x190 [ 163.378833][T11302] audit_log_task+0xf4/0x250 [ 163.378901][T11302] audit_seccomp+0x61/0x100 [ 163.378923][T11302] ? __seccomp_filter+0x68c/0x10d0 [ 163.378967][T11302] __seccomp_filter+0x69d/0x10d0 [ 163.378994][T11302] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 163.379072][T11302] ? vfs_write+0x7e8/0x960 [ 163.379101][T11302] __secure_computing+0x82/0x150 [ 163.379125][T11302] syscall_trace_enter+0xcf/0x1e0 [ 163.379153][T11302] do_syscall_64+0xac/0x200 [ 163.379184][T11302] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 163.379259][T11302] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 163.379286][T11302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.379320][T11302] RIP: 0033:0x7f8c2305ebe9 [ 163.379346][T11302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.379362][T11302] RSP: 002b:00007f8c21abf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 163.379387][T11302] RAX: ffffffffffffffda RBX: 00007f8c23285fa0 RCX: 00007f8c2305ebe9 [ 163.379402][T11302] RDX: 0000000000000000 RSI: 0000000000000015 RDI: ffffffffffffffff [ 163.379415][T11302] RBP: 00007f8c21abf090 R08: 0000000000000000 R09: 0000000000000000 [ 163.379444][T11302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.379458][T11302] R13: 00007f8c23286038 R14: 00007f8c23285fa0 R15: 00007ffc7821af38 [ 163.379479][T11302] [ 163.633910][T11303] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 163.640537][T11303] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 163.648194][T11303] vhci_hcd vhci_hcd.0: Device attached [ 163.690330][T10576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.889327][ T23] usb 11-1: new high-speed USB device number 4 using vhci_hcd [ 164.125541][T11304] vhci_hcd: connection reset by peer [ 164.131517][ T56] vhci_hcd: stop threads [ 164.135873][ T56] vhci_hcd: release socket [ 164.140449][ T56] vhci_hcd: disconnect device [ 164.308956][T10971] vhci_hcd: vhci_device speed not set [ 164.461613][T11325] loop2: detected capacity change from 0 to 2048 [ 164.480415][T11325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.493196][T11325] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.2992: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 164.515991][T11325] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 164.539986][T10576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.546406][T11331] loop3: detected capacity change from 0 to 512 [ 164.555592][T11331] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.562715][T11331] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.573559][T11331] EXT4-fs (loop3): 1 truncate cleaned up [ 164.579653][T11331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.831496][T11350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.842247][T11350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.906689][T11350] loop5: detected capacity change from 0 to 128 [ 164.936568][T11350] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 164.973752][ T36] Process accounting resumed [ 164.978630][ T36] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 164.986310][ T36] FAT-fs (loop5): Filesystem has been set read-only [ 165.196078][T11358] 9pnet_fd: Insufficient options for proto=fd [ 165.227331][T11358] netlink: 'syz.1.3004': attribute type 9 has an invalid length. [ 165.274247][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3006'. [ 165.291922][T11364] ip6gretap0: entered promiscuous mode [ 165.308999][T11364] macvtap4: entered promiscuous mode [ 165.314416][T11364] macvtap4: entered allmulticast mode [ 165.319918][T11364] ip6gretap0: entered allmulticast mode [ 165.351344][T11365] ip6gretap0: left allmulticast mode [ 165.356794][T11365] ip6gretap0: left promiscuous mode [ 165.462557][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.462642][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3008'. [ 165.484910][T11369] ip6gretap0: entered promiscuous mode [ 165.491006][T11369] macvtap5: entered promiscuous mode [ 165.496514][T11369] macvtap5: entered allmulticast mode [ 165.502005][T11369] ip6gretap0: entered allmulticast mode [ 165.511576][ T5508] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 165.545412][T11375] FAULT_INJECTION: forcing a failure. [ 165.545412][T11375] name failslab, interval 1, probability 0, space 0, times 0 [ 165.558347][T11375] CPU: 0 UID: 0 PID: 11375 Comm: syz.3.3011 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.558387][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.558402][T11375] Call Trace: [ 165.558411][T11375] [ 165.558419][T11375] __dump_stack+0x1d/0x30 [ 165.558492][T11375] dump_stack_lvl+0xe8/0x140 [ 165.558510][T11375] dump_stack+0x15/0x1b [ 165.558526][T11375] should_fail_ex+0x265/0x280 [ 165.558636][T11375] should_failslab+0x8c/0xb0 [ 165.558662][T11375] __kmalloc_noprof+0xa5/0x3e0 [ 165.558693][T11375] ? copy_splice_read+0xc2/0x660 [ 165.558732][T11375] copy_splice_read+0xc2/0x660 [ 165.558828][T11375] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 165.558857][T11375] splice_direct_to_actor+0x290/0x680 [ 165.558884][T11375] ? __pfx_direct_splice_actor+0x10/0x10 [ 165.558909][T11375] do_splice_direct+0xda/0x150 [ 165.558927][T11375] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 165.558955][T11375] do_sendfile+0x380/0x650 [ 165.558990][T11375] __x64_sys_sendfile64+0x105/0x150 [ 165.559048][T11375] x64_sys_call+0x2bb0/0x2ff0 [ 165.559117][T11375] do_syscall_64+0xd2/0x200 [ 165.559158][T11375] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 165.559184][T11375] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 165.559256][T11375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.559328][T11375] RIP: 0033:0x7fd8943eebe9 [ 165.559384][T11375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.559405][T11375] RSP: 002b:00007fd892e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 165.559427][T11375] RAX: ffffffffffffffda RBX: 00007fd894615fa0 RCX: 00007fd8943eebe9 [ 165.559440][T11375] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 165.559453][T11375] RBP: 00007fd892e57090 R08: 0000000000000000 R09: 0000000000000000 [ 165.559465][T11375] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 165.559477][T11375] R13: 00007fd894616038 R14: 00007fd894615fa0 R15: 00007fff80b85648 [ 165.559493][T11375] [ 165.771484][T11377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11377 comm=syz.5.3012 [ 165.796390][T11369] ip6gretap0: left allmulticast mode [ 165.801926][T11369] ip6gretap0: left promiscuous mode [ 165.844605][T11381] loop3: detected capacity change from 0 to 2368 [ 165.851544][T11385] TC_ACT_REPEAT abuse ? [ 165.855852][ C1] TC_ACT_REPEAT abuse ? [ 165.894946][T11381] iso9660: Bad value for 'check' [ 165.916682][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3018'. [ 165.929573][T11395] macvtap9: entered promiscuous mode [ 165.934900][T11395] ip6gretap0: entered promiscuous mode [ 165.940560][T11395] macvtap9: entered allmulticast mode [ 165.946017][T11395] ip6gretap0: entered allmulticast mode [ 165.969532][T11395] ip6gretap0: left allmulticast mode [ 165.973407][T11403] FAULT_INJECTION: forcing a failure. [ 165.973407][T11403] name failslab, interval 1, probability 0, space 0, times 0 [ 165.974878][T11395] ip6gretap0: left promiscuous mode [ 165.987519][T11403] CPU: 0 UID: 0 PID: 11403 Comm: syz.0.3021 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.987548][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.987560][T11403] Call Trace: [ 165.987568][T11403] [ 165.987576][T11403] __dump_stack+0x1d/0x30 [ 165.987599][T11403] dump_stack_lvl+0xe8/0x140 [ 165.987619][T11403] dump_stack+0x15/0x1b [ 165.987637][T11403] should_fail_ex+0x265/0x280 [ 165.987689][T11403] should_failslab+0x8c/0xb0 [ 165.987714][T11403] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 165.987744][T11403] ? sidtab_sid2str_get+0xa0/0x130 [ 165.987786][T11403] kmemdup_noprof+0x2b/0x70 [ 165.987811][T11403] sidtab_sid2str_get+0xa0/0x130 [ 165.987832][T11403] security_sid_to_context_core+0x1eb/0x2e0 [ 165.987855][T11403] security_sid_to_context+0x27/0x40 [ 165.987948][T11403] selinux_lsmprop_to_secctx+0x67/0xf0 [ 165.987986][T11403] security_lsmprop_to_secctx+0x43/0x80 [ 165.988013][T11403] audit_log_task_context+0x77/0x190 [ 165.988114][T11403] audit_log_task+0xf4/0x250 [ 165.988142][T11403] audit_seccomp+0x61/0x100 [ 165.988166][T11403] ? __seccomp_filter+0x68c/0x10d0 [ 165.988188][T11403] __seccomp_filter+0x69d/0x10d0 [ 165.988269][T11403] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.988295][T11403] ? vfs_write+0x7e8/0x960 [ 165.988329][T11403] __secure_computing+0x82/0x150 [ 165.988400][T11403] syscall_trace_enter+0xcf/0x1e0 [ 165.988464][T11403] do_syscall_64+0xac/0x200 [ 165.988503][T11403] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 165.988527][T11403] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 165.988552][T11403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.988574][T11403] RIP: 0033:0x7f8c2305ebe9 [ 165.988594][T11403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.988613][T11403] RSP: 002b:00007f8c21abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 165.988634][T11403] RAX: ffffffffffffffda RBX: 00007f8c23285fa0 RCX: 00007f8c2305ebe9 [ 165.988647][T11403] RDX: 0000000000000000 RSI: 0000000000000366 RDI: 00000000798e2633 [ 165.988660][T11403] RBP: 00007f8c21abf090 R08: 0000000000000000 R09: 0000000000000000 [ 165.988673][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.988685][T11403] R13: 00007f8c23286038 R14: 00007f8c23285fa0 R15: 00007ffc7821af38 [ 165.988761][T11403] [ 166.125418][T11411] loop2: detected capacity change from 0 to 2048 [ 166.255586][T11411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.289045][T11411] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.3024: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 166.325880][T11411] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 166.337660][T11422] loop5: detected capacity change from 0 to 512 [ 166.345801][T11424] loop3: detected capacity change from 0 to 736 [ 166.361876][T11424] iso9660: Unknown parameter 'sho÷assoc' [ 166.370214][T11422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.384380][T10576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.393620][T11422] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.438201][T11431] loop3: detected capacity change from 0 to 512 [ 166.448079][T11434] netlink: 'syz.2.3031': attribute type 11 has an invalid length. [ 166.473330][ T5508] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.484563][T11431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.500514][T11431] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.560573][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.600025][T11449] loop3: detected capacity change from 0 to 2048 [ 166.622407][T11449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.636539][T11449] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.3035: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 166.663368][T11449] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 166.664603][T11458] loop1: detected capacity change from 0 to 2368 [ 166.681540][T11458] iso9660: Bad value for 'check' [ 166.682061][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3039'. [ 166.701583][T11460] macvtap10: entered promiscuous mode [ 166.706993][T11460] ip6gretap0: entered promiscuous mode [ 166.712758][T11460] macvtap10: entered allmulticast mode [ 166.718301][T11460] ip6gretap0: entered allmulticast mode [ 166.725094][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.742574][T11460] ip6gretap0: left allmulticast mode [ 166.748003][T11460] ip6gretap0: left promiscuous mode [ 166.768550][T11471] loop3: detected capacity change from 0 to 736 [ 166.776216][T11471] iso9660: Unknown parameter 'sho÷assoc' [ 166.796062][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 166.796135][ T29] audit: type=1400 audit(1755910177.095:5233): avc: denied { mount } for pid=11467 comm="syz.1.3041" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 166.827935][ T29] audit: type=1400 audit(1755910177.095:5234): avc: denied { write } for pid=11467 comm="syz.1.3041" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.828626][T11475] loop5: detected capacity change from 0 to 512 [ 166.848843][ T29] audit: type=1400 audit(1755910177.095:5235): avc: denied { open } for pid=11467 comm="syz.1.3041" path="/588/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.877774][ T29] audit: type=1400 audit(1755910177.135:5236): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 166.903359][T11475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.916276][T11475] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.930317][T11480] loop3: detected capacity change from 0 to 512 [ 166.952255][T11480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.967422][T11480] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.983489][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3046'. [ 167.006830][ T5508] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.037757][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.056895][T11488] tipc: Started in network mode [ 167.061950][T11488] tipc: Node identity be4522deb107, cluster identity 4711 [ 167.069143][T11488] tipc: Enabled bearer , priority 0 [ 167.131734][T11504] loop1: detected capacity change from 0 to 2048 [ 167.144806][T11508] loop5: detected capacity change from 0 to 2368 [ 167.152348][T11508] iso9660: Bad value for 'check' [ 167.166734][ T29] audit: type=1400 audit(1755910177.465:5237): avc: denied { setopt } for pid=11509 comm="syz.0.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 167.198279][T11510] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 167.210900][T11504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.235413][ T29] audit: type=1326 audit(1755910177.535:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11515 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb704ecebe9 code=0x7ffc0000 [ 167.237498][T11504] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.3051: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 167.259133][ T29] audit: type=1326 audit(1755910177.535:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11515 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb704ecebe9 code=0x7ffc0000 [ 167.299052][ T29] audit: type=1326 audit(1755910177.535:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11515 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb704ecebe9 code=0x7ffc0000 [ 167.322658][ T29] audit: type=1326 audit(1755910177.535:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11515 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb704ecebe9 code=0x7ffc0000 [ 167.346510][ T29] audit: type=1326 audit(1755910177.535:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11515 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb704ecebe9 code=0x7ffc0000 [ 167.397081][T11504] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 167.438157][T11530] loop2: detected capacity change from 0 to 512 [ 167.448175][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.476762][T11530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.500847][T11530] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.551907][T10576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.597175][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'. [ 167.608218][T11558] loop2: detected capacity change from 0 to 512 [ 167.614577][T11557] FAULT_INJECTION: forcing a failure. [ 167.614577][T11557] name failslab, interval 1, probability 0, space 0, times 0 [ 167.627285][T11557] CPU: 0 UID: 0 PID: 11557 Comm: syz.3.3067 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.627315][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.627328][T11557] Call Trace: [ 167.627335][T11557] [ 167.627360][T11557] __dump_stack+0x1d/0x30 [ 167.627462][T11557] dump_stack_lvl+0xe8/0x140 [ 167.627483][T11557] dump_stack+0x15/0x1b [ 167.627501][T11557] should_fail_ex+0x265/0x280 [ 167.627525][T11557] should_failslab+0x8c/0xb0 [ 167.627563][T11557] kmem_cache_alloc_node_noprof+0x57/0x320 [ 167.627667][T11557] ? __alloc_skb+0x101/0x320 [ 167.627703][T11557] __alloc_skb+0x101/0x320 [ 167.627796][T11557] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 167.627821][T11557] ? dev_deactivate_many+0x1eb/0x730 [ 167.627897][T11557] rtmsg_ifinfo+0x6d/0x110 [ 167.627922][T11557] netif_close_many+0x14d/0x240 [ 167.627951][T11557] ? finish_task_switch+0xad/0x2b0 [ 167.628026][T11557] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 167.628051][T11557] unregister_netdevice_many_notify+0x437/0x15d0 [ 167.628079][T11557] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 167.628151][T11557] rtnl_dellink+0x3cb/0x550 [ 167.628199][T11557] ? selinux_capable+0x31/0x40 [ 167.628262][T11557] ? security_capable+0x83/0x90 [ 167.628284][T11557] ? ns_capable+0x7d/0xb0 [ 167.628306][T11557] ? __pfx_rtnl_dellink+0x10/0x10 [ 167.628398][T11557] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 167.628510][T11557] netlink_rcv_skb+0x123/0x220 [ 167.628537][T11557] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.628568][T11557] rtnetlink_rcv+0x1c/0x30 [ 167.628606][T11557] netlink_unicast+0x5bd/0x690 [ 167.628693][T11557] netlink_sendmsg+0x58b/0x6b0 [ 167.628720][T11557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.628745][T11557] __sock_sendmsg+0x145/0x180 [ 167.628845][T11557] ____sys_sendmsg+0x31e/0x4e0 [ 167.628870][T11557] ___sys_sendmsg+0x17b/0x1d0 [ 167.628909][T11557] __x64_sys_sendmsg+0xd4/0x160 [ 167.628976][T11557] x64_sys_call+0x191e/0x2ff0 [ 167.629048][T11557] do_syscall_64+0xd2/0x200 [ 167.629075][T11557] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.629102][T11557] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 167.629132][T11557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.629282][T11557] RIP: 0033:0x7fd8943eebe9 [ 167.629298][T11557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.629377][T11557] RSP: 002b:00007fd892e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.629420][T11557] RAX: ffffffffffffffda RBX: 00007fd894615fa0 RCX: 00007fd8943eebe9 [ 167.629433][T11557] RDX: 0000000000000840 RSI: 00002000000002c0 RDI: 0000000000000005 [ 167.629445][T11557] RBP: 00007fd892e57090 R08: 0000000000000000 R09: 0000000000000000 [ 167.629457][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.629468][T11557] R13: 00007fd894616038 R14: 00007fd894615fa0 R15: 00007fff80b85648 [ 167.629489][T11557] [ 167.635138][T11558] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.923124][T11558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.935482][T11558] EXT4-fs (loop2): 1 truncate cleaned up [ 167.945429][T11558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.050898][T11577] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 168.057460][T11577] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 168.065108][T11577] vhci_hcd vhci_hcd.0: Device attached [ 168.088945][ T1035] tipc: Node number set to 255992542 [ 168.218398][T11558] ================================================================== [ 168.226516][T11558] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 168.234752][T11558] [ 168.237061][T11558] write to 0xffff88811a44d844 of 4 bytes by task 11574 on cpu 1: [ 168.244762][T11558] xas_set_mark+0x12b/0x140 [ 168.249247][T11558] __folio_start_writeback+0x1dd/0x440 [ 168.254688][T11558] ext4_bio_write_folio+0x5ad/0x9f0 [ 168.259876][T11558] mpage_process_page_bufs+0x4a1/0x620 [ 168.265347][T11558] mpage_prepare_extent_to_map+0x786/0xc00 [ 168.271140][T11558] ext4_do_writepages+0xa05/0x2750 [ 168.276244][T11558] ext4_writepages+0x176/0x300 [ 168.280991][T11558] do_writepages+0x1c3/0x310 [ 168.285577][T11558] file_write_and_wait_range+0x156/0x2c0 [ 168.291282][T11558] generic_buffers_fsync_noflush+0x45/0x120 [ 168.297162][T11558] ext4_sync_file+0x1ab/0x690 [ 168.301823][T11558] vfs_fsync_range+0x10a/0x130 [ 168.306654][T11558] ext4_buffered_write_iter+0x34f/0x3c0 [ 168.312189][T11558] ext4_file_write_iter+0xdbf/0xf00 [ 168.317370][T11558] iter_file_splice_write+0x666/0xa60 [ 168.322826][T11558] direct_splice_actor+0x156/0x2a0 [ 168.327944][T11558] splice_direct_to_actor+0x312/0x680 [ 168.333311][T11558] do_splice_direct+0xda/0x150 [ 168.338070][T11558] do_sendfile+0x380/0x650 [ 168.342610][T11558] __x64_sys_sendfile64+0x105/0x150 [ 168.347810][T11558] x64_sys_call+0x2bb0/0x2ff0 [ 168.352468][T11558] do_syscall_64+0xd2/0x200 [ 168.356958][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.362827][T11558] [ 168.365132][T11558] read to 0xffff88811a44d844 of 4 bytes by task 11558 on cpu 0: [ 168.372743][T11558] filemap_write_and_wait_range+0xfc/0x340 [ 168.378537][T11558] filemap_invalidate_pages+0xa4/0x1a0 [ 168.383971][T11558] kiocb_invalidate_pages+0x6e/0x80 [ 168.389157][T11558] __iomap_dio_rw+0x5d4/0x1250 [ 168.393919][T11558] iomap_dio_rw+0x40/0x90 [ 168.398238][T11558] ext4_file_write_iter+0xad9/0xf00 [ 168.403442][T11558] iter_file_splice_write+0x666/0xa60 [ 168.408810][T11558] direct_splice_actor+0x156/0x2a0 [ 168.413899][T11558] splice_direct_to_actor+0x312/0x680 [ 168.419249][T11558] do_splice_direct+0xda/0x150 [ 168.423995][T11558] do_sendfile+0x380/0x650 [ 168.428402][T11558] __x64_sys_sendfile64+0x105/0x150 [ 168.433588][T11558] x64_sys_call+0x2bb0/0x2ff0 [ 168.438263][T11558] do_syscall_64+0xd2/0x200 [ 168.442754][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.448722][T11558] [ 168.451025][T11558] value changed: 0x0a000021 -> 0x04000021 [ 168.456714][T11558] [ 168.459016][T11558] Reported by Kernel Concurrency Sanitizer on: [ 168.465151][T11558] CPU: 0 UID: 0 PID: 11558 Comm: syz.2.3064 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.474954][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.485013][T11558] ================================================================== [ 168.518196][T10576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.820171][T11578] vhci_hcd: connection closed [ 168.820409][ T48] vhci_hcd: stop threads [ 168.829480][ T48] vhci_hcd: release socket [ 168.833929][ T48] vhci_hcd: disconnect device [ 169.018960][ T23] vhci_hcd: vhci_device speed not set