last executing test programs: 35.630735167s ago: executing program 2 (id=1422): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300e0d268f85d4c71b860609f690820000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 35.523412519s ago: executing program 2 (id=1425): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x208000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) syz_usbip_server_init(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f00000c1000/0x3000)=nil, &(0x7f00001b0000/0x4000)=nil, &(0x7f0000169000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000014000/0x3000)=nil, &(0x7f00000e4000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000eb000/0x3000)=nil, &(0x7f000005b000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000380)="6bd82fbf5703e19921bcffddd00cc26293e4beb63d2242d99963cccc8ebc696489eb220d584769862c71a82c8233c375909c6635f4a1cbac20c9eea0bd75da7e198ef9848d27f262820044904ced17750bdf3e2e17d527b251aecbdaa81dd41e9ea404db197364135f60006492d9597accb3d13ee527a68aaa34ed753b", 0x7d, r6}, 0x68) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='9p_client_res\x00', r6, 0x0, 0x9}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000000314010028bd7000fcdbdf250900020073797a320000000008004100736977001400330062726964676530000892eb626058dd3757682c5d4683f3ad7e12903486c1d733ff6ac0e7234880f1b98d6600"/98], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="08000000eb000000eeb64ef10f633d7907000000d88ad61d24a0531738e279515ab16845d51f94af59bdec32719fa190368658d4c2090054f5727ae51b5df9c1ae31315d19e6f619e634d7486b17eb5a26d175e3afb55578f34e2ce74fae546c4fd71e41999bd7ca3b61582f5f43a71df30097586c9ba0816af7557fe93d3c96d617f71a93ca10883c9188f63a0ca27366d047be8a689009c3745a5379a5d65a20ef1592dda8701c43debc19", @ANYRESOCT=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x81cd, 0x1, {0x2, 0x2, 0x8, 0x1, 0x2}, 0x4}) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) chmod(&(0x7f0000000040)='./file0\x00', 0x0) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) shutdown(r8, 0x1) 34.868252661s ago: executing program 2 (id=1442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) 34.782023613s ago: executing program 2 (id=1446): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) write(r2, &(0x7f0000000300)="2822874178a827c3b73a2780e2294b927edad0cfcdc9cdfa66dfb445d11bf9f7454be065218e7b15b2d7fc5d16dce59a0782847230886f2af40c746415d10b70fbcb37b1e0c993c0ed4028ff72e9ec39acf894264318142989e1dda23cb7b58ad97d67e836deddde08f3c3671d04beb22bb0e92e8c1326d8645f4792f28350d95070f96d3625b2688850a83aa8efbedfcecd1f92b0c696dcc16885d0768983bc6df541d3469c43e8ad2f6e55ee89f0ff55f266bce2af5f6897dc57636c3ab5884c5233a0ecddee7d16a6c2cc8e91e0f12ef4514d40aa793a1559", 0xda) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x100000}]) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) sendfile(0xffffffffffffffff, r2, &(0x7f00000000c0)=0x1, 0x7fffffffffffffff) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x60080, &(0x7f0000000180)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\\\\+'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, 'lo\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x62, 0x61, 0x35, 0x63, 0x32, 0x33], 0x2d, [0x33, 0x62, 0x34, 0xd73930550f8339bf], 0x2d, [0x66, 0x30, 0x3, 0x65], 0x2d, [0x36, 0x36, 0x35, 0x61], 0x2d, [0x35, 0x32, 0x30, 0x39, 0x33, 0x36, 0x37, 0x62]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x573, &(0x7f0000000c00)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r6, 0xfffffffffffffffc, 0x2) getdents(r6, 0x0, 0x54) fsmount(0xffffffffffffffff, 0x1, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@deltaction={0x188, 0x31, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffc00000}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2dc000}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8008081}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) fcntl$lock(r6, 0x24, &(0x7f0000000040)={0x2, 0x1, 0xffffffffffffffff, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r2, 0x0) 34.41689036s ago: executing program 2 (id=1450): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 34.211796944s ago: executing program 1 (id=1454): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x4, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c9", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 34.189080914s ago: executing program 1 (id=1455): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0x8, 0x4, 0x32f}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000003bb988442905069a00", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x202, 0x0) write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="8fc2198de8090000"], 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) fallocate(r2, 0x12, 0x8, 0x7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001200010022bd7000ffdbdf25ff020000000000000000000000000001000004b120f29018da02c9005d07350013020000a7d73a33b26aed3f1482af7dba05650053ea0818811652cd0588fc0fa50544b285c252c12db6142911d11e7184756b96709f6740d56da116cf9c30a3f10681395a805085623479c2b6a80bd950111255515253cf6bc10d41aa6c7418d8fdef7c1f9b27cbfb602438041cc1e21668294005b60a9be7a772"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) statx(0xffffffffffffff9c, 0x0, 0x0, 0xffff4a9c0080ffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffff1e0000abaaaaaaaabb86dd6000021000183afffe8000000000000000000000000000bbff02000000000000000000000000000188009078fc000000fc0200"/78], 0x0) r6 = socket(0x15, 0x5, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0xfffffffffffffffc]}, 0x69) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x5, 0x3}, {0xa, 0xd}, {0x7, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x2400c000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', r8, 0x7800, 0x1, 0xce, 0xd27, {{0x27, 0x4, 0x1, 0x2, 0x9c, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x6, [{@multicast1, 0xfffffffc}, {@multicast2, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x101}, {@private=0xa010101, 0x3}]}, @ssrr={0x89, 0x13, 0xce, [@remote, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x2}, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x0, 0x10, "691931b604cd8f26673e7bcd7785"}, {0x5, 0x5, "aa44b2"}, {0x4c73968277076575, 0xd, "3434d57c6cc79c0509eb88"}, {0x1, 0x3, 'W'}, {0x6, 0x3, "86"}, {0x0, 0xe, "1cb1fd187a418ac83e7610f9"}, {0x0, 0x2}, {0x6, 0x9, "dd99c4e293f571"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) mmap$usbfs(&(0x7f0000402000/0x3000)=nil, 0x3000, 0x5, 0x10, r7, 0x100000000) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x1000}}], 0x18}, 0x0) syz_clone3(&(0x7f0000001e80)={0x100, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f0000001e40)=[0x0], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 33.997933158s ago: executing program 2 (id=1456): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0x8, 0x4, 0x32f}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000003bb988442905069a00", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x202, 0x0) write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="8fc2198de809000000de"], 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) fallocate(r2, 0x12, 0x8, 0x7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001200010022bd7000ffdbdf25ff020000000000000000000000000001000004b120f29018da02c9005d07350013020000a7d73a33b26aed3f1482af7dba05650053ea0818811652cd0588fc0fa50544b285c252c12db6142911d11e7184756b96709f6740d56da116cf9c30a3f10681395a805085623479c2b6a80bd950111255515253cf6bc10d41aa6c7418d8fdef7c1f9b27cbfb602438041cc1e21668294005b60a9be7"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) statx(0xffffffffffffff9c, 0x0, 0x0, 0xffff4a9c0080ffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffff1e0000abaaaaaaaabb86dd6000021000183afffe8000000000000000000000000000bbff02000000000000000000000000000188009078fc000000fc0200"/78], 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2714, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0xfffffffffffffffc]}, 0x69) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x5, 0x3}, {0xa, 0xd}, {0x7, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x2400c000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', r8, 0x7800, 0x1, 0xce, 0xd27, {{0x27, 0x4, 0x1, 0x2, 0x9c, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x6, [{@multicast1, 0xfffffffc}, {@multicast2, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x101}, {@private=0xa010101, 0x3}]}, @ssrr={0x89, 0x13, 0xce, [@remote, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x2}, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x0, 0x10, "691931b604cd8f26673e7bcd7785"}, {0x5, 0x5, "aa44b2"}, {0x4c73968277076575, 0xd, "3434d57c6cc79c0509eb88"}, {0x1, 0x3, 'W'}, {0x6, 0x3, "86"}, {0x0, 0xe, "1cb1fd187a418ac83e7610f9"}, {0x0, 0x2}, {0x6, 0x9, "dd99c4e293f571"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) mmap$usbfs(&(0x7f0000402000/0x3000)=nil, 0x3000, 0x5, 0x10, r7, 0x100000000) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x1000}}], 0x18}, 0x0) syz_clone3(&(0x7f0000001e80)={0x100, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f0000001e40)=[0x0], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 33.991838408s ago: executing program 32 (id=1456): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0x8, 0x4, 0x32f}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000003bb988442905069a00", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x202, 0x0) write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="8fc2198de809000000de"], 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) fallocate(r2, 0x12, 0x8, 0x7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001200010022bd7000ffdbdf25ff020000000000000000000000000001000004b120f29018da02c9005d07350013020000a7d73a33b26aed3f1482af7dba05650053ea0818811652cd0588fc0fa50544b285c252c12db6142911d11e7184756b96709f6740d56da116cf9c30a3f10681395a805085623479c2b6a80bd950111255515253cf6bc10d41aa6c7418d8fdef7c1f9b27cbfb602438041cc1e21668294005b60a9be7"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) statx(0xffffffffffffff9c, 0x0, 0x0, 0xffff4a9c0080ffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffff1e0000abaaaaaaaabb86dd6000021000183afffe8000000000000000000000000000bbff02000000000000000000000000000188009078fc000000fc0200"/78], 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2714, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0xfffffffffffffffc]}, 0x69) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x5, 0x3}, {0xa, 0xd}, {0x7, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x2400c000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', r8, 0x7800, 0x1, 0xce, 0xd27, {{0x27, 0x4, 0x1, 0x2, 0x9c, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x6, [{@multicast1, 0xfffffffc}, {@multicast2, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x101}, {@private=0xa010101, 0x3}]}, @ssrr={0x89, 0x13, 0xce, [@remote, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x2}, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x0, 0x10, "691931b604cd8f26673e7bcd7785"}, {0x5, 0x5, "aa44b2"}, {0x4c73968277076575, 0xd, "3434d57c6cc79c0509eb88"}, {0x1, 0x3, 'W'}, {0x6, 0x3, "86"}, {0x0, 0xe, "1cb1fd187a418ac83e7610f9"}, {0x0, 0x2}, {0x6, 0x9, "dd99c4e293f571"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) mmap$usbfs(&(0x7f0000402000/0x3000)=nil, 0x3000, 0x5, 0x10, r7, 0x100000000) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x1000}}], 0x18}, 0x0) syz_clone3(&(0x7f0000001e80)={0x100, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f0000001e40)=[0x0], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 33.885937599s ago: executing program 1 (id=1461): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0x8, 0x4, 0x32f}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) fallocate(r2, 0x12, 0x8, 0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001200010022bd7000ffdbdf25ff020000000000000000000000000001000004b120f29018da02c9005d07350013020000a7d73a33b26aed3f1482af7dba05650053ea0818811652cd0588fc0fa50544b285c252c12db6142911d11e7184756b96709f6740d56da116cf9c30a3f10681395a805085623479c2b6a80bd950111255515253cf6bc10d41aa6c7418d8fdef7c1f9b27cbfb602438041cc1e21668294005b60a9be7a772"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) statx(0xffffffffffffff9c, 0x0, 0x0, 0xffff4a9c0080ffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffff1e0000abaaaaaaaabb86dd6000021000183afffe8000000000000000000000000000bbff02000000000000000000000000000188009078fc000000fc0200"/78], 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2714, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0xfffffffffffffffc]}, 0x69) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) mmap$usbfs(&(0x7f0000402000/0x3000)=nil, 0x3000, 0x5, 0x10, r6, 0x100000000) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x1000}}], 0x18}, 0x0) syz_clone3(&(0x7f0000001e80)={0x100, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f0000001e40)=[0x0], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 33.618549275s ago: executing program 1 (id=1466): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) write(r2, &(0x7f0000000300)="2822874178a827c3b73a2780e2294b927edad0cfcdc9cdfa66dfb445d11bf9f7454be065218e7b15b2d7fc5d16dce59a0782847230886f2af40c746415d10b70fbcb37b1e0c993c0ed4028ff72e9ec39acf894264318142989e1dda23cb7b58ad97d67e836deddde08f3c3671d04beb22bb0e92e8c1326d8645f4792f28350d95070f96d3625b2688850a83aa8efbedfcecd1f92b0c696dcc16885d0768983bc6df541d3469c43e8ad2f6e55ee89f0ff55f266bce2af5f6897dc57636c3ab5884c5233a0ecddee7d16a6c2cc8e91e0f12ef4514d40aa793a1559", 0xda) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x100000}]) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) sendfile(0xffffffffffffffff, r2, &(0x7f00000000c0)=0x1, 0x7fffffffffffffff) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x60080, &(0x7f0000000180)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\\\\+'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, 'lo\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x62, 0x61, 0x35, 0x63, 0x32, 0x33], 0x2d, [0x33, 0x62, 0x34, 0xd73930550f8339bf], 0x2d, [0x66, 0x30, 0x3, 0x65], 0x2d, [0x36, 0x36, 0x35, 0x61], 0x2d, [0x35, 0x32, 0x30, 0x39, 0x33, 0x36, 0x37, 0x62]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x573, &(0x7f0000000c00)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r6, 0xfffffffffffffffc, 0x2) getdents(r6, 0x0, 0x54) fsmount(0xffffffffffffffff, 0x1, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@deltaction={0x188, 0x31, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffc00000}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2dc000}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8008081}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) fcntl$lock(r6, 0x24, &(0x7f0000000040)={0x2, 0x1, 0xffffffffffffffff, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r2, 0x0) 33.218870572s ago: executing program 1 (id=1471): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0x8, 0x4, 0x32f}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000003bb988442905069a00", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x202, 0x0) write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="8fc2198de8090000"], 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) fallocate(r2, 0x12, 0x8, 0x7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001200010022bd7000ffdbdf25ff020000000000000000000000000001000004b120f29018da02c9005d07350013020000a7d73a33b26aed3f1482af7dba05650053ea0818811652cd0588fc0fa50544b285c252c12db6142911d11e7184756b96709f6740d56da116cf9c30a3f10681395a805085623479c2b6a80bd950111255515253cf6bc10d41aa6c7418d8fdef7c1f9b27cbfb602438041cc1e21668294005b60a9be7a772"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) statx(0xffffffffffffff9c, 0x0, 0x0, 0xffff4a9c0080ffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffff1e0000abaaaaaaaabb86dd6000021000183afffe8000000000000000000000000000bbff02000000000000000000000000000188009078fc000000fc0200"/78], 0x0) r6 = socket(0x15, 0x5, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0xfffffffffffffffc]}, 0x69) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x5, 0x3}, {0xa, 0xd}, {0x7, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x2400c000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', r8, 0x7800, 0x1, 0xce, 0xd27, {{0x27, 0x4, 0x1, 0x2, 0x9c, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x6, [{@multicast1, 0xfffffffc}, {@multicast2, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x101}, {@private=0xa010101, 0x3}]}, @ssrr={0x89, 0x13, 0xce, [@remote, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x2}, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x0, 0x10, "691931b604cd8f26673e7bcd7785"}, {0x5, 0x5, "aa44b2"}, {0x4c73968277076575, 0xd, "3434d57c6cc79c0509eb88"}, {0x1, 0x3, 'W'}, {0x6, 0x3, "86"}, {0x0, 0xe, "1cb1fd187a418ac83e7610f9"}, {0x0, 0x2}, {0x6, 0x9, "dd99c4e293f571"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) mmap$usbfs(&(0x7f0000402000/0x3000)=nil, 0x3000, 0x5, 0x10, r7, 0x100000000) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x1000}}], 0x18}, 0x0) syz_clone3(&(0x7f0000001e80)={0x100, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f0000001e40)=[0x0], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 32.523473525s ago: executing program 1 (id=1477): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b1, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b1, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0}, &(0x7f0000000100)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32, @ANYBLOB="279239dfffd1e0296fad41762e884e2900d219b06ccfb407785b215f7738693055267f171f279e0496f70dcb6b4e4438212d85840d968ae3164b874abe9358d34d85aa882fe16a1b25354f0716d2507f359e67825210eff0cd1c6565445935b3ed35d933d3c1bd9038ab1a3292ad63aa0a266b0d5d944e5618"], 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRESHEX=r7, @ANYRESDEC=r4, @ANYRESHEX, @ANYRES8=0x0, @ANYRES16=r8, @ANYRES64, @ANYBLOB="6b60ad06cdf42ee1374b27da79a91470f1ced3284fe26f4a15171f87bff59c7c0aee3efc58725c801557be2020417138e7f32ffa00c9b85251d2d59546d21455820d8b77b97ff2bf5ce9cf", @ANYBLOB="d87c78f1ab950ebdef29d87e63a7a00dad35817ea2357579bed327f403b35e6961df631217bb"], 0x64}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[@ANYRESHEX], 0x74}}, 0x4040001) sendmsg$netlink(r3, &(0x7f0000000780)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180300002c00020026bd7000fddbdf259601d58008008e001000000008006100", @ANYRES32=r5, @ANYBLOB="08005b000a010100db28e112d1bb30e3409aeef30b02c2b6eb8b85745e627ee51cc875095f87f235c0f59add7f3a60562703bacc425d5da4b19dc7be09915fd5c1c7b034351e17766943562b9b9181664b1c1bedc49f9b660e5b1a821170eb9e5774779e608beb354d6f7a4f78a00e239e3d501498765c17c61ba5a22f4457e73d8abfc3b067f4f297ad601128dea01690d7e169239823ae07e5570400a38008009a00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="a2ca11fa8eb26abc7efe9ca7ab4034e794c870a47e0cb7901ea2531c8bed8005c629dbc3d765aa31d68f02fcfb5ae4740ae8aa3a0078a6da349116078bf69d9502e38f9143145e01208c8d4ef4ac28f0f95f686dba8926edb4d8ef79e09d4a512e836d10f4413d3f08da088ee04f96e73ac08d245e934d94dfaa8e5745308bdd17cfdf7162409d6647a9c4a8bd1cbd4ad6a9379f073e3c6ee8b8fe1e6c546996b791269f83a370f082f6978a6563f62bd1e7a84c23fdef06147887889e16fe6332f06c3bc74894272490a1a9dde40db96c104c000008002500", @ANYRES32=r7, @ANYBLOB="96758d069f47d535a86ce99b6b22dd5bb37f06b3e6609bb77ac1a1d7fdbceefe45c0e05d6944ac55bcff039a2076537af7c06e66492d7d0f357300560f860800f700", @ANYRES32=r0, @ANYBLOB="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"], 0x318}, {&(0x7f0000000680)=ANY=[@ANYBLOB="6c0000003e0001002dbd7000fddbdf250c00dd007d000000000000004f2c694d01c62acbcf2a996ef1d26dd8b1cd600135a69bfd910ab2e7fd62c1c74108004300", @ANYRES32, @ANYBLOB="a619ee9a1ec3aedab69b28cb523836e832d43907a7c4467aed9ba1094c83afb467c4234e000000c21de4a29279523f43a314813f511a74a38d1fef584359f7c781bec3b526649e1dc47809e6f64bd38d8a36f0794dfc423194460df0bea7228ac58356ab11987afd7bfc7856dc1c"], 0x6c}, {&(0x7f0000000c00)=ANY=[@ANYBLOB="180000002e0000082dbd7000fcdbdf250800ff00", @ANYRES32=0x0, @ANYBLOB="27100aa509f22373c68f7bdf5a8952c67c9cdca39903f6e9525d5f6d35c53c48f1e155f099adfe4527002739d126c94ba17c85d3eea997b2ea2affa250a8800e1327b8118a33bcc411698dd467c5cc033c0c3e5c066c696424d763165d1cff4d8f05d66c1403a4915de83222282b5da5cde8a73c39c6392666933278026e1cb1faa75dec4709dbfc6edf5c5c15b7754edca022d822f49074444ac149059118184adbe473f861e3630ef9a8bc2443"], 0x18}], 0x3, 0x0, 0x0, 0x4000000}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101243, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000740)={'nicvf0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 32.002094465s ago: executing program 4 (id=1487): creat(0x0, 0x48) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB="2c6163636573733dbf", @ANYBLOB=',']) 31.971956315s ago: executing program 4 (id=1488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 31.905074627s ago: executing program 4 (id=1490): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) write(r0, &(0x7f0000000300)="2822874178a827c3b73a2780e2294b927edad0cfcdc9cdfa66dfb445d11bf9f7454be065218e7b15b2d7fc5d16dce59a0782847230886f2af40c746415d10b70fbcb37b1e0c993c0ed4028ff72e9ec39acf894264318142989e1dda23cb7b58ad97d67e836deddde08f3c3671d04beb22bb0e92e8c1326d8645f4792f28350d95070f96d3625b2688850a83aa8efbedfcecd1f92b0c696dcc16885d0768983bc6df541d3469c43e8ad2f6e55ee89f0ff55f266bce2af5f6897dc57636c3ab5884c5233a0ecddee7d16a6c2cc8e91e0f12ef4514d40aa793a1559", 0xda) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x100000}]) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0x1, 0x7fffffffffffffff) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x60080, &(0x7f0000000180)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\\\\+'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, 'lo\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x62, 0x61, 0x35, 0x63, 0x32, 0x33], 0x2d, [0x33, 0x62, 0x34, 0xd73930550f8339bf], 0x2d, [0x66, 0x30, 0x3, 0x65], 0x2d, [0x36, 0x36, 0x35, 0x61], 0x2d, [0x35, 0x32, 0x30, 0x39, 0x33, 0x36, 0x37, 0x62]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x573, &(0x7f0000000c00)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffffc, 0x2) getdents(r4, 0x0, 0x54) 31.680645611s ago: executing program 4 (id=1491): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r8, 0x1) 31.012794003s ago: executing program 4 (id=1496): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote, 0x4}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}, {0x40000000, &(0x7f0000000080)=0x40000000, 0x82}], 0x3, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x2, 0x40000000}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10, 0x11}}], 0x20}, 0x8000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000040)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 30.934427175s ago: executing program 34 (id=1496): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote, 0x4}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}, {0x40000000, &(0x7f0000000080)=0x40000000, 0x82}], 0x3, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x2, 0x40000000}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10, 0x11}}], 0x20}, 0x8000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000040)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 29.962145713s ago: executing program 5 (id=1457): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800400080039503230"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000000000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6163636573733dbf7a252a149c0530a3973138932141c203cd8fa919bcba4151c3a548fa5d94", @ANYRESDEC=0x0, @ANYBLOB=',']) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 29.886399544s ago: executing program 5 (id=1505): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r8, 0x1) 29.825811485s ago: executing program 5 (id=1506): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076652a68315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32, @ANYBLOB="279239dfffd1e0296fad41762e884e2900d219b06ccfb407785b215f7738693055267f171f279e0496f70dcb6b4e4438212d85840d968ae3164b874abe9358d34d85aa882fe16a1b25354f0716d2507f359e67825210eff0cd1c6565445935b3ed35d933d3c1bd9038ab1a3292ad63aa0a266b0d5d944e5618"], 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRESHEX=r7, @ANYRESDEC=r4, @ANYRESHEX, @ANYRES8=0x0, @ANYRES16=r8, @ANYRES64, @ANYBLOB="6b60ad06cdf42ee1374b27da79a91470f1ced3284fe26f4a15171f87bff59c7c0aee3efc58725c801557be2020417138e7f32ffa00c9b85251d2d59546d21455820d8b77b97ff2bf5ce9cf", @ANYBLOB="d87c78f1ab950ebdef29d87e63a7a00dad35817ea2357579bed327f403b35e6961df631217bb"], 0x64}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[@ANYRESHEX], 0x74}}, 0x4040001) sendmsg$netlink(r3, &(0x7f0000000780)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180300002c00020026bd7000fddbdf259601d58008008e001000000008006100", @ANYRES32=r5, @ANYBLOB="08005b000a010100db28e112d1bb30e3409aeef30b02c2b6eb8b85745e627ee51cc875095f87f235c0f59add7f3a60562703bacc425d5da4b19dc7be09915fd5c1c7b034351e17766943562b9b9181664b1c1bedc49f9b660e5b1a821170eb9e5774779e608beb354d6f7a4f78a00e239e3d501498765c17c61ba5a22f4457e73d8abfc3b067f4f297ad601128dea01690d7e169239823ae07e5570400a38008009a00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="a2ca11fa8eb26abc7efe9ca7ab4034e794c870a47e0cb7901ea2531c8bed8005c629dbc3d765aa31d68f02fcfb5ae4740ae8aa3a0078a6da349116078bf69d9502e38f9143145e01208c8d4ef4ac28f0f95f686dba8926edb4d8ef79e09d4a512e836d10f4413d3f08da088ee04f96e73ac08d245e934d94dfaa8e5745308bdd17cfdf7162409d6647a9c4a8bd1cbd4ad6a9379f073e3c6ee8b8fe1e6c546996b791269f83a370f082f6978a6563f62bd1e7a84c23fdef06147887889e16fe6332f06c3bc74894272490a1a9dde40db96c104c000008002500", @ANYRES32=r7, @ANYBLOB="96758d069f47d535a86ce99b6b22dd5bb37f06b3e6609bb77ac1a1d7fdbceefe45c0e05d6944ac55bcff039a2076537af7c06e66492d7d0f357300560f860800f700", @ANYRES32=r0, @ANYBLOB="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"], 0x318}, {&(0x7f0000000680)=ANY=[@ANYBLOB="6c0000003e0001002dbd7000fddbdf250c00dd007d000000000000004f2c694d01c62acbcf2a996ef1d26dd8b1cd600135a69bfd910ab2e7fd62c1c74108004300", @ANYRES32, @ANYBLOB="a619ee9a1ec3aedab69b28cb523836e832d43907a7c4467aed9ba1094c83afb467c4234e000000c21de4a29279523f43a314813f511a74a38d1fef584359f7c781bec3b526649e1dc47809e6f64bd38d8a36f0794dfc423194460df0bea7228ac58356ab11987afd7bfc7856dc1c"], 0x6c}, {&(0x7f0000000c00)=ANY=[@ANYBLOB="180000002e0000082dbd7000fcdbdf250800ff00", @ANYRES32=0x0, @ANYBLOB="27100aa509f22373c68f7bdf5a8952c67c9cdca39903f6e9525d5f6d35c53c48f1e155f099adfe4527002739d126c94ba17c85d3eea997b2ea2affa250a8800e1327b8118a33bcc411698dd467c5cc033c0c3e5c066c696424d763165d1cff4d8f05d66c1403a4915de83222282b5da5cde8a73c39c6392666933278026e1cb1faa75dec4709dbfc6edf5c5c15b7754edca022d822f49074444ac149059118184adbe473f861e3630ef9a8bc2443"], 0x18}], 0x3, 0x0, 0x0, 0x4000000}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101243, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000740)={'nicvf0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 29.650355108s ago: executing program 5 (id=1508): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) write(r0, &(0x7f0000000300)="2822874178a827c3b73a2780e2294b927edad0cfcdc9cdfa66dfb445d11bf9f7454be065218e7b15b2d7fc5d16dce59a0782847230886f2af40c746415d10b70fbcb37b1e0c993c0ed4028ff72e9ec39acf894264318142989e1dda23cb7b58ad97d67e836deddde08f3c3671d04beb22bb0e92e8c1326d8645f4792f28350d95070f96d3625b2688850a83aa8efbedfcecd1f92b0c696dcc16885d0768983bc6df541d3469c43e8ad2f6e55ee89f0ff55f266bce2af5f6897dc57636c3ab5884c5233a0ecddee7d16a6c2cc8e91e0f12ef4514d40aa793a1559", 0xda) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x100000}]) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0x1, 0x7fffffffffffffff) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x60080, &(0x7f0000000180)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\\\\+'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, 'lo\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x62, 0x61, 0x35, 0x63, 0x32, 0x33], 0x2d, [0x33, 0x62, 0x34, 0xd73930550f8339bf], 0x2d, [0x66, 0x30, 0x3, 0x65], 0x2d, [0x36, 0x36, 0x35, 0x61], 0x2d, [0x35, 0x32, 0x30, 0x39, 0x33, 0x36, 0x37, 0x62]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x573, &(0x7f0000000c00)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffffc, 0x2) getdents(r4, 0x0, 0x54) 29.094549948s ago: executing program 5 (id=1513): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800400080039503230"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000000000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6163636573733dbf7a252a149c0530a3973138932141c203cd8fa919bcba4151c3a548fa5d94", @ANYRESDEC=0x0, @ANYBLOB=',']) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 27.497518078s ago: executing program 5 (id=1537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x3, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2, 0x0, 0x0, 0x4}, 0x24000895) 27.485841558s ago: executing program 35 (id=1537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x3, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2, 0x0, 0x0, 0x4}, 0x24000895) 2.661638031s ago: executing program 8 (id=1986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/22, 0x12b, 0x16, 0x0, 0xfffffffb}, 0x28) mmap(&(0x7f00001bc000/0x1000)=nil, 0x1000, 0x0, 0x80010, r2, 0xe092c000) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080), 0xa8002, 0x0) statx(r5, &(0x7f00000010c0)='./bus\x00', 0x2000, 0x20, &(0x7f0000001100)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x6, 0x5004) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x8, 0xd215) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r8}, 0xe) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x1e) ioctl$TIOCGPTPEER(r9, 0x5441, 0x2) 1.683498509s ago: executing program 8 (id=1991): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) r3 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$P9_RWRITE(r0, &(0x7f0000000340)={0xb, 0x77, 0x2, 0x5}, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300e0d268f85d4c71b860609f690820000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.62550474s ago: executing program 7 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000401811", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.574824061s ago: executing program 7 (id=1995): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076652a68315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32, @ANYBLOB="279239dfffd1e0296fad41762e884e2900d219b06ccfb407785b215f7738693055267f171f279e0496f70dcb6b4e4438212d85840d968ae3164b874abe9358d34d85aa882fe16a1b25354f0716d2507f359e67825210eff0cd1c6565445935b3ed35d933d3c1bd9038ab1a3292ad63aa0a266b0d5d944e5618"], 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRESHEX=r7, @ANYRESDEC=r4, @ANYRESHEX, @ANYRES8=0x0, @ANYRES16=r8, @ANYRES64, @ANYBLOB="6b60ad06cdf42ee1374b27da79a91470f1ced3284fe26f4a15171f87bff59c7c0aee3efc58725c801557be2020417138e7f32ffa00c9b85251d2d59546d21455820d8b77b97ff2bf5ce9cf", @ANYBLOB="d87c78f1ab950ebdef29d87e63a7a00dad35817ea2357579bed327f403b35e6961df631217bb"], 0x64}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x74}}, 0x4040001) sendmsg$netlink(r3, &(0x7f0000000780)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180300002c00020026bd7000fddbdf259601d58008008e001000000008006100", @ANYRES32=r5, @ANYBLOB="08005b000a010100db28e112d1bb30e3409aeef30b02c2b6eb8b85745e627ee51cc875095f87f235c0f59add7f3a60562703bacc425d5da4b19dc7be09915fd5c1c7b034351e17766943562b9b9181664b1c1bedc49f9b660e5b1a821170eb9e5774779e608beb354d6f7a4f78a00e239e3d501498765c17c61ba5a22f4457e73d8abfc3b067f4f297ad601128dea01690d7e169239823ae07e5570400a38008009a00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="a2ca11fa8eb26abc7efe9ca7ab4034e794c870a47e0cb7901ea2531c8bed8005c629dbc3d765aa31d68f02fcfb5ae4740ae8aa3a0078a6da349116078bf69d9502e38f9143145e01208c8d4ef4ac28f0f95f686dba8926edb4d8ef79e09d4a512e836d10f4413d3f08da088ee04f96e73ac08d245e934d94dfaa8e5745308bdd17cfdf7162409d6647a9c4a8bd1cbd4ad6a9379f073e3c6ee8b8fe1e6c546996b791269f83a370f082f6978a6563f62bd1e7a84c23fdef06147887889e16fe6332f06c3bc74894272490a1a9dde40db96c104c000008002500", @ANYRES32=r7, @ANYBLOB="96758d069f47d535a86ce99b6b22dd5bb37f06b3e6609bb77ac1a1d7fdbceefe45c0e05d6944ac55bcff039a2076537af7c06e66492d7d0f357300560f860800f700", @ANYRES32=r0, @ANYBLOB="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"], 0x318}, {&(0x7f0000000680)=ANY=[@ANYBLOB="6c0000003e0001002dbd7000fddbdf250c00dd007d000000000000004f2c694d01c62acbcf2a996ef1d26dd8b1cd600135a69bfd910ab2e7fd62c1c74108004300", @ANYRES32, @ANYBLOB="a619ee9a1ec3aedab69b28cb523836e832d43907a7c4467aed9ba1094c83afb467c4234e000000c21de4a29279523f43a314813f511a74a38d1fef584359f7c781bec3b526649e1dc47809e6f64bd38d8a36f0794dfc423194460df0bea7228ac58356ab11987afd7bfc7856dc1c"], 0x6c}, {&(0x7f0000000c00)=ANY=[@ANYBLOB="180000002e0000082dbd7000fcdbdf250800ff00", @ANYRES32=0x0, @ANYBLOB="27100aa509f22373c68f7bdf5a8952c67c9cdca39903f6e9525d5f6d35c53c48f1e155f099adfe4527002739d126c94ba17c85d3eea997b2ea2affa250a8800e1327b8118a33bcc411698dd467c5cc033c0c3e5c066c696424d763165d1cff4d8f05d66c1403a4915de83222282b5da5cde8a73c39c6392666933278026e1cb1faa75dec4709dbfc6edf5c5c15b7754edca022d822f4907444"], 0x18}], 0x3, 0x0, 0x0, 0x4000000}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101243, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000740)={'nicvf0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 1.502844312s ago: executing program 0 (id=1998): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076652a68315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32, @ANYBLOB="279239dfffd1e0296fad41762e884e2900d219b06ccfb407785b215f7738693055267f171f279e0496f70dcb6b4e4438212d85840d968ae3164b874abe9358d34d85aa882fe16a1b25354f0716d2507f359e67825210eff0cd1c6565445935b3ed35d933d3c1bd9038ab1a3292ad63aa0a266b0d5d944e5618"], 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRESHEX=r7, @ANYRESDEC=r4, @ANYRESHEX, @ANYRES8=0x0, @ANYRES16=r8, @ANYRES64, @ANYBLOB="6b60ad06cdf42ee1374b27da79a91470f1ced3284fe26f4a15171f87bff59c7c0aee3efc58725c801557be2020417138e7f32ffa00c9b85251d2d59546d21455820d8b77b97ff2bf5ce9cf", @ANYBLOB="d87c78f1ab950ebdef29d87e63a7a00dad35817ea2357579bed327f403b35e6961df631217bb"], 0x64}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x74}}, 0x4040001) sendmsg$netlink(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180300002c00020026bd7000fddbdf259601d58008008e001000000008006100", @ANYRES32=r5, @ANYBLOB="08005b000a010100db28e112d1bb30e3409aeef30b02c2b6eb8b85745e627ee51cc875095f87f235c0f59add7f3a60562703bacc425d5da4b19dc7be09915fd5c1c7b034351e17766943562b9b9181664b1c1bedc49f9b660e5b1a821170eb9e5774779e608beb354d6f7a4f78a00e239e3d501498765c17c61ba5a22f4457e73d8abfc3b067f4f297ad601128dea01690d7e169239823ae07e5570400a38008009a00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="a2ca11fa8eb26abc7efe9ca7ab4034e794c870a47e0cb7901ea2531c8bed8005c629dbc3d765aa31d68f02fcfb5ae4740ae8aa3a0078a6da349116078bf69d9502e38f9143145e01208c8d4ef4ac28f0f95f686dba8926edb4d8ef79e09d4a512e836d10f4413d3f08da088ee04f96e73ac08d245e934d94dfaa8e5745308bdd17cfdf7162409d6647a9c4a8bd1cbd4ad6a9379f073e3c6ee8b8fe1e6c546996b791269f83a370f082f6978a6563f62bd1e7a84c23fdef06147887889e16fe6332f06c3bc74894272490a1a9dde40db96c104c000008002500", @ANYRES32=r7, @ANYBLOB="96758d069f47d535a86ce99b6b22dd5bb37f06b3e6609bb77ac1a1d7fdbceefe45c0e05d6944ac55bcff039a2076537af7c06e66492d7d0f357300560f860800f700", @ANYRES32=r0, @ANYBLOB="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"], 0x318}, {&(0x7f0000000680)=ANY=[@ANYBLOB="6c0000003e0001002dbd7000fddbdf250c00dd007d000000000000004f2c694d01c62acbcf2a996ef1d26dd8b1cd600135a69bfd910ab2e7fd62c1c74108004300", @ANYRES32, @ANYBLOB="a619ee9a1ec3aedab69b28cb523836e832d43907a7c4467aed9ba1094c83afb467c4234e000000c21de4a29279523f43a314813f511a74a38d1fef584359f7c781bec3b526649e1dc47809e6f64bd38d8a36f0794dfc423194460df0bea7228ac58356ab11987afd7bfc7856dc1c"], 0x6c}, {&(0x7f0000000c00)=ANY=[@ANYBLOB="180000002e0000082dbd7000fcdbdf250800ff00", @ANYRES32=0x0, @ANYBLOB="27100aa509f22373c68f7bdf5a8952c67c9cdca39903f6e9525d5f6d35c53c48f1e155f099adfe4527002739d126c94ba17c85d3eea997b2ea2affa250a8800e1327b8118a33bcc411698dd467c5cc033c0c3e5c066c696424d763165d1cff4d8f05d66c1403a4915de83222282b5da5cde8a73c39c6392666933278026e1cb1faa75dec4709dbfc6edf5c5c15b7754edca022d822f49074444ac149059118184adbe473f861e3630ef9a8bc2443"], 0x18}], 0x3, 0x0, 0x0, 0x4000000}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101243, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000740)={'nicvf0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 1.410559674s ago: executing program 7 (id=1999): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076652a68315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32, @ANYBLOB="279239dfffd1e0296fad41762e884e2900d219b06ccfb407785b215f7738693055267f171f279e0496f70dcb6b4e4438212d85840d968ae3164b874abe9358d34d85aa882fe16a1b25354f0716d2507f359e67825210eff0cd1c6565445935b3ed35d933d3c1bd9038ab1a3292ad63aa0a266b0d5d944e5618"], 0x28}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRES16=r4, @ANYRES64, @ANYBLOB="6b60ad06cdf42ee1374b27da79a91470f1ced3284fe26f4a15171f87bff59c7c0aee3efc58725c801557be2020417138e7f32ffa00c9b85251d2d59546d21455820d8b77b97ff2bf5ce9cf", @ANYBLOB="d87c78f1ab950ebdef29d87e63a7a00dad35817ea2357579bed327f403b35e6961df631217bb"], 0x64}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x74}}, 0x4040001) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.356969975s ago: executing program 0 (id=2001): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000000000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6163636573733dbf7a252a149c0530a3973138932141c203cd8fa919bcba4151c3a548fa5d94", @ANYRESDEC=0x0, @ANYBLOB=',']) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.287170127s ago: executing program 3 (id=2003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/22, 0x12b, 0x16, 0x0, 0xfffffffb}, 0x28) mmap(&(0x7f00001bc000/0x1000)=nil, 0x1000, 0x0, 0x80010, r2, 0xe092c000) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080), 0xa8002, 0x0) statx(r5, &(0x7f00000010c0)='./bus\x00', 0x2000, 0x20, &(0x7f0000001100)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x6, 0x5004) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x8, 0xd215) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r8}, 0xe) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x1e) ioctl$TIOCGPTPEER(r9, 0x5441, 0x2) 1.286382546s ago: executing program 7 (id=2004): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x208000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) syz_usbip_server_init(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f00000c1000/0x3000)=nil, &(0x7f00001b0000/0x4000)=nil, &(0x7f0000169000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000014000/0x3000)=nil, &(0x7f00000e4000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000eb000/0x3000)=nil, &(0x7f000005b000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000380)="6bd82fbf5703e19921bcffddd00cc26293e4beb63d2242d99963cccc8ebc696489eb220d584769862c71a82c8233c375909c6635f4a1cbac20c9eea0bd75da7e198ef9848d27f262820044904ced17750bdf3e2e17d527b251aecbdaa81dd41e9ea404db197364135f60006492d9597accb3d13ee527a68aaa34ed753b", 0x7d, r6}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='9p_client_res\x00', r6, 0x0, 0x9}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000000314010028bd7000fcdbdf250900020073797a320000000008004100736977001400330062726964676530000892eb626058dd3757682c5d4683f3ad7e12903486c1d733ff6ac0e7234880f1b98d6600"/98], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x81cd, 0x1, {0x2, 0x2, 0x8, 0x1, 0x2}, 0x4}) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) shutdown(r7, 0x1) 1.285727506s ago: executing program 0 (id=2005): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f00000003c0)=ANY=[]) 1.252711427s ago: executing program 8 (id=2006): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0x8, 0x4, 0x32f}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) fallocate(r2, 0x12, 0x8, 0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001200010022bd7000ffdbdf25ff020000000000000000000000000001000004b120f29018da02c9005d07350013020000a7d73a33b26aed3f1482af7dba05650053ea0818811652cd0588fc0fa50544b285c252c12db6142911d11e7184756b96709f6740d56da116cf9c30a3f10681395a805085623479c2b6a80bd950111255515253cf6bc10d41aa6c7418d8fdef7c1f9b27cbfb602438041cc1e21668294005b60a9be7a772"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0) statx(0xffffffffffffff9c, 0x0, 0x0, 0xffff4a9c0080ffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffff1e0000abaaaaaaaabb86dd6000021000183afffe8000000000000000000000000000bbff02000000000000000000000000000188009078fc000000fc0200"/78], 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2714, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0xfffffffffffffffc]}, 0x69) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', r7, 0x7800, 0x1, 0xce, 0xd27, {{0x26, 0x4, 0x1, 0x2, 0x98, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x6, [{@multicast1, 0xfffffffc}, {@multicast2, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x101}, {@private=0xa010101, 0x3}]}, @ssrr={0x89, 0x13, 0xce, [@remote, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x2}, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0x0, 0x10, "691931b604cd8f26673e7bcd7785"}, {0x5, 0x5, "aa44b2"}, {0x4c73968277076575, 0xd, "3434d57c6cc79c0509eb88"}, {0x1, 0x3, 'W'}, {0x6, 0x3, "86"}, {0x0, 0xe, "1cb1fd187a418ac83e7610f9"}, {0x6, 0x9, "dd99c4e293f571"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) mmap$usbfs(&(0x7f0000402000/0x3000)=nil, 0x3000, 0x5, 0x10, r6, 0x100000000) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x1000}}], 0x18}, 0x0) syz_clone3(&(0x7f0000001e80)={0x100, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f0000001e40)=[0x0], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 1.09944015s ago: executing program 6 (id=2009): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000000000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6163636573733dbf7a252a149c0530a3973138932141c203cd8fa919bcba4151c3a548fa5d94", @ANYRESDEC=0x0, @ANYBLOB=',']) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.06391952s ago: executing program 0 (id=2010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f00000004c0)='inode_switch_wbs\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000058da65fc32f53e000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "b4b95ac98b8b2cfa", "0c16d580e470d6c538e3b3e8fc345ee3a5bb93651b63b91ef5f06376253db737", 'f:;H', "c3961727092b454a"}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r4}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r5, @ANYRES8=r1, @ANYBLOB="c57133cae95155cd97bcef217697ce42228ff6939a9c08fb4fba499f1c70d79ad4b11c0fc0a60690723d58dd95e530d561385b2859924b02d8a9dcaa085174ea9151d97bf17c32ec9ad79f167521791f81c30ee149982f3228dfce6ae2cb86624899e23f87155b8a39d358c961449b48111e1a3d99dd445b96cd8d1c7b0b50ec419671ef49df05db7222a44e781ee0ebb3819b31677149e70fb3254ce4bc7a5545d3b03f23da530179d63f68484d0cb77d9c7cb65c6cb85a56ce830a7789328407e1b1902de1886ce398a3cef51217197cc7cb5d79", @ANYRES32, @ANYBLOB="0000000000000000000000ab14f346000000000000"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x52) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r6, &(0x7f00000007c0), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}]}, 0x11, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = memfd_secret(0x80000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r9, r8, 0x2e, 0x4608, @void}, 0x10) close_range(r9, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) setpgid(0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x224002, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x200000000000006}, 0x18) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) clock_getres(0x5, 0x0) 1.024746461s ago: executing program 6 (id=2011): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$P9_RWRITE(r0, &(0x7f0000000340)={0xb, 0x77, 0x2, 0x5}, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300e0d268f85d4c71b860609f690820000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 653.580118ms ago: executing program 6 (id=2012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 571.04174ms ago: executing program 7 (id=2013): socket$packet(0x11, 0x2, 0x300) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r0, 0x5}) 533.35881ms ago: executing program 6 (id=2014): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076652a68315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32, @ANYBLOB="279239dfffd1e0296fad41762e884e2900d219b06ccfb407785b215f7738693055267f171f279e0496f70dcb6b4e4438212d85840d968ae3164b874abe9358d34d85aa882fe16a1b25354f0716d2507f359e67825210eff0cd1c6565445935b3ed35d933d3c1bd9038ab1a3292ad63aa0a266b0d5d944e5618"], 0x28}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRES16=r4, @ANYRES64, @ANYBLOB="6b60ad06cdf42ee1374b27da79a91470f1ced3284fe26f4a15171f87bff59c7c0aee3efc58725c801557be2020417138e7f32ffa00c9b85251d2d59546d21455820d8b77b97ff2bf5ce9cf", @ANYBLOB="d87c78f1ab950ebdef29d87e63a7a00dad35817ea2357579bed327f403b35e6961df631217bb"], 0x64}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x74}}, 0x4040001) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 467.909062ms ago: executing program 7 (id=2015): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x208000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) syz_usbip_server_init(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f00000c1000/0x3000)=nil, &(0x7f00001b0000/0x4000)=nil, &(0x7f0000169000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000014000/0x3000)=nil, &(0x7f00000e4000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000eb000/0x3000)=nil, &(0x7f000005b000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000380)="6bd82fbf5703e19921bcffddd00cc26293e4beb63d2242d99963cccc8ebc696489eb220d584769862c71a82c8233c375909c6635f4a1cbac20c9eea0bd75da7e198ef9848d27f262820044904ced17750bdf3e2e17d527b251aecbdaa81dd41e9ea404db197364135f60006492d9597accb3d13ee527a68aaa34ed753b", 0x7d, r6}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='9p_client_res\x00', r6, 0x0, 0x9}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000000314010028bd7000fcdbdf250900020073797a320000000008004100736977001400330062726964676530000892eb626058dd3757682c5d4683f3ad7e12903486c1d733ff6ac0e7234880f1b98d6600"/98], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x81cd, 0x1, {0x2, 0x2, 0x8, 0x1, 0x2}, 0x4}) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) shutdown(r7, 0x1) 437.911102ms ago: executing program 0 (id=2016): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000000000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6163636573733dbf7a252a149c0530a3973138932141c203cd8fa919bcba4151c3a548fa5d94", @ANYRESDEC=0x0, @ANYBLOB=',']) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 382.544343ms ago: executing program 6 (id=2017): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) r3 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$P9_RWRITE(r0, &(0x7f0000000340)={0xb, 0x77, 0x2, 0x5}, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300e0d268f85d4c71b860609f690820000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 381.996064ms ago: executing program 3 (id=2018): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 353.139964ms ago: executing program 3 (id=2019): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0xffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = dup(0xffffffffffffffff) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="20354994909fc6e76148b69e635027536590b3b717879257f371b21670bc04d14f84e3144dfd34bd6e186b2d57baf1bb01c9e1b8d9967987ac4499a6393c00d90cf644650d178cec1160e074948eaf58a716bdf6ce9cab59a42321f13c1f8c370af9d75177307645219d7c6bfa47152ad21741d34fa08f926e471358d4a0049ace5ee0dc0dfd03bfc6dbeb35e5b976b70635785adbe10be5f3ee43dde8a5a7004741a0c53feb8e3a", @ANYRES16, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000000f3c, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 339.142945ms ago: executing program 8 (id=2020): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f00000003c0)=ANY=[]) 304.223855ms ago: executing program 8 (id=2021): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000040181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 285.988135ms ago: executing program 0 (id=2022): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x00') r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3E8exncQ4ccGfj7TJzO5EM1/vjD2zEwcwtMayH0nE7oj4NSJGG9mVBcYav+7cujLz560rM0nUam/8kdTL3b51ZaYoWvzdriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPvDB/KH9r7x1/bWZU9ff/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0Yplm/eaLz88UAbB2yqWq1Wu6/z5as14D8siUG3ABiM4oM+W/8WxxZNPe4KN19oLICyuO/kR+NKOdK8zEjL+rafxiLi1NW/vsiO2JznEAAAK3ybzX+ebjf/S6P5udD/8z2USkTcExF7I+JEROyLiHsj6mXvj4gHNlh/6ybJ6vlPeqOnwNYpm/89n+9trZz/FbO/qJTy3J56/CPJ6bPVuaP5a3IkRrZn+ckudXz30i+fdbrWPP/Ljqz+Yi6Yt+NGeXufgm3j5kcRB8rt4k+WdgKSiNgfEQd6rOPsk18d6nRt7fi76MM+U+3LiCca9/9qtMRfSLrvT078L6pzRyeKXrHaTz9fe71T/euKP/nncXaS3f+dEVF0sdXx76kkzfu1Cxuv49pvn3Zc0/TS/2enF6e3JW+uOPf+9OLixcmIbcmr9Xyl+fxUS7mp5fJZ/EcOtx//e2P5lTgYEVknfjAiHoqIh/O2PxIRj0bE4S7x//DiY+/0Hv/myuKfbfv+t9TpWu7/cmJbtJ5pnyid+/6bFZVWNhJ/dv+P11NH8jPZ/V8rrvW0q7feDAAAAP8+aUTsjiQdX0qn6fh443/498XOtDq/sPjU6fn3Lsw2viNQiZG0eNI12vQ8dDJf1hf5sZb8sfy58eelHfX8+Mx8dXbQwcOQ29Vh/Gd+Lw26dcCm830tGF7GPwwv4x+Gl/EPw6vN+N8xiHYAW6/d5/+HA2gHsPVaxr9tPxgi1v8wvMrW+zC0fP7DUFrYEWt/SV5CYlUi0ruiGRI9JtKI6FZm0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA//+edt38") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x8) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf00000000000005"]) syz_io_uring_setup(0x88c, &(0x7f0000000240)={0x0, 0xf1bd, 0x800, 0x2003, 0x277}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0xfffffffffffffff7) fchdir(r5) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r6, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r9, 0x301, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x420d5}, 0x850) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 280.329346ms ago: executing program 8 (id=2023): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x208000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) syz_usbip_server_init(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f00000c1000/0x3000)=nil, &(0x7f00001b0000/0x4000)=nil, &(0x7f0000169000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000014000/0x3000)=nil, &(0x7f00000e4000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000eb000/0x3000)=nil, &(0x7f000005b000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000380)="6bd82fbf5703e19921bcffddd00cc26293e4beb63d2242d99963cccc8ebc696489eb220d584769862c71a82c8233c375909c6635f4a1cbac20c9eea0bd75da7e198ef9848d27f262820044904ced17750bdf3e2e17d527b251aecbdaa81dd41e9ea404db197364135f60006492d9597accb3d13ee527a68aaa34ed753b", 0x7d, r6}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='9p_client_res\x00', r6, 0x0, 0x9}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000000314010028bd7000fcdbdf250900020073797a320000000008004100736977001400330062726964676530000892eb626058dd3757682c5d4683f3ad7e12903486c1d733ff6ac0e7234880f1b98d6600"/98], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x81cd, 0x1, {0x2, 0x2, 0x8, 0x1, 0x2}, 0x4}) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) shutdown(r7, 0x1) 261.658056ms ago: executing program 3 (id=2024): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x2, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="2593", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 226.654146ms ago: executing program 3 (id=2025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 145.942598ms ago: executing program 3 (id=2026): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000490000009500000000000000f9d6e9215869b08aefe83dbced"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000440)={{0x0, 0xa}, 'port0\x00', 0x41, 0x8, 0x9, 0x7, 0x9, 0x10000, 0x8, 0x0, 0x1, 0xbb}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010004b040000966ce0b200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e65766500000c00028008000200ac1414341400030067656e65766530"], 0x50}}, 0x80) 0s ago: executing program 6 (id=2027): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$P9_RWRITE(r0, &(0x7f0000000340)={0xb, 0x77, 0x2, 0x5}, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300e0d268f85d4c71b860609f690820000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): 053994][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.066110][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.076957][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.083619][ T9193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9193 comm=syz.6.1520 [ 91.103990][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.118549][ T9193] netlink: 'syz.6.1520': attribute type 4 has an invalid length. [ 91.130041][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.142133][ T9193] netlink: 'syz.6.1520': attribute type 4 has an invalid length. [ 91.156704][ T9193] FAULT_INJECTION: forcing a failure. [ 91.156704][ T9193] name failslab, interval 1, probability 0, space 0, times 0 [ 91.163484][ T9200] FAULT_INJECTION: forcing a failure. [ 91.163484][ T9200] name failslab, interval 1, probability 0, space 0, times 0 [ 91.169615][ T9193] CPU: 1 UID: 0 PID: 9193 Comm: syz.6.1520 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.169706][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.169742][ T9193] Call Trace: [ 91.169751][ T9193] [ 91.169835][ T9193] __dump_stack+0x1d/0x30 [ 91.169864][ T9193] dump_stack_lvl+0xe8/0x140 [ 91.169892][ T9193] dump_stack+0x15/0x1b [ 91.169979][ T9193] should_fail_ex+0x265/0x280 [ 91.170008][ T9193] ? rxrpc_lookup_local+0x2a3/0xc70 [ 91.170044][ T9193] should_failslab+0x8c/0xb0 [ 91.170082][ T9193] __kmalloc_cache_noprof+0x4c/0x320 [ 91.170138][ T9193] rxrpc_lookup_local+0x2a3/0xc70 [ 91.170182][ T9193] ? _raw_spin_unlock_bh+0x36/0x40 [ 91.170216][ T9193] ? lock_sock_nested+0x112/0x140 [ 91.170266][ T9193] rxrpc_sendmsg+0x2f3/0x590 [ 91.170376][ T9193] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 91.170413][ T9193] __sock_sendmsg+0x142/0x180 [ 91.170461][ T9193] ____sys_sendmsg+0x31e/0x4e0 [ 91.170561][ T9193] ___sys_sendmsg+0x17b/0x1d0 [ 91.170620][ T9193] __x64_sys_sendmsg+0xd4/0x160 [ 91.170665][ T9193] x64_sys_call+0x191e/0x2ff0 [ 91.170769][ T9193] do_syscall_64+0xd2/0x200 [ 91.170842][ T9193] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.170877][ T9193] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.170919][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.171034][ T9193] RIP: 0033:0x7f7dc555ec29 [ 91.171057][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.171082][ T9193] RSP: 002b:00007f7dc3fbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.171109][ T9193] RAX: ffffffffffffffda RBX: 00007f7dc57a5fa0 RCX: 00007f7dc555ec29 [ 91.171158][ T9193] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000e [ 91.171174][ T9193] RBP: 00007f7dc3fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 91.171268][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.171285][ T9193] R13: 00007f7dc57a6038 R14: 00007f7dc57a5fa0 R15: 00007fff4f3222e8 [ 91.171315][ T9193] [ 91.388084][ T9200] CPU: 0 UID: 0 PID: 9200 Comm: syz.0.1521 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.388109][ T9200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.388121][ T9200] Call Trace: [ 91.388127][ T9200] [ 91.388135][ T9200] __dump_stack+0x1d/0x30 [ 91.388154][ T9200] dump_stack_lvl+0xe8/0x140 [ 91.388243][ T9200] dump_stack+0x15/0x1b [ 91.388257][ T9200] should_fail_ex+0x265/0x280 [ 91.388279][ T9200] should_failslab+0x8c/0xb0 [ 91.388347][ T9200] kmem_cache_alloc_noprof+0x50/0x310 [ 91.388372][ T9200] ? skb_clone+0x151/0x1f0 [ 91.388396][ T9200] skb_clone+0x151/0x1f0 [ 91.388423][ T9200] __netlink_deliver_tap+0x2c9/0x500 [ 91.388451][ T9200] netlink_unicast+0x66b/0x690 [ 91.388483][ T9200] netlink_sendmsg+0x58b/0x6b0 [ 91.388540][ T9200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.388564][ T9200] __sock_sendmsg+0x142/0x180 [ 91.388594][ T9200] ____sys_sendmsg+0x31e/0x4e0 [ 91.388621][ T9200] ___sys_sendmsg+0x17b/0x1d0 [ 91.388673][ T9200] __x64_sys_sendmsg+0xd4/0x160 [ 91.388701][ T9200] x64_sys_call+0x191e/0x2ff0 [ 91.388720][ T9200] do_syscall_64+0xd2/0x200 [ 91.388769][ T9200] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.388857][ T9200] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.388884][ T9200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.388904][ T9200] RIP: 0033:0x7f31f1c4ec29 [ 91.388917][ T9200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.388940][ T9200] RSP: 002b:00007f31f06b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.388968][ T9200] RAX: ffffffffffffffda RBX: 00007f31f1e95fa0 RCX: 00007f31f1c4ec29 [ 91.388986][ T9200] RDX: 0000000006048800 RSI: 0000200000000080 RDI: 0000000000000005 [ 91.388999][ T9200] RBP: 00007f31f06b7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.389010][ T9200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.389029][ T9200] R13: 00007f31f1e96038 R14: 00007f31f1e95fa0 R15: 00007fff82259138 [ 91.389083][ T9200] [ 91.601271][ T9200] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.647035][ T9214] loop6: detected capacity change from 0 to 512 [ 91.655562][ T9200] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.674251][ T9214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.687787][ T9214] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.699954][ T9214] __nla_validate_parse: 3 callbacks suppressed [ 91.699970][ T9214] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1522'. [ 91.716431][ T9200] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.728796][ T9214] netlink: 'syz.6.1522': attribute type 2 has an invalid length. [ 91.742661][ T9214] netlink: 360 bytes leftover after parsing attributes in process `syz.6.1522'. [ 91.765872][ T8275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.788981][ T9228] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 91.795589][ T9228] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.803168][ T9228] vhci_hcd vhci_hcd.0: Device attached [ 91.812095][ T9228] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1524'. [ 91.826890][ T9200] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.842299][ T9228] siw: device registration error -23 [ 91.869372][ T9239] loop3: detected capacity change from 0 to 1024 [ 91.884874][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.890801][ T9239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.906131][ T9229] vhci_hcd: connection closed [ 91.906451][ T37] vhci_hcd: stop threads [ 91.906650][ T9239] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.911363][ T37] vhci_hcd: release socket [ 91.911376][ T37] vhci_hcd: disconnect device [ 91.920930][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.955379][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.976032][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.991825][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.020618][ T9263] loop3: detected capacity change from 0 to 2048 [ 92.061011][ T9263] loop3: p1 < > p4 [ 92.070514][ T9263] loop3: p4 size 8388608 extends beyond EOD, truncated [ 92.178263][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.238796][ T9288] loop7: detected capacity change from 0 to 164 [ 92.248740][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.266403][ T9288] iso9660: Unknown parameter '0x000000000000000018446744073709551615' [ 92.311017][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.340362][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.417285][ T9313] FAULT_INJECTION: forcing a failure. [ 92.417285][ T9313] name failslab, interval 1, probability 0, space 0, times 0 [ 92.430101][ T9313] CPU: 1 UID: 0 PID: 9313 Comm: syz.6.1542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.430153][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.430168][ T9313] Call Trace: [ 92.430207][ T9313] [ 92.430214][ T9313] __dump_stack+0x1d/0x30 [ 92.430235][ T9313] dump_stack_lvl+0xe8/0x140 [ 92.430254][ T9313] dump_stack+0x15/0x1b [ 92.430270][ T9313] should_fail_ex+0x265/0x280 [ 92.430347][ T9313] should_failslab+0x8c/0xb0 [ 92.430375][ T9313] __kmalloc_noprof+0xa5/0x3e0 [ 92.430406][ T9313] ? process_preds+0x2ce/0x2bb0 [ 92.430432][ T9313] process_preds+0x2ce/0x2bb0 [ 92.430455][ T9313] ? terminate_walk+0x27f/0x2a0 [ 92.430553][ T9313] ? path_openat+0x1bf8/0x2170 [ 92.430585][ T9313] ? avc_has_perm_noaudit+0x1b1/0x200 [ 92.430674][ T9313] ? should_fail_ex+0xdb/0x280 [ 92.430700][ T9313] ? ftrace_profile_set_filter+0xc2/0x1b0 [ 92.430734][ T9313] ? should_failslab+0x8c/0xb0 [ 92.430766][ T9313] ? __kmalloc_cache_noprof+0x189/0x320 [ 92.430806][ T9313] ftrace_profile_set_filter+0xff/0x1b0 [ 92.430834][ T9313] perf_ioctl+0x7b3/0x12e0 [ 92.430868][ T9313] ? ioctl_has_perm+0x289/0x2a0 [ 92.430922][ T9313] ? do_vfs_ioctl+0x866/0xe10 [ 92.430983][ T9313] ? selinux_file_ioctl+0x308/0x3a0 [ 92.431010][ T9313] ? __fget_files+0x184/0x1c0 [ 92.431104][ T9313] ? __pfx_perf_ioctl+0x10/0x10 [ 92.431184][ T9313] __se_sys_ioctl+0xce/0x140 [ 92.431206][ T9313] __x64_sys_ioctl+0x43/0x50 [ 92.431227][ T9313] x64_sys_call+0x1816/0x2ff0 [ 92.431248][ T9313] do_syscall_64+0xd2/0x200 [ 92.431286][ T9313] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.431453][ T9313] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 92.431540][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.431561][ T9313] RIP: 0033:0x7f7dc555ec29 [ 92.431582][ T9313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.431602][ T9313] RSP: 002b:00007f7dc3fbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.431626][ T9313] RAX: ffffffffffffffda RBX: 00007f7dc57a5fa0 RCX: 00007f7dc555ec29 [ 92.431640][ T9313] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000005 [ 92.431655][ T9313] RBP: 00007f7dc3fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 92.431766][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.431781][ T9313] R13: 00007f7dc57a6038 R14: 00007f7dc57a5fa0 R15: 00007fff4f3222e8 [ 92.431801][ T9313] [ 92.545918][ T9291] chnl_net:caif_netlink_parms(): no params data found [ 92.592884][ T9422] FAULT_INJECTION: forcing a failure. [ 92.592884][ T9422] name failslab, interval 1, probability 0, space 0, times 0 [ 92.696819][ T9422] CPU: 1 UID: 0 PID: 9422 Comm: syz.0.1541 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.696843][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.696854][ T9422] Call Trace: [ 92.696859][ T9422] [ 92.696866][ T9422] __dump_stack+0x1d/0x30 [ 92.696885][ T9422] dump_stack_lvl+0xe8/0x140 [ 92.696902][ T9422] dump_stack+0x15/0x1b [ 92.696915][ T9422] should_fail_ex+0x265/0x280 [ 92.697010][ T9422] should_failslab+0x8c/0xb0 [ 92.697109][ T9422] kmem_cache_alloc_node_noprof+0x57/0x320 [ 92.697147][ T9422] ? __alloc_skb+0x101/0x320 [ 92.697168][ T9422] __alloc_skb+0x101/0x320 [ 92.697188][ T9422] netlink_alloc_large_skb+0xba/0xf0 [ 92.697287][ T9422] netlink_sendmsg+0x3cf/0x6b0 [ 92.697349][ T9422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.697372][ T9422] __sock_sendmsg+0x142/0x180 [ 92.697401][ T9422] ____sys_sendmsg+0x31e/0x4e0 [ 92.697427][ T9422] ___sys_sendmsg+0x17b/0x1d0 [ 92.697477][ T9422] __x64_sys_sendmsg+0xd4/0x160 [ 92.697504][ T9422] x64_sys_call+0x191e/0x2ff0 [ 92.697523][ T9422] do_syscall_64+0xd2/0x200 [ 92.697550][ T9422] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.697605][ T9422] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 92.697687][ T9422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.697711][ T9422] RIP: 0033:0x7f31f1c4ec29 [ 92.697724][ T9422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.697740][ T9422] RSP: 002b:00007f31f0696038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.697756][ T9422] RAX: ffffffffffffffda RBX: 00007f31f1e96090 RCX: 00007f31f1c4ec29 [ 92.697829][ T9422] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 92.697839][ T9422] RBP: 00007f31f0696090 R08: 0000000000000000 R09: 0000000000000000 [ 92.697917][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.697928][ T9422] R13: 00007f31f1e96128 R14: 00007f31f1e96090 R15: 00007fff82259138 [ 92.697948][ T9422] [ 92.901252][ T12] bridge_slave_1: left allmulticast mode [ 92.907124][ T12] bridge_slave_1: left promiscuous mode [ 92.912928][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.922782][ T12] bridge_slave_0: left allmulticast mode [ 92.928686][ T12] bridge_slave_0: left promiscuous mode [ 92.934545][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.023674][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.041804][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.057783][ T12] bond0 (unregistering): Released all slaves [ 93.070940][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 93.080050][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1546'. [ 93.089055][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1546'. [ 93.098214][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1546'. [ 93.107315][ T9450] netlink: 'syz.3.1546': attribute type 6 has an invalid length. [ 93.116565][ T9460] FAULT_INJECTION: forcing a failure. [ 93.116565][ T9460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.129741][ T9460] CPU: 1 UID: 0 PID: 9460 Comm: syz.6.1547 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.129779][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.129792][ T9460] Call Trace: [ 93.129799][ T9460] [ 93.129808][ T9460] __dump_stack+0x1d/0x30 [ 93.129834][ T9460] dump_stack_lvl+0xe8/0x140 [ 93.129855][ T9460] dump_stack+0x15/0x1b [ 93.129954][ T9460] should_fail_ex+0x265/0x280 [ 93.130054][ T9460] should_fail+0xb/0x20 [ 93.130081][ T9460] should_fail_usercopy+0x1a/0x20 [ 93.130139][ T9460] _copy_from_user+0x1c/0xb0 [ 93.130173][ T9460] ___sys_sendmsg+0xc1/0x1d0 [ 93.130251][ T9460] __x64_sys_sendmsg+0xd4/0x160 [ 93.130327][ T9460] x64_sys_call+0x191e/0x2ff0 [ 93.130354][ T9460] do_syscall_64+0xd2/0x200 [ 93.130405][ T9460] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.130485][ T9460] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.130561][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.130581][ T9460] RIP: 0033:0x7f7dc555ec29 [ 93.130596][ T9460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.130630][ T9460] RSP: 002b:00007f7dc3f9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.130653][ T9460] RAX: ffffffffffffffda RBX: 00007f7dc57a6090 RCX: 00007f7dc555ec29 [ 93.130670][ T9460] RDX: 000000002400c040 RSI: 0000200000000240 RDI: 0000000000000009 [ 93.130686][ T9460] RBP: 00007f7dc3f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 93.130702][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.130718][ T9460] R13: 00007f7dc57a6128 R14: 00007f7dc57a6090 R15: 00007fff4f3222e8 [ 93.130740][ T9460] [ 93.132493][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1547'. [ 93.226505][ T9463] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 93.227876][ T9453] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1547'. [ 93.227898][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1547'. [ 93.340545][ T9453] netlink: 'syz.6.1547': attribute type 6 has an invalid length. [ 93.375218][ T12] hsr_slave_0: left promiscuous mode [ 93.381103][ T12] hsr_slave_1: left promiscuous mode [ 93.390598][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.398021][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.407395][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.407994][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 93.408071][ T29] audit: type=1400 audit(1758408812.676:14707): avc: denied { ioctl } for pid=9471 comm="syz.3.1551" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20413 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.414914][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.482896][ T12] veth1_macvtap: left promiscuous mode [ 93.488845][ T12] veth0_macvtap: left promiscuous mode [ 93.494633][ T12] veth1_vlan: left promiscuous mode [ 93.499976][ T12] veth0_vlan: left promiscuous mode [ 93.574260][ T9486] loop0: detected capacity change from 0 to 8192 [ 93.613994][ T12] team0 (unregistering): Port device team_slave_1 removed [ 93.625156][ T12] team0 (unregistering): Port device team_slave_0 removed [ 93.669195][ T9494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9494 comm=syz.7.1560 [ 93.698670][ T9494] netlink: 'syz.7.1560': attribute type 4 has an invalid length. [ 93.745923][ T9494] netlink: 'syz.7.1560': attribute type 4 has an invalid length. [ 93.763549][ T9291] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.770693][ T9291] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.778826][ T9530] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 93.788645][ T9291] bridge_slave_0: entered allmulticast mode [ 93.795236][ T9291] bridge_slave_0: entered promiscuous mode [ 93.809231][ T9291] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.816408][ T9291] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.825136][ T9291] bridge_slave_1: entered allmulticast mode [ 93.833062][ T9291] bridge_slave_1: entered promiscuous mode [ 93.839862][ T29] audit: type=1400 audit(1758408813.129:14708): avc: denied { read } for pid=9533 comm="syz.3.1564" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.863398][ T29] audit: type=1400 audit(1758408813.129:14709): avc: denied { open } for pid=9533 comm="syz.3.1564" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.868006][ T9535] loop3: detected capacity change from 0 to 2048 [ 93.887724][ T29] audit: type=1400 audit(1758408813.160:14710): avc: denied { write } for pid=9527 comm="syz.6.1562" name="config" dev="proc" ino=4026533187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 93.936329][ T9291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.955406][ T9291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.984571][ T9535] loop3: unable to read partition table [ 94.000382][ T9291] team0: Port device team_slave_0 added [ 94.006978][ T9291] team0: Port device team_slave_1 added [ 94.020491][ T9535] loop3: partition table beyond EOD, truncated [ 94.026869][ T9535] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 94.065465][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.072565][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.098729][ T9291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.110584][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.117633][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.143639][ T9291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.181684][ T9638] FAULT_INJECTION: forcing a failure. [ 94.181684][ T9638] name failslab, interval 1, probability 0, space 0, times 0 [ 94.194392][ T9638] CPU: 0 UID: 0 PID: 9638 Comm: syz.3.1570 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.194421][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.194433][ T9638] Call Trace: [ 94.194439][ T9638] [ 94.194522][ T9638] __dump_stack+0x1d/0x30 [ 94.194565][ T9638] dump_stack_lvl+0xe8/0x140 [ 94.194591][ T9638] dump_stack+0x15/0x1b [ 94.194611][ T9638] should_fail_ex+0x265/0x280 [ 94.194642][ T9638] should_failslab+0x8c/0xb0 [ 94.194674][ T9638] kmem_cache_alloc_noprof+0x50/0x310 [ 94.194746][ T9638] ? getname_flags+0x80/0x3b0 [ 94.194801][ T9638] getname_flags+0x80/0x3b0 [ 94.194839][ T9638] do_sys_openat2+0x60/0x110 [ 94.194877][ T9638] __x64_sys_openat+0xf2/0x120 [ 94.194940][ T9638] x64_sys_call+0x2e9c/0x2ff0 [ 94.194966][ T9638] do_syscall_64+0xd2/0x200 [ 94.195006][ T9638] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.195049][ T9638] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.195087][ T9638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.195112][ T9638] RIP: 0033:0x7fb57807d590 [ 94.195131][ T9638] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 94.195206][ T9638] RSP: 002b:00007fb576ae6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 94.195230][ T9638] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb57807d590 [ 94.195287][ T9638] RDX: 0000000000000002 RSI: 00007fb576ae6fa0 RDI: 00000000ffffff9c [ 94.195303][ T9638] RBP: 00007fb576ae6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 94.195318][ T9638] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 94.195333][ T9638] R13: 00007fb5782c6038 R14: 00007fb5782c5fa0 R15: 00007ffc0f59d1d8 [ 94.195357][ T9638] [ 94.392698][ T9291] hsr_slave_0: entered promiscuous mode [ 94.399539][ T9291] hsr_slave_1: entered promiscuous mode [ 94.405953][ T9291] debugfs: 'hsr0' already exists in 'hsr' [ 94.411721][ T9291] Cannot create hsr debugfs directory [ 94.443562][ T29] audit: type=1400 audit(1758408813.761:14711): avc: denied { write } for pid=9667 comm="syz.3.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.487284][ T9678] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 94.553551][ T9731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9731 comm=syz.6.1577 [ 94.570909][ T29] audit: type=1400 audit(1758408813.898:14712): avc: denied { read } for pid=9730 comm="syz.6.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.614739][ T29] audit: type=1400 audit(1758408813.940:14713): avc: denied { relabelfrom } for pid=9732 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 94.626121][ T9291] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 94.634317][ T29] audit: type=1400 audit(1758408813.940:14714): avc: denied { relabelto } for pid=9732 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 94.664273][ T9756] netlink: 'syz.6.1577': attribute type 4 has an invalid length. [ 94.676054][ T9291] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 94.688433][ T9291] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 94.688637][ T9756] netlink: 'syz.6.1577': attribute type 4 has an invalid length. [ 94.713755][ T9291] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 94.789492][ T9291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.803886][ T9780] batadv0: entered promiscuous mode [ 94.809449][ T9780] macvtap1: entered promiscuous mode [ 94.816221][ T9780] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 94.825200][ T9780] batadv0: left promiscuous mode [ 94.834401][ T29] audit: type=1400 audit(1758408814.182:14715): avc: denied { setattr } for pid=9766 comm="syz.3.1582" name="PACKET" dev="sockfs" ino=21379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.869907][ T9291] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.881507][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.888767][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.911755][ T9291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.922276][ T9291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.948412][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.955528][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.012290][ T9291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.021950][ T9799] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 95.176565][ T9291] veth0_vlan: entered promiscuous mode [ 95.186780][ T9291] veth1_vlan: entered promiscuous mode [ 95.217499][ T9291] veth0_macvtap: entered promiscuous mode [ 95.273307][ T9291] veth1_macvtap: entered promiscuous mode [ 95.284555][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.288559][ T9830] loop0: detected capacity change from 0 to 512 [ 95.293683][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.306397][ T9830] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.313598][ T9830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.325050][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.339461][ T9830] EXT4-fs (loop0): 1 truncate cleaned up [ 95.344387][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.355468][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.357821][ T9830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.375117][ T58] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.402677][ T29] audit: type=1326 audit(1758408814.772:14716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9836 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 95.449112][ T9842] 9pnet_fd: Insufficient options for proto=fd [ 95.472563][ T9844] FAULT_INJECTION: forcing a failure. [ 95.472563][ T9844] name failslab, interval 1, probability 0, space 0, times 0 [ 95.485417][ T9844] CPU: 0 UID: 0 PID: 9844 Comm: syz.8.1597 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.485459][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.485476][ T9844] Call Trace: [ 95.485483][ T9844] [ 95.485493][ T9844] __dump_stack+0x1d/0x30 [ 95.485518][ T9844] dump_stack_lvl+0xe8/0x140 [ 95.485575][ T9844] dump_stack+0x15/0x1b [ 95.485591][ T9844] should_fail_ex+0x265/0x280 [ 95.485619][ T9844] ? nfnetlink_rcv+0x53d/0x1690 [ 95.485642][ T9844] should_failslab+0x8c/0xb0 [ 95.485671][ T9844] __kmalloc_cache_noprof+0x4c/0x320 [ 95.485765][ T9844] nfnetlink_rcv+0x53d/0x1690 [ 95.485791][ T9844] ? nlmon_xmit+0x4f/0x60 [ 95.485834][ T9844] ? __dev_queue_xmit+0x1200/0x2000 [ 95.485867][ T9844] ? __dev_queue_xmit+0x182/0x2000 [ 95.485919][ T9844] ? ref_tracker_free+0x37d/0x3e0 [ 95.485964][ T9844] netlink_unicast+0x5bd/0x690 [ 95.485993][ T9844] netlink_sendmsg+0x58b/0x6b0 [ 95.486021][ T9844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.486076][ T9844] __sock_sendmsg+0x142/0x180 [ 95.486119][ T9844] ____sys_sendmsg+0x31e/0x4e0 [ 95.486158][ T9844] ___sys_sendmsg+0x17b/0x1d0 [ 95.486256][ T9844] __x64_sys_sendmsg+0xd4/0x160 [ 95.486296][ T9844] x64_sys_call+0x191e/0x2ff0 [ 95.486321][ T9844] do_syscall_64+0xd2/0x200 [ 95.486463][ T9844] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.486557][ T9844] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 95.486662][ T9844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.486689][ T9844] RIP: 0033:0x7fe72ca5ec29 [ 95.486708][ T9844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.486791][ T9844] RSP: 002b:00007fe72b4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.486814][ T9844] RAX: ffffffffffffffda RBX: 00007fe72cca5fa0 RCX: 00007fe72ca5ec29 [ 95.486848][ T9844] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 95.486904][ T9844] RBP: 00007fe72b4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.486917][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.486930][ T9844] R13: 00007fe72cca6038 R14: 00007fe72cca5fa0 R15: 00007ffef3ed14d8 [ 95.486956][ T9844] [ 95.812535][ T9857] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 96.056574][ T9876] IPv6: Can't replace route, no match found [ 96.150029][ T9871] process 'syz.3.1605' launched '/dev/fd/9' with NULL argv: empty string added [ 96.207767][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.285179][ T9896] loop6: detected capacity change from 0 to 1024 [ 96.300037][ T9896] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.306612][ T9896] EXT4-fs: Ignoring removed bh option [ 96.307034][ T9913] batadv0: entered promiscuous mode [ 96.323428][ T9913] macvtap1: entered promiscuous mode [ 96.326596][ T9920] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 96.332230][ T9913] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 96.354548][ T9896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.377845][ T9896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.398897][ T9913] batadv0: left promiscuous mode [ 96.831393][ T9959] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 96.858458][ T9961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.866057][ T9961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.897962][ T9959] SELinux: failed to load policy [ 96.930270][ T9961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.937781][ T9961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.181558][ T9975] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 97.222922][ T9974] loop8: detected capacity change from 0 to 1024 [ 97.248319][ T9974] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.254874][ T9974] EXT4-fs: Ignoring removed bh option [ 97.305430][ T9984] netlink: 'syz.0.1633': attribute type 2 has an invalid length. [ 97.308451][ T9974] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.347404][ T9984] __nla_validate_parse: 9 callbacks suppressed [ 97.347418][ T9984] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 97.362647][ T9974] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.366609][ T9984] netem: change failed [ 97.388821][ T9999] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 97.395472][ T9999] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.403006][ T9999] vhci_hcd vhci_hcd.0: Device attached [ 97.418810][ T9999] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1637'. [ 97.488652][T10001] vhci_hcd: connection closed [ 97.488888][ T3450] vhci_hcd: stop threads [ 97.498173][ T3450] vhci_hcd: release socket [ 97.502779][ T3450] vhci_hcd: disconnect device [ 97.516109][T10023] loop8: detected capacity change from 0 to 512 [ 97.523757][T10023] EXT4-fs: Ignoring removed oldalloc option [ 97.535339][T10023] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 97.546647][T10023] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.561204][T10023] EXT4-fs (loop8): 1 truncate cleaned up [ 97.572008][T10023] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.072769][T10060] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 98.211763][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 98.211778][ T29] audit: type=1400 audit(1758408817.730:15137): avc: denied { ioctl } for pid=10062 comm="syz.3.1648" path="socket:[22165]" dev="sockfs" ino=22165 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.335039][T10022] syz.8.1644 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 98.346237][T10022] CPU: 1 UID: 0 PID: 10022 Comm: syz.8.1644 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.346272][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.346337][T10022] Call Trace: [ 98.346345][T10022] [ 98.346354][T10022] __dump_stack+0x1d/0x30 [ 98.346381][T10022] dump_stack_lvl+0xe8/0x140 [ 98.346406][T10022] dump_stack+0x15/0x1b [ 98.346471][T10022] dump_header+0x81/0x220 [ 98.346508][T10022] oom_kill_process+0x342/0x400 [ 98.346551][T10022] out_of_memory+0x979/0xb80 [ 98.346622][T10022] try_charge_memcg+0x5e6/0x9e0 [ 98.346658][T10022] charge_memcg+0x51/0xc0 [ 98.346676][T10022] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 98.346700][T10022] __read_swap_cache_async+0x1df/0x350 [ 98.346773][T10022] swap_cluster_readahead+0x277/0x3e0 [ 98.346956][T10022] swapin_readahead+0xde/0x6f0 [ 98.347031][T10022] ? __filemap_get_folio+0x4f7/0x6b0 [ 98.347050][T10022] ? bpf_perf_event_read+0x129/0x150 [ 98.347092][T10022] ? swap_cache_get_folio+0x77/0x200 [ 98.347135][T10022] do_swap_page+0x301/0x2430 [ 98.347214][T10022] ? finish_task_switch+0xad/0x2b0 [ 98.347319][T10022] ? __pfx_default_wake_function+0x10/0x10 [ 98.347350][T10022] handle_mm_fault+0x9a5/0x2c20 [ 98.347474][T10022] do_user_addr_fault+0x636/0x1090 [ 98.347560][T10022] ? fpregs_restore_userregs+0xad/0x1d0 [ 98.347597][T10022] ? switch_fpu_return+0xe/0x20 [ 98.347675][T10022] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.347716][T10022] exc_page_fault+0x62/0xa0 [ 98.347773][T10022] asm_exc_page_fault+0x26/0x30 [ 98.347798][T10022] RIP: 0033:0x7fe72ca91493 [ 98.347817][T10022] Code: f6 08 00 48 8d 3d b6 f6 08 00 e8 e8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d be 70 1e 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 98.347841][T10022] RSP: 002b:00007ffef3ed15f8 EFLAGS: 00010293 [ 98.347860][T10022] RAX: 00000000fffffffa RBX: 00007fe72cca5fa0 RCX: 0000000000000000 [ 98.347881][T10022] RDX: 00007ffef3ed1610 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.347896][T10022] RBP: 00007fe72cca7da0 R08: 0000000019207434 R09: 7fffffffffffffff [ 98.347912][T10022] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000018c39 [ 98.347978][T10022] R13: 00007ffef3ed1730 R14: ffffffffffffffff R15: 00007ffef3ed1750 [ 98.348003][T10022] [ 98.572369][T10022] memory: usage 307200kB, limit 307200kB, failcnt 169 [ 98.579444][T10022] memory+swap: usage 307628kB, limit 9007199254740988kB, failcnt 0 [ 98.587517][T10022] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 98.594837][T10022] Memory cgroup stats for /syz8: [ 98.602239][T10022] cache 20480 [ 98.610626][T10022] rss 0 [ 98.613483][T10022] shmem 0 [ 98.616443][T10022] mapped_file 0 [ 98.620013][T10022] dirty 0 [ 98.623025][T10022] writeback 24576 [ 98.626729][T10022] workingset_refault_anon 34 [ 98.631328][T10022] workingset_refault_file 0 [ 98.635938][T10022] swap 438272 [ 98.639230][T10022] swapcached 24576 [ 98.640003][T10071] loop7: detected capacity change from 0 to 1024 [ 98.642997][T10022] pgpgin 6436 [ 98.643006][T10022] pgpgout 6425 [ 98.643021][T10022] pgfault 7154 [ 98.643029][T10022] pgmajfault 19 [ 98.650298][ T29] audit: type=1326 audit(1758408818.162:15138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 98.652694][T10022] inactive_anon 24576 [ 98.656074][ T29] audit: type=1326 audit(1758408818.162:15139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 98.659440][T10022] active_anon 0 [ 98.659451][T10022] inactive_file 8192 [ 98.662953][ T29] audit: type=1326 audit(1758408818.162:15140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 98.663004][ T29] audit: type=1326 audit(1758408818.162:15141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 98.686724][T10022] active_file 12288 [ 98.690610][ T29] audit: type=1326 audit(1758408818.173:15142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 98.690705][ T29] audit: type=1326 audit(1758408818.173:15143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 98.714283][T10022] unevictable 0 [ 98.717767][ T29] audit: type=1326 audit(1758408818.173:15144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 98.721660][T10022] hierarchical_memory_limit 314572800 [ 98.721673][T10022] hierarchical_memsw_limit 9223372036854771712 [ 98.721682][T10022] total_cache 20480 [ 98.721689][T10022] total_rss 0 [ 98.745228][ T29] audit: type=1326 audit(1758408818.183:15145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 98.768808][T10022] total_shmem 0 [ 98.768820][T10022] total_mapped_file 0 [ 98.768830][T10022] total_dirty 0 [ 98.772645][ T29] audit: type=1326 audit(1758408818.183:15146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.7.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 98.783489][T10071] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.796236][T10022] total_writeback 24576 [ 98.819899][T10071] EXT4-fs: Ignoring removed bh option [ 98.823284][T10022] total_workingset_refault_anon 34 [ 98.823296][T10022] total_workingset_refault_file 0 [ 98.823307][T10022] total_swap 438272 [ 98.953890][T10022] total_swapcached 24576 [ 98.958184][T10022] total_pgpgin 6436 [ 98.962049][T10022] total_pgpgout 6425 [ 98.966176][T10022] total_pgfault 7154 [ 98.970089][T10022] total_pgmajfault 19 [ 98.971906][T10071] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.974090][T10022] total_inactive_anon 24576 [ 98.974101][T10022] total_active_anon 0 [ 98.974110][T10022] total_inactive_file 8192 [ 98.974120][T10022] total_active_file 12288 [ 98.974178][T10022] total_unevictable 0 [ 99.008020][T10022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1644,pid=10022,uid=0 [ 99.022750][T10022] Memory cgroup out of memory: Killed process 10022 (syz.8.1644) total-vm:93892kB, anon-rss:1072kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 99.059370][T10079] loop0: detected capacity change from 0 to 512 [ 99.067777][T10071] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.079505][T10079] EXT4-fs: Ignoring removed oldalloc option [ 99.107579][T10079] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.1652: Parent and EA inode have the same ino 15 [ 99.145140][T10079] EXT4-fs (loop0): 1 orphan inode deleted [ 99.151669][T10079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.214737][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.271291][T10096] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 99.277865][T10096] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.285332][T10096] vhci_hcd vhci_hcd.0: Device attached [ 99.347389][T10096] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1655'. [ 99.361356][T10096] siw: device registration error -23 [ 99.397367][T10023] syz.8.1644 (10023) used greatest stack depth: 7096 bytes left [ 99.407021][ T9291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.438383][T10097] vhci_hcd: connection closed [ 99.439168][ T51] vhci_hcd: stop threads [ 99.448395][ T51] vhci_hcd: release socket [ 99.452850][ T51] vhci_hcd: disconnect device [ 99.459112][T10108] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 99.467768][ T23] vhci_hcd: vhci_device speed not set [ 99.532849][T10117] batadv0: entered promiscuous mode [ 99.538678][T10117] macvtap1: entered promiscuous mode [ 99.545176][T10117] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 99.554051][T10117] batadv0: left promiscuous mode [ 99.598487][T10129] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 99.605201][T10129] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.612692][T10129] vhci_hcd vhci_hcd.0: Device attached [ 99.620398][T10129] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1664'. [ 99.633889][T10129] siw: device registration error -23 [ 99.660298][T10133] loop7: detected capacity change from 0 to 1024 [ 99.667315][T10133] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.673829][T10133] EXT4-fs: Ignoring removed bh option [ 99.689229][T10133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.704246][T10130] vhci_hcd: connection closed [ 99.704533][ T3450] vhci_hcd: stop threads [ 99.704813][T10133] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.709322][ T3450] vhci_hcd: release socket [ 99.709335][ T3450] vhci_hcd: disconnect device [ 99.759553][T10142] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 99.766095][T10142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.773581][T10142] vhci_hcd vhci_hcd.0: Device attached [ 99.782450][T10142] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1666'. [ 99.798398][T10142] siw: device registration error -23 [ 99.861865][T10143] vhci_hcd: connection closed [ 99.862150][ T3450] vhci_hcd: stop threads [ 99.871286][ T3450] vhci_hcd: release socket [ 99.875711][ T3450] vhci_hcd: disconnect device [ 100.295051][T10163] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 100.373631][T10169] batadv0: entered promiscuous mode [ 100.379371][T10169] macvtap1: entered promiscuous mode [ 100.385868][T10169] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 100.397869][T10169] batadv0: left promiscuous mode [ 100.425319][T10175] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 100.431990][T10175] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.439572][T10175] vhci_hcd vhci_hcd.0: Device attached [ 100.449971][T10175] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1678'. [ 100.509096][T10207] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1681'. [ 100.524118][T10207] loop8: detected capacity change from 0 to 512 [ 100.531340][T10180] vhci_hcd: connection closed [ 100.531781][ T3450] vhci_hcd: stop threads [ 100.533358][T10207] EXT4-fs: Ignoring removed oldalloc option [ 100.536547][ T3450] vhci_hcd: release socket [ 100.549590][T10207] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1681: Parent and EA inode have the same ino 15 [ 100.551307][ T3450] vhci_hcd: disconnect device [ 100.571946][T10207] EXT4-fs (loop8): 1 orphan inode deleted [ 100.578200][T10207] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.609190][ T9291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.643174][T10218] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 100.649783][T10218] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.657346][T10218] vhci_hcd vhci_hcd.0: Device attached [ 100.665145][T10218] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1682'. [ 100.698815][T10218] siw: device registration error -23 [ 100.757571][T10230] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 100.767832][T10219] vhci_hcd: connection closed [ 100.768230][ T3450] vhci_hcd: stop threads [ 100.777316][ T3450] vhci_hcd: release socket [ 100.781921][ T3450] vhci_hcd: disconnect device [ 100.819043][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1689'. [ 100.828083][ T3383] vhci_hcd: vhci_device speed not set [ 100.931659][T10241] IPv4: Oversized IP packet from 127.202.26.0 [ 100.957871][T10241] 9pnet: Could not find request transport: rdma [ 100.991475][T10246] batadv0: entered promiscuous mode [ 100.997569][T10246] macvtap1: entered promiscuous mode [ 101.003769][T10246] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 101.020097][T10252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'. [ 101.033190][T10246] batadv0: left promiscuous mode [ 101.056796][T10252] netlink: 'syz.0.1694': attribute type 1 has an invalid length. [ 101.080309][T10252] bond0: entered promiscuous mode [ 101.085461][T10252] bond0: entered allmulticast mode [ 101.103105][T10252] geneve2: entered allmulticast mode [ 101.199896][T10306] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 101.969818][T10339] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 102.008477][T10341] 9pnet: Could not find request transport: fd0x0000000000000003 [ 102.100947][T10348] loop7: detected capacity change from 0 to 1024 [ 102.108276][T10348] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.114874][T10348] EXT4-fs: Ignoring removed bh option [ 102.129361][T10348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.144884][T10348] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.262104][T10370] __nla_validate_parse: 2 callbacks suppressed [ 102.262120][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1719'. [ 102.352611][T10379] loop7: detected capacity change from 0 to 1024 [ 102.387264][T10379] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.393877][T10379] EXT4-fs: Ignoring removed bh option [ 102.453606][T10379] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.500653][T10388] loop6: detected capacity change from 0 to 1024 [ 102.509639][T10392] 9pnet: Could not find request transport: fd0x0000000000000003 [ 102.519019][T10379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.528748][T10388] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.535293][T10388] EXT4-fs: Ignoring removed bh option [ 102.584871][T10388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.609073][T10402] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 102.636368][T10388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.667120][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1728'. [ 102.784342][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1730'. [ 102.825653][T10413] loop6: detected capacity change from 0 to 512 [ 102.864273][T10413] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.889090][T10413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.952709][T10413] netlink: 'syz.6.1730': attribute type 1 has an invalid length. [ 102.959925][T10426] loop0: detected capacity change from 0 to 1024 [ 102.965907][ T29] kauditd_printk_skb: 1026 callbacks suppressed [ 102.965927][ T29] audit: type=1326 audit(1758408822.742:16171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 102.969372][T10426] EXT4-fs: Ignoring removed orlov option [ 102.973191][ T29] audit: type=1326 audit(1758408822.742:16172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 102.996774][T10426] EXT4-fs: Ignoring removed nobh option [ 103.002327][ T29] audit: type=1326 audit(1758408822.742:16173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 103.025848][T10426] EXT4-fs: Ignoring removed bh option [ 103.044364][T10428] netlink: 'syz.3.1734': attribute type 1 has an invalid length. [ 103.072760][T10413] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 103.083700][ T29] audit: type=1326 audit(1758408822.826:16174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 103.107510][ T29] audit: type=1326 audit(1758408822.826:16175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 103.131121][ T29] audit: type=1326 audit(1758408822.826:16176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 103.154760][ T29] audit: type=1326 audit(1758408822.847:16177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 103.178566][ T29] audit: type=1326 audit(1758408822.847:16178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10369 comm="syz.8.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 103.202302][ T29] audit: type=1326 audit(1758408822.857:16179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 103.225833][ T29] audit: type=1326 audit(1758408822.857:16180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10405 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85cdeec29 code=0x7ffc0000 [ 103.250472][T10428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.274864][ T8275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.299540][T10426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.339420][T10426] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1733: Allocating blocks 481-513 which overlap fs metadata [ 103.367977][T10426] EXT4-fs (loop0): pa ffff8881072a7150: logic 352, phys. 465, len 3 [ 103.376068][T10473] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 103.376096][T10473] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.382648][T10426] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 103.390074][T10473] vhci_hcd vhci_hcd.0: Device attached [ 103.435149][T10473] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1736'. [ 103.449934][T10473] siw: device registration error -23 [ 103.459420][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.468796][T10479] loop6: detected capacity change from 0 to 1024 [ 103.476042][T10479] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.482568][T10479] EXT4-fs: Ignoring removed bh option [ 103.493346][T10483] 9pnet_fd: Insufficient options for proto=fd [ 103.516688][T10475] vhci_hcd: connection closed [ 103.517000][ T3450] vhci_hcd: stop threads [ 103.518433][T10479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.521735][ T3450] vhci_hcd: release socket [ 103.521753][ T3450] vhci_hcd: disconnect device [ 103.534399][T10479] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.572038][ T7921] vhci_hcd: vhci_device speed not set [ 103.624528][T10505] FAULT_INJECTION: forcing a failure. [ 103.624528][T10505] name failslab, interval 1, probability 0, space 0, times 0 [ 103.637214][T10505] CPU: 0 UID: 0 PID: 10505 Comm: syz.0.1744 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.637248][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.637270][T10505] Call Trace: [ 103.637276][T10505] [ 103.637283][T10505] __dump_stack+0x1d/0x30 [ 103.637305][T10505] dump_stack_lvl+0xe8/0x140 [ 103.637323][T10505] dump_stack+0x15/0x1b [ 103.637355][T10505] should_fail_ex+0x265/0x280 [ 103.637380][T10505] should_failslab+0x8c/0xb0 [ 103.637409][T10505] kmem_cache_alloc_noprof+0x50/0x310 [ 103.637444][T10505] ? getname_flags+0x80/0x3b0 [ 103.637500][T10505] getname_flags+0x80/0x3b0 [ 103.637535][T10505] user_path_at+0x28/0x130 [ 103.637576][T10505] __se_sys_mount+0x25b/0x2e0 [ 103.637691][T10505] ? fput+0x8f/0xc0 [ 103.637731][T10505] __x64_sys_mount+0x67/0x80 [ 103.637761][T10505] x64_sys_call+0x2b4d/0x2ff0 [ 103.637810][T10505] do_syscall_64+0xd2/0x200 [ 103.637928][T10505] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.637957][T10505] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.638012][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.638038][T10505] RIP: 0033:0x7f31f1c4ec29 [ 103.638056][T10505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.638077][T10505] RSP: 002b:00007f31f06b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.638099][T10505] RAX: ffffffffffffffda RBX: 00007f31f1e95fa0 RCX: 00007f31f1c4ec29 [ 103.638154][T10505] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 103.638169][T10505] RBP: 00007f31f06b7090 R08: 0000200000000080 R09: 0000000000000000 [ 103.638184][T10505] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 103.638199][T10505] R13: 00007f31f1e96038 R14: 00007f31f1e95fa0 R15: 00007fff82259138 [ 103.638221][T10505] [ 103.825247][T10508] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 103.902433][T10519] FAULT_INJECTION: forcing a failure. [ 103.902433][T10519] name failslab, interval 1, probability 0, space 0, times 0 [ 103.915773][T10519] CPU: 0 UID: 0 PID: 10519 Comm: syz.0.1747 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.915806][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.915818][T10519] Call Trace: [ 103.915823][T10519] [ 103.915831][T10519] __dump_stack+0x1d/0x30 [ 103.915851][T10519] dump_stack_lvl+0xe8/0x140 [ 103.915873][T10519] dump_stack+0x15/0x1b [ 103.915891][T10519] should_fail_ex+0x265/0x280 [ 103.915915][T10519] should_failslab+0x8c/0xb0 [ 103.915940][T10519] kmem_cache_alloc_noprof+0x50/0x310 [ 103.915972][T10519] ? vm_area_dup+0x33/0x2c0 [ 103.916014][T10519] vm_area_dup+0x33/0x2c0 [ 103.916053][T10519] __split_vma+0xe9/0x650 [ 103.916094][T10519] vma_modify+0x3f2/0xc80 [ 103.916117][T10519] ? number+0x9ae/0xab0 [ 103.916150][T10519] vma_modify_flags+0x101/0x130 [ 103.916181][T10519] madvise_vma_behavior+0xde5/0x1cf0 [ 103.916219][T10519] madvise_do_behavior+0x5b7/0x970 [ 103.916259][T10519] do_madvise+0x10e/0x190 [ 103.916300][T10519] __x64_sys_madvise+0x64/0x80 [ 103.916332][T10519] x64_sys_call+0x1f1a/0x2ff0 [ 103.916357][T10519] do_syscall_64+0xd2/0x200 [ 103.916396][T10519] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.916427][T10519] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.916464][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.916484][T10519] RIP: 0033:0x7f31f1c4ec29 [ 103.916500][T10519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.916521][T10519] RSP: 002b:00007f31f06b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 103.916540][T10519] RAX: ffffffffffffffda RBX: 00007f31f1e95fa0 RCX: 00007f31f1c4ec29 [ 103.916552][T10519] RDX: 0000000000000010 RSI: 0000000000004000 RDI: 0000200000ffb000 [ 103.916565][T10519] RBP: 00007f31f06b7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.916577][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.916588][T10519] R13: 00007f31f1e96038 R14: 00007f31f1e95fa0 R15: 00007fff82259138 [ 103.916611][T10519] [ 104.129145][T10522] FAULT_INJECTION: forcing a failure. [ 104.129145][T10522] name failslab, interval 1, probability 0, space 0, times 0 [ 104.141968][T10522] CPU: 1 UID: 0 PID: 10522 Comm: syz.0.1749 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.142016][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.142033][T10522] Call Trace: [ 104.142041][T10522] [ 104.142051][T10522] __dump_stack+0x1d/0x30 [ 104.142078][T10522] dump_stack_lvl+0xe8/0x140 [ 104.142103][T10522] dump_stack+0x15/0x1b [ 104.142124][T10522] should_fail_ex+0x265/0x280 [ 104.142232][T10522] should_failslab+0x8c/0xb0 [ 104.142263][T10522] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 104.142379][T10522] ? sidtab_sid2str_get+0xa0/0x130 [ 104.142404][T10522] kmemdup_noprof+0x2b/0x70 [ 104.142473][T10522] sidtab_sid2str_get+0xa0/0x130 [ 104.142502][T10522] security_sid_to_context_core+0x1eb/0x2e0 [ 104.142527][T10522] security_sid_to_context+0x27/0x40 [ 104.142546][T10522] selinux_lsmprop_to_secctx+0x67/0xf0 [ 104.142611][T10522] security_lsmprop_to_secctx+0x43/0x80 [ 104.142645][T10522] audit_log_task_context+0x77/0x190 [ 104.142707][T10522] audit_log_task+0xf4/0x250 [ 104.142746][T10522] audit_seccomp+0x61/0x100 [ 104.142775][T10522] ? __seccomp_filter+0x68c/0x10d0 [ 104.142823][T10522] __seccomp_filter+0x69d/0x10d0 [ 104.142853][T10522] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.142889][T10522] ? vfs_write+0x7e8/0x960 [ 104.142915][T10522] ? __rcu_read_unlock+0x4f/0x70 [ 104.142958][T10522] ? __fget_files+0x184/0x1c0 [ 104.143001][T10522] __secure_computing+0x82/0x150 [ 104.143028][T10522] syscall_trace_enter+0xcf/0x1e0 [ 104.143137][T10522] do_syscall_64+0xac/0x200 [ 104.143192][T10522] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.143298][T10522] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 104.143336][T10522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.143387][T10522] RIP: 0033:0x7f31f1c4d63c [ 104.143424][T10522] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 104.143442][T10522] RSP: 002b:00007f31f06b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.143462][T10522] RAX: ffffffffffffffda RBX: 00007f31f1e95fa0 RCX: 00007f31f1c4d63c [ 104.143477][T10522] RDX: 000000000000000f RSI: 00007f31f06b70a0 RDI: 0000000000000004 [ 104.143490][T10522] RBP: 00007f31f06b7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.143505][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.143587][T10522] R13: 00007f31f1e96038 R14: 00007f31f1e95fa0 R15: 00007fff82259138 [ 104.143612][T10522] [ 104.148472][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1750'. [ 104.372396][T10539] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 104.409132][T10539] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.416759][T10539] vhci_hcd vhci_hcd.0: Device attached [ 104.430659][ T1031] kernel write not supported for file bpf-prog (pid: 1031 comm: kworker/1:2) [ 104.445183][T10539] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1753'. [ 104.509791][T10546] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 104.516419][T10546] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.524288][T10546] vhci_hcd vhci_hcd.0: Device attached [ 104.534161][T10546] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1755'. [ 104.547420][T10540] vhci_hcd: connection closed [ 104.547975][ T31] vhci_hcd: stop threads [ 104.557049][ T31] vhci_hcd: release socket [ 104.561592][ T31] vhci_hcd: disconnect device [ 104.571014][T10546] siw: device registration error -23 [ 104.574312][T10550] program syz.0.1756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.588109][ T23] vhci_hcd: vhci_device speed not set [ 104.600737][T10550] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 104.611722][T10550] netlink: '+}[@': attribute type 1 has an invalid length. [ 104.619041][T10550] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 104.645080][T10547] vhci_hcd: connection closed [ 104.648522][ T58] vhci_hcd: stop threads [ 104.657562][ T58] vhci_hcd: release socket [ 104.662027][ T58] vhci_hcd: disconnect device [ 104.672678][T10563] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.702444][ T10] vhci_hcd: vhci_device speed not set [ 104.715821][T10570] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 104.728846][T10563] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.808520][T10563] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.886578][T10563] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.938989][ T3450] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.951698][ T3450] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.971733][ T3450] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.980181][ T3450] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.047067][T10597] loop0: detected capacity change from 0 to 1024 [ 105.054820][T10597] EXT4-fs: Ignoring removed orlov option [ 105.060860][T10597] EXT4-fs: Ignoring removed nobh option [ 105.066568][T10597] EXT4-fs: Ignoring removed bh option [ 105.111355][T10597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.127952][T10597] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1764: Allocating blocks 481-513 which overlap fs metadata [ 105.169981][T10609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1767'. [ 105.192834][T10597] FAULT_INJECTION: forcing a failure. [ 105.192834][T10597] name failslab, interval 1, probability 0, space 0, times 0 [ 105.205591][T10597] CPU: 0 UID: 0 PID: 10597 Comm: syz.0.1764 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.205622][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.205638][T10597] Call Trace: [ 105.205652][T10597] [ 105.205660][T10597] __dump_stack+0x1d/0x30 [ 105.205682][T10597] dump_stack_lvl+0xe8/0x140 [ 105.205700][T10597] dump_stack+0x15/0x1b [ 105.205748][T10597] should_fail_ex+0x265/0x280 [ 105.205778][T10597] should_failslab+0x8c/0xb0 [ 105.205803][T10597] __kmalloc_noprof+0xa5/0x3e0 [ 105.205888][T10597] ? ext4_find_extent+0x16b/0x7a0 [ 105.206029][T10597] ext4_find_extent+0x16b/0x7a0 [ 105.206054][T10597] ? find_get_entry+0x374/0x380 [ 105.206072][T10597] ext4_ext_map_blocks+0x11f/0x38a0 [ 105.206096][T10597] ? find_get_entries+0x1ea/0x220 [ 105.206121][T10597] ? invalidate_inode_pages2_range+0x38b/0x3d0 [ 105.206229][T10597] ? __rcu_read_unlock+0x4f/0x70 [ 105.206257][T10597] ? ext4_es_lookup_extent+0x352/0x4f0 [ 105.206297][T10597] ext4_map_blocks+0x5ee/0xd00 [ 105.206338][T10597] ext4_iomap_begin+0x88d/0xe00 [ 105.206398][T10597] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 105.206491][T10597] iomap_iter+0x32f/0x730 [ 105.206513][T10597] ? should_failslab+0x8c/0xb0 [ 105.206624][T10597] __iomap_dio_rw+0x708/0x1250 [ 105.206694][T10597] ? ext4_journal_check_start+0x11a/0x1b0 [ 105.206760][T10597] iomap_dio_rw+0x40/0x90 [ 105.206815][T10597] ext4_file_write_iter+0xad9/0xf00 [ 105.206864][T10597] do_iter_readv_writev+0x499/0x540 [ 105.206902][T10597] vfs_writev+0x2df/0x8b0 [ 105.206969][T10597] __se_sys_pwritev2+0xfc/0x1c0 [ 105.207076][T10597] __x64_sys_pwritev2+0x67/0x80 [ 105.207106][T10597] x64_sys_call+0x2c55/0x2ff0 [ 105.207134][T10597] do_syscall_64+0xd2/0x200 [ 105.207176][T10597] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.207206][T10597] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.207260][T10597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.207288][T10597] RIP: 0033:0x7f31f1c4ec29 [ 105.207327][T10597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.207394][T10597] RSP: 002b:00007f31f06b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 105.207418][T10597] RAX: ffffffffffffffda RBX: 00007f31f1e95fa0 RCX: 00007f31f1c4ec29 [ 105.207433][T10597] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006 [ 105.207467][T10597] RBP: 00007f31f06b7090 R08: 0000000000000000 R09: 0000000000000003 [ 105.207481][T10597] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 105.207495][T10597] R13: 00007f31f1e96038 R14: 00007f31f1e95fa0 R15: 00007fff82259138 [ 105.207519][T10597] [ 105.502664][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.534048][T10621] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 105.600004][T10611] loop7: detected capacity change from 0 to 512 [ 105.666867][T10635] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.708126][T10611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.747528][T10635] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.802633][T10611] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.803697][T10635] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.846991][T10654] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 105.853575][T10654] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.861263][T10654] vhci_hcd vhci_hcd.0: Device attached [ 105.887727][T10654] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1776'. [ 105.897399][T10663] loop6: detected capacity change from 0 to 1024 [ 105.907644][T10663] EXT4-fs: Ignoring removed orlov option [ 105.913570][T10663] EXT4-fs: Ignoring removed nobh option [ 105.919194][T10663] EXT4-fs: Ignoring removed bh option [ 105.933649][T10654] siw: device registration error -23 [ 105.941010][T10663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.959731][T10663] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1778: Allocating blocks 481-513 which overlap fs metadata [ 106.009526][T10635] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.031734][ T8275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.062551][T10678] FAULT_INJECTION: forcing a failure. [ 106.062551][T10678] name failslab, interval 1, probability 0, space 0, times 0 [ 106.063214][ T8611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.075229][T10678] CPU: 0 UID: 0 PID: 10678 Comm: syz.6.1780 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.075260][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.075276][T10678] Call Trace: [ 106.075283][T10678] [ 106.075291][T10678] __dump_stack+0x1d/0x30 [ 106.075462][T10678] dump_stack_lvl+0xe8/0x140 [ 106.075490][T10678] dump_stack+0x15/0x1b [ 106.075514][T10678] should_fail_ex+0x265/0x280 [ 106.075548][T10678] ? audit_log_d_path+0x8d/0x150 [ 106.075592][T10678] should_failslab+0x8c/0xb0 [ 106.075712][T10678] __kmalloc_cache_noprof+0x4c/0x320 [ 106.075816][T10678] audit_log_d_path+0x8d/0x150 [ 106.075906][T10678] audit_log_d_path_exe+0x42/0x70 [ 106.075950][T10678] audit_log_task+0x1e9/0x250 [ 106.075993][T10678] audit_seccomp+0x61/0x100 [ 106.076031][T10678] ? __seccomp_filter+0x68c/0x10d0 [ 106.076063][T10678] __seccomp_filter+0x69d/0x10d0 [ 106.076096][T10678] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 106.076202][T10678] ? vfs_write+0x7e8/0x960 [ 106.076234][T10678] ? __rcu_read_unlock+0x4f/0x70 [ 106.076264][T10678] ? __fget_files+0x184/0x1c0 [ 106.076305][T10678] __secure_computing+0x82/0x150 [ 106.076382][T10678] syscall_trace_enter+0xcf/0x1e0 [ 106.076446][T10678] do_syscall_64+0xac/0x200 [ 106.076491][T10678] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.076524][T10678] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.076641][T10678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.076696][T10678] RIP: 0033:0x7f7dc555ec29 [ 106.076761][T10678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.076787][T10678] RSP: 002b:00007f7dc3fbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 106.076836][T10678] RAX: ffffffffffffffda RBX: 00007f7dc57a5fa0 RCX: 00007f7dc555ec29 [ 106.076854][T10678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 106.076871][T10678] RBP: 00007f7dc3fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 106.076888][T10678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.076905][T10678] R13: 00007f7dc57a6038 R14: 00007f7dc57a5fa0 R15: 00007fff4f3222e8 [ 106.076951][T10678] [ 106.077003][ T10] vhci_hcd: vhci_device speed not set [ 106.085354][T10656] vhci_hcd: connection closed [ 106.119766][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.327308][ T10] usb 1-1: new full-speed USB device number 12 using vhci_hcd [ 106.410753][T10657] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 106.485042][T10695] 9pnet_fd: Insufficient options for proto=fd [ 106.758611][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.776473][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.794410][ T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.810416][ T37] vhci_hcd: stop threads [ 106.814799][ T37] vhci_hcd: release socket [ 106.819228][ T37] vhci_hcd: disconnect device [ 107.144606][T10705] loop0: detected capacity change from 0 to 2048 [ 107.193495][T10705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.215259][T10705] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.230240][T10719] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 107.318420][T10706] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1788: bg 0: block 345: padding at end of block bitmap is not set [ 107.336839][T10723] loop7: detected capacity change from 0 to 512 [ 107.362868][T10706] EXT4-fs (loop0): Remounting filesystem read-only [ 107.369677][ T37] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 107.403743][T10723] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1791: corrupted inode contents [ 107.427699][T10723] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.1791: mark_inode_dirty error [ 107.454847][T10723] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1791: corrupted inode contents [ 107.481312][T10723] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.1791: mark_inode_dirty error [ 107.507567][T10723] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1791: corrupted inode contents [ 107.524411][T10734] FAULT_INJECTION: forcing a failure. [ 107.524411][T10734] name failslab, interval 1, probability 0, space 0, times 0 [ 107.537223][T10734] CPU: 0 UID: 0 PID: 10734 Comm: syz.3.1794 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.537254][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.537268][T10734] Call Trace: [ 107.537275][T10734] [ 107.537284][T10734] __dump_stack+0x1d/0x30 [ 107.537306][T10734] dump_stack_lvl+0xe8/0x140 [ 107.537348][T10734] dump_stack+0x15/0x1b [ 107.537363][T10734] should_fail_ex+0x265/0x280 [ 107.537397][T10734] should_failslab+0x8c/0xb0 [ 107.537429][T10734] kmem_cache_alloc_noprof+0x50/0x310 [ 107.537465][T10734] ? mas_alloc_nodes+0x265/0x520 [ 107.537508][T10734] mas_alloc_nodes+0x265/0x520 [ 107.537552][T10734] mas_preallocate+0x33e/0x520 [ 107.537593][T10734] mmap_region+0xbdd/0x1630 [ 107.537641][T10734] do_mmap+0x9b3/0xbe0 [ 107.537687][T10734] vm_mmap_pgoff+0x17a/0x2e0 [ 107.537728][T10734] ksys_mmap_pgoff+0xc2/0x310 [ 107.537750][T10734] ? __x64_sys_mmap+0x49/0x70 [ 107.537778][T10734] x64_sys_call+0x14a3/0x2ff0 [ 107.537802][T10734] do_syscall_64+0xd2/0x200 [ 107.537833][T10734] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.537859][T10734] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.537895][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.537922][T10734] RIP: 0033:0x7fb57807ec63 [ 107.537941][T10734] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 107.537962][T10734] RSP: 002b:00007fb576ae6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.537981][T10734] RAX: ffffffffffffffda RBX: 000000000000063d RCX: 00007fb57807ec63 [ 107.537994][T10734] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 107.538009][T10734] RBP: 0000200000000d82 R08: 00000000ffffffff R09: 0000000000000000 [ 107.538024][T10734] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 107.538039][T10734] R13: 00007fb576ae6ef0 R14: 00007fb576ae6eb0 R15: 00002000000003c0 [ 107.538062][T10734] [ 107.539410][T10723] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 107.723448][ T29] kauditd_printk_skb: 744 callbacks suppressed [ 107.723489][ T29] audit: type=1326 audit(1758408827.741:16924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 107.772240][ T29] audit: type=1326 audit(1758408827.741:16925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 107.795949][ T29] audit: type=1326 audit(1758408827.741:16926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 107.799006][T10723] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1791: corrupted inode contents [ 107.819745][ T29] audit: type=1326 audit(1758408827.741:16927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 107.833871][T10723] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.1791: mark_inode_dirty error [ 107.856167][ T29] audit: type=1326 audit(1758408827.741:16928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 107.868268][T10723] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 107.890321][ T29] audit: type=1326 audit(1758408827.741:16929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 107.902731][T10723] EXT4-fs (loop7): 1 truncate cleaned up [ 107.922774][ T29] audit: type=1326 audit(1758408827.741:16930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 107.930142][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.952115][ T29] audit: type=1326 audit(1758408827.741:16931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 107.961388][ T31] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 107.984610][ T29] audit: type=1326 audit(1758408827.741:16932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.8.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 107.994349][ T31] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 108.021972][T10723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.029816][T10743] loop8: detected capacity change from 0 to 1024 [ 108.042027][T10723] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.050132][T10743] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.065172][T10743] EXT4-fs: Ignoring removed bh option [ 108.088414][T10743] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.090334][T10723] can: request_module (can-proto-0) failed. [ 108.105110][T10750] loop0: detected capacity change from 0 to 1024 [ 108.107968][T10743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.137544][T10750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.168037][T10766] Option ''MO' to dns_resolver key: bad/missing value [ 108.218918][ T8611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.236092][T10770] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1798: bg 0: block 494: padding at end of block bitmap is not set [ 108.283092][T10770] EXT4-fs (loop0): Remounting filesystem read-only [ 108.304138][T10770] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 108.354871][T10777] __nla_validate_parse: 1 callbacks suppressed [ 108.354886][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1802'. [ 108.416352][T10779] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 108.422920][T10779] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.430542][T10779] vhci_hcd vhci_hcd.0: Device attached [ 108.440857][T10779] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1803'. [ 108.471246][T10779] siw: device registration error -23 [ 108.512960][T10786] 9pnet_fd: Insufficient options for proto=fd [ 108.540471][T10788] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 108.558374][T10780] vhci_hcd: connection closed [ 108.558524][ T31] vhci_hcd: stop threads [ 108.567649][ T31] vhci_hcd: release socket [ 108.572246][ T31] vhci_hcd: disconnect device [ 108.608006][ T7921] vhci_hcd: vhci_device speed not set [ 108.632245][T10801] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 108.894232][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.049490][T10859] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 109.136046][T10868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1824'. [ 109.370770][T10891] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 109.377351][T10891] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.384945][T10891] vhci_hcd vhci_hcd.0: Device attached [ 109.415870][T10904] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 109.426843][T10907] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1833'. [ 109.446877][T10906] FAULT_INJECTION: forcing a failure. [ 109.446877][T10906] name failslab, interval 1, probability 0, space 0, times 0 [ 109.459627][T10906] CPU: 0 UID: 0 PID: 10906 Comm: syz.7.1830 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.459660][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.459672][T10906] Call Trace: [ 109.459678][T10906] [ 109.459686][T10906] __dump_stack+0x1d/0x30 [ 109.459706][T10906] dump_stack_lvl+0xe8/0x140 [ 109.459728][T10906] dump_stack+0x15/0x1b [ 109.459749][T10906] should_fail_ex+0x265/0x280 [ 109.459781][T10906] should_failslab+0x8c/0xb0 [ 109.459812][T10906] kmem_cache_alloc_noprof+0x50/0x310 [ 109.459848][T10906] ? __anon_vma_prepare+0x70/0x2f0 [ 109.459871][T10906] ? __rcu_read_lock+0x37/0x50 [ 109.459893][T10906] __anon_vma_prepare+0x70/0x2f0 [ 109.459917][T10906] handle_mm_fault+0x1e86/0x2c20 [ 109.459948][T10906] ? __rcu_read_lock+0x37/0x50 [ 109.459969][T10906] ? __pte_offset_map_lock+0x1d4/0x230 [ 109.460019][T10906] __get_user_pages+0x102e/0x1fa0 [ 109.460061][T10906] get_user_pages_remote+0x1d5/0x6d0 [ 109.460084][T10906] ? __rcu_read_unlock+0x4f/0x70 [ 109.460107][T10906] __update_ref_ctr+0x8e/0x3a0 [ 109.460142][T10906] uprobe_mmap+0x2de/0xc30 [ 109.460181][T10906] mmap_region+0x13c2/0x1630 [ 109.460252][T10906] do_mmap+0x9b3/0xbe0 [ 109.460295][T10906] vm_mmap_pgoff+0x17a/0x2e0 [ 109.460337][T10906] ksys_mmap_pgoff+0x268/0x310 [ 109.460361][T10906] x64_sys_call+0x14a3/0x2ff0 [ 109.460387][T10906] do_syscall_64+0xd2/0x200 [ 109.460419][T10906] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.460445][T10906] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.460483][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.460510][T10906] RIP: 0033:0x7fc85cdeec29 [ 109.460528][T10906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.460549][T10906] RSP: 002b:00007fc85b836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 109.460572][T10906] RAX: ffffffffffffffda RBX: 00007fc85d036090 RCX: 00007fc85cdeec29 [ 109.460584][T10906] RDX: 0000000000000003 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 109.460596][T10906] RBP: 00007fc85b836090 R08: 0000000000000009 R09: 0000000000000000 [ 109.460607][T10906] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 109.460618][T10906] R13: 00007fc85d036128 R14: 00007fc85d036090 R15: 00007fff477ece98 [ 109.460636][T10906] [ 109.460646][T10906] ref_ctr increment failed for inode: 0x18e offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810418e1c0 [ 109.603972][T10891] siw: device registration error -23 [ 109.763866][T10926] FAULT_INJECTION: forcing a failure. [ 109.763866][T10926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.777161][T10926] CPU: 1 UID: 0 PID: 10926 Comm: syz.3.1837 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.777191][T10926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.777203][T10926] Call Trace: [ 109.777211][T10926] [ 109.777219][T10926] __dump_stack+0x1d/0x30 [ 109.777240][T10926] dump_stack_lvl+0xe8/0x140 [ 109.777288][T10926] dump_stack+0x15/0x1b [ 109.777304][T10926] should_fail_ex+0x265/0x280 [ 109.777329][T10926] should_fail+0xb/0x20 [ 109.777350][T10926] should_fail_usercopy+0x1a/0x20 [ 109.777447][T10926] _copy_from_user+0x1c/0xb0 [ 109.777488][T10926] __sys_bpf+0x178/0x7b0 [ 109.777524][T10926] __x64_sys_bpf+0x41/0x50 [ 109.777682][T10926] x64_sys_call+0x2aea/0x2ff0 [ 109.777709][T10926] do_syscall_64+0xd2/0x200 [ 109.777774][T10926] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.777805][T10926] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.777843][T10926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.777894][T10926] RIP: 0033:0x7fb57807ec29 [ 109.777913][T10926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.777935][T10926] RSP: 002b:00007fb576ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.777957][T10926] RAX: ffffffffffffffda RBX: 00007fb5782c5fa0 RCX: 00007fb57807ec29 [ 109.777969][T10926] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 109.777981][T10926] RBP: 00007fb576ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.777993][T10926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.778041][T10926] R13: 00007fb5782c6038 R14: 00007fb5782c5fa0 R15: 00007ffc0f59d1d8 [ 109.778063][T10926] [ 109.973574][T10930] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1836'. [ 109.982695][T10893] vhci_hcd: connection closed [ 109.982900][ T3450] vhci_hcd: stop threads [ 109.992001][ T3450] vhci_hcd: release socket [ 109.996483][ T3450] vhci_hcd: disconnect device [ 110.054947][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1840'. [ 110.203072][T10950] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 110.371469][T10960] loop6: detected capacity change from 0 to 1024 [ 110.405534][T10960] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.412091][T10960] EXT4-fs: Ignoring removed bh option [ 110.465404][T10960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.485695][T10968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1851'. [ 110.544839][T10960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.990930][T11064] FAULT_INJECTION: forcing a failure. [ 110.990930][T11064] name failslab, interval 1, probability 0, space 0, times 0 [ 111.003627][T11064] CPU: 0 UID: 0 PID: 11064 Comm: syz.3.1864 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.003660][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.003673][T11064] Call Trace: [ 111.003680][T11064] [ 111.003687][T11064] __dump_stack+0x1d/0x30 [ 111.003743][T11064] dump_stack_lvl+0xe8/0x140 [ 111.003768][T11064] dump_stack+0x15/0x1b [ 111.003797][T11064] should_fail_ex+0x265/0x280 [ 111.003859][T11064] should_failslab+0x8c/0xb0 [ 111.003944][T11064] kmem_cache_alloc_noprof+0x50/0x310 [ 111.003972][T11064] ? audit_log_start+0x365/0x6c0 [ 111.004024][T11064] audit_log_start+0x365/0x6c0 [ 111.004074][T11064] audit_seccomp+0x48/0x100 [ 111.004107][T11064] ? __seccomp_filter+0x68c/0x10d0 [ 111.004130][T11064] __seccomp_filter+0x69d/0x10d0 [ 111.004154][T11064] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.004189][T11064] ? vfs_write+0x7e8/0x960 [ 111.004236][T11064] ? __rcu_read_unlock+0x4f/0x70 [ 111.004257][T11064] ? __fget_files+0x184/0x1c0 [ 111.004348][T11064] __secure_computing+0x82/0x150 [ 111.004465][T11064] syscall_trace_enter+0xcf/0x1e0 [ 111.004492][T11064] do_syscall_64+0xac/0x200 [ 111.004544][T11064] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.004567][T11064] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.004597][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.004622][T11064] RIP: 0033:0x7fb57807ec29 [ 111.004661][T11064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.004683][T11064] RSP: 002b:00007fb576ae7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 111.004705][T11064] RAX: ffffffffffffffda RBX: 00007fb5782c5fa0 RCX: 00007fb57807ec29 [ 111.004728][T11064] RDX: 0000000000000b3d RSI: 0000000000000003 RDI: 00007fb578dff000 [ 111.004757][T11064] RBP: 00007fb576ae7090 R08: 0000200000001140 R09: 0000000000000000 [ 111.004824][T11064] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 111.004836][T11064] R13: 00007fb5782c6038 R14: 00007fb5782c5fa0 R15: 00007ffc0f59d1d8 [ 111.004857][T11064] [ 111.217845][ T10] usb 1-1: enqueue for inactive port 0 [ 111.223488][ T10] usb 1-1: enqueue for inactive port 0 [ 111.284369][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1866'. [ 111.300044][ T10] vhci_hcd: vhci_device speed not set [ 111.426822][T11076] loop0: detected capacity change from 0 to 1024 [ 111.457229][T11076] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.463781][T11076] EXT4-fs: Ignoring removed bh option [ 111.541505][T11076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.580989][T11076] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.786115][T11101] loop8: detected capacity change from 0 to 512 [ 111.810184][T11101] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1877'. [ 111.839976][T11110] batadv0: entered promiscuous mode [ 111.845391][T11110] macvtap1: entered promiscuous mode [ 111.853639][T11110] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 111.929235][T11118] FAULT_INJECTION: forcing a failure. [ 111.929235][T11118] name failslab, interval 1, probability 0, space 0, times 0 [ 111.941917][T11118] CPU: 1 UID: 0 PID: 11118 Comm: syz.3.1881 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.941945][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.941997][T11118] Call Trace: [ 111.942003][T11118] [ 111.942011][T11118] __dump_stack+0x1d/0x30 [ 111.942038][T11118] dump_stack_lvl+0xe8/0x140 [ 111.942061][T11118] dump_stack+0x15/0x1b [ 111.942077][T11118] should_fail_ex+0x265/0x280 [ 111.942103][T11118] ? audit_log_d_path+0x8d/0x150 [ 111.942217][T11118] should_failslab+0x8c/0xb0 [ 111.942242][T11118] __kmalloc_cache_noprof+0x4c/0x320 [ 111.942274][T11118] audit_log_d_path+0x8d/0x150 [ 111.942370][T11118] audit_log_d_path_exe+0x42/0x70 [ 111.942401][T11118] audit_log_task+0x1e9/0x250 [ 111.942451][T11118] audit_seccomp+0x61/0x100 [ 111.942480][T11118] ? __seccomp_filter+0x68c/0x10d0 [ 111.942506][T11118] __seccomp_filter+0x69d/0x10d0 [ 111.942536][T11118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.942582][T11118] ? vfs_write+0x7e8/0x960 [ 111.942612][T11118] __secure_computing+0x82/0x150 [ 111.942639][T11118] syscall_trace_enter+0xcf/0x1e0 [ 111.942733][T11118] do_syscall_64+0xac/0x200 [ 111.942868][T11118] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.942891][T11118] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.942942][T11118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.942969][T11118] RIP: 0033:0x7fb57807ec29 [ 111.942985][T11118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.943003][T11118] RSP: 002b:00007fb576ae7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 111.943021][T11118] RAX: ffffffffffffffda RBX: 00007fb5782c5fa0 RCX: 00007fb57807ec29 [ 111.943033][T11118] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000003e00 [ 111.943102][T11118] RBP: 00007fb576ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.943117][T11118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.943133][T11118] R13: 00007fb5782c6038 R14: 00007fb5782c5fa0 R15: 00007ffc0f59d1d8 [ 111.943157][T11118] [ 112.267025][T11128] loop8: detected capacity change from 0 to 1024 [ 112.287071][T11128] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.293577][T11128] EXT4-fs: Ignoring removed bh option [ 112.315996][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1888'. [ 112.317205][T11128] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.343843][T11128] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.485111][ T29] kauditd_printk_skb: 1007 callbacks suppressed [ 112.485128][ T29] audit: type=1326 audit(1758408832.750:17938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 112.515136][T11152] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 112.521701][T11152] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.529226][T11152] vhci_hcd vhci_hcd.0: Device attached [ 112.535317][ T29] audit: type=1326 audit(1758408832.761:17939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 112.559065][ T29] audit: type=1326 audit(1758408832.761:17940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 112.582821][ T29] audit: type=1326 audit(1758408832.761:17941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 112.606583][ T29] audit: type=1326 audit(1758408832.761:17942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 112.630207][ T29] audit: type=1326 audit(1758408832.761:17943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 112.653839][ T29] audit: type=1326 audit(1758408832.761:17944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 112.677437][ T29] audit: type=1326 audit(1758408832.761:17945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72ca5ec29 code=0x7ffc0000 [ 112.701026][ T29] audit: type=1326 audit(1758408832.761:17946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe72ca60b7a code=0x7ffc0000 [ 112.702967][ T7921] vhci_hcd: vhci_device speed not set [ 112.724519][ T29] audit: type=1326 audit(1758408832.761:17947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.8.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe72ca5d590 code=0x7ffc0000 [ 112.771747][T11152] siw: device registration error -23 [ 112.799716][ T7921] usb 17-1: new full-speed USB device number 6 using vhci_hcd [ 112.858918][T11164] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 112.869034][T11153] vhci_hcd: connection reset by peer [ 112.874845][T11002] vhci_hcd: stop threads [ 112.876390][T11161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 112.879133][T11002] vhci_hcd: release socket [ 112.879150][T11002] vhci_hcd: disconnect device [ 112.894739][T11161] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.902393][T11161] vhci_hcd vhci_hcd.0: Device attached [ 112.932186][T11161] siw: device registration error -23 [ 113.011592][T11166] vhci_hcd: connection closed [ 113.013416][T10995] vhci_hcd: stop threads [ 113.022408][T10995] vhci_hcd: release socket [ 113.026897][T10995] vhci_hcd: disconnect device [ 113.073702][ T23] vhci_hcd: vhci_device speed not set [ 113.132917][T11195] __nla_validate_parse: 2 callbacks suppressed [ 113.133010][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1906'. [ 113.227896][T11203] FAULT_INJECTION: forcing a failure. [ 113.227896][T11203] name failslab, interval 1, probability 0, space 0, times 0 [ 113.240764][T11203] CPU: 0 UID: 0 PID: 11203 Comm: syz.7.1909 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.240793][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.240806][T11203] Call Trace: [ 113.240813][T11203] [ 113.240821][T11203] __dump_stack+0x1d/0x30 [ 113.240872][T11203] dump_stack_lvl+0xe8/0x140 [ 113.240967][T11203] dump_stack+0x15/0x1b [ 113.240989][T11203] should_fail_ex+0x265/0x280 [ 113.241013][T11203] should_failslab+0x8c/0xb0 [ 113.241043][T11203] kmem_cache_alloc_node_noprof+0x57/0x320 [ 113.241113][T11203] ? __alloc_skb+0x101/0x320 [ 113.241143][T11203] __alloc_skb+0x101/0x320 [ 113.241166][T11203] ? audit_log_start+0x365/0x6c0 [ 113.241225][T11203] audit_log_start+0x380/0x6c0 [ 113.241263][T11203] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 113.241378][T11203] audit_seccomp+0x48/0x100 [ 113.241412][T11203] ? __seccomp_filter+0x68c/0x10d0 [ 113.241437][T11203] __seccomp_filter+0x69d/0x10d0 [ 113.241459][T11203] ? getname_flags+0x2be/0x3b0 [ 113.241517][T11203] ? kmem_cache_free+0xdf/0x300 [ 113.241562][T11203] __secure_computing+0x82/0x150 [ 113.241662][T11203] syscall_trace_enter+0xcf/0x1e0 [ 113.241688][T11203] do_syscall_64+0xac/0x200 [ 113.241758][T11203] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 113.241815][T11203] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 113.241844][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.241868][T11203] RIP: 0033:0x7fc85cded63c [ 113.241895][T11203] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.241918][T11203] RSP: 002b:00007fc85b857030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.241985][T11203] RAX: ffffffffffffffda RBX: 00007fc85d035fa0 RCX: 00007fc85cded63c [ 113.241997][T11203] RDX: 000000000000000f RSI: 00007fc85b8570a0 RDI: 0000000000000006 [ 113.242079][T11203] RBP: 00007fc85b857090 R08: 0000000000000000 R09: 0000000000000000 [ 113.242095][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.242110][T11203] R13: 00007fc85d036038 R14: 00007fc85d035fa0 R15: 00007fff477ece98 [ 113.242135][T11203] [ 113.469101][T11206] smc: net device bond0 applied user defined pnetid SYZ0 [ 113.476956][T11206] smc: net device bond0 erased user defined pnetid SYZ0 [ 113.487550][T11208] loop7: detected capacity change from 0 to 1024 [ 113.495173][T11208] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.501777][T11208] EXT4-fs: Ignoring removed bh option [ 113.522783][T11208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.536091][T11208] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.616579][T11224] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 113.743606][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1920'. [ 113.848258][T11247] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 113.854866][T11247] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.862334][T11247] vhci_hcd vhci_hcd.0: Device attached [ 113.876634][T11247] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1923'. [ 113.912632][T11247] siw: device registration error -23 [ 113.991150][T11249] vhci_hcd: connection closed [ 113.991289][T11022] vhci_hcd: stop threads [ 114.000377][T11022] vhci_hcd: release socket [ 114.004854][T11022] vhci_hcd: disconnect device [ 114.200281][ T2957] vhci_hcd: vhci_device speed not set [ 114.300935][T11267] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 114.611538][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1936'. [ 114.642925][T11290] FAULT_INJECTION: forcing a failure. [ 114.642925][T11290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.649447][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1938'. [ 114.656155][T11290] CPU: 1 UID: 0 PID: 11290 Comm: syz.7.1937 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.656196][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.656215][T11290] Call Trace: [ 114.656224][T11290] [ 114.656236][T11290] __dump_stack+0x1d/0x30 [ 114.656265][T11290] dump_stack_lvl+0xe8/0x140 [ 114.656327][T11290] dump_stack+0x15/0x1b [ 114.656379][T11290] should_fail_ex+0x265/0x280 [ 114.656415][T11290] should_fail+0xb/0x20 [ 114.656442][T11290] should_fail_usercopy+0x1a/0x20 [ 114.656524][T11290] strncpy_from_user+0x25/0x230 [ 114.656595][T11290] ? kmem_cache_alloc_noprof+0x186/0x310 [ 114.656635][T11290] ? getname_flags+0x80/0x3b0 [ 114.656676][T11290] getname_flags+0xae/0x3b0 [ 114.656739][T11290] getname_uflags+0x21/0x30 [ 114.656795][T11290] __x64_sys_execveat+0x5d/0x90 [ 114.656828][T11290] x64_sys_call+0x1fec/0x2ff0 [ 114.656859][T11290] do_syscall_64+0xd2/0x200 [ 114.656973][T11290] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.657008][T11290] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.657087][T11290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.657116][T11290] RIP: 0033:0x7fc85cdeec29 [ 114.657139][T11290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.657163][T11290] RSP: 002b:00007fc85b857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 114.657189][T11290] RAX: ffffffffffffffda RBX: 00007fc85d035fa0 RCX: 00007fc85cdeec29 [ 114.657207][T11290] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 114.657291][T11290] RBP: 00007fc85b857090 R08: 0000000000001000 R09: 0000000000000000 [ 114.657308][T11290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.657325][T11290] R13: 00007fc85d036038 R14: 00007fc85d035fa0 R15: 00007fff477ece98 [ 114.657352][T11290] [ 114.980625][T11308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11308 comm=syz.6.1944 [ 115.032033][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1944'. [ 115.104627][T11341] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1946'. [ 115.139278][T11312] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 115.145841][T11312] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.153357][T11312] vhci_hcd vhci_hcd.0: Device attached [ 115.197804][ T7909] hid_parser_main: 77 callbacks suppressed [ 115.197830][ T7909] hid-generic 0003:0004:0005.0002: unknown main item tag 0x2 [ 115.211129][ T7909] hid-generic 0003:0004:0005.0002: unexpected long global item [ 115.245238][T11312] siw: device registration error -23 [ 115.256859][ T7909] hid-generic 0003:0004:0005.0002: probe with driver hid-generic failed with error -22 [ 115.375380][ T23] vhci_hcd: vhci_device speed not set [ 115.380851][T11314] vhci_hcd: connection closed [ 115.381065][T11033] vhci_hcd: stop threads [ 115.390171][T11033] vhci_hcd: release socket [ 115.394744][T11033] vhci_hcd: disconnect device [ 115.440603][ T23] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 115.448434][ T23] usb 15-1: enqueue for inactive port 0 [ 115.454455][ T23] usb 15-1: enqueue for inactive port 0 [ 115.464436][ T23] usb 15-1: enqueue for inactive port 0 [ 115.496248][T11375] FAULT_INJECTION: forcing a failure. [ 115.496248][T11375] name fail_futex, interval 1, probability 0, space 0, times 1 [ 115.509223][T11375] CPU: 0 UID: 0 PID: 11375 Comm: syz.0.1953 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.509252][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.509265][T11375] Call Trace: [ 115.509271][T11375] [ 115.509278][T11375] __dump_stack+0x1d/0x30 [ 115.509369][T11375] dump_stack_lvl+0xe8/0x140 [ 115.509389][T11375] dump_stack+0x15/0x1b [ 115.509480][T11375] should_fail_ex+0x265/0x280 [ 115.509505][T11375] should_fail+0xb/0x20 [ 115.509526][T11375] get_futex_key+0x130/0xbd0 [ 115.509554][T11375] futex_lock_pi+0xf3/0x780 [ 115.509583][T11375] ? _parse_integer_limit+0x170/0x190 [ 115.509609][T11375] ? __pfx_futex_wake_mark+0x10/0x10 [ 115.509675][T11375] do_futex+0x21f/0x380 [ 115.509709][T11375] __se_sys_futex+0x2ed/0x360 [ 115.509784][T11375] __x64_sys_futex+0x78/0x90 [ 115.509810][T11375] x64_sys_call+0x2e39/0x2ff0 [ 115.509832][T11375] do_syscall_64+0xd2/0x200 [ 115.509866][T11375] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.509926][T11375] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 115.509959][T11375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.510022][T11375] RIP: 0033:0x7f31f1c4ec29 [ 115.510038][T11375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.510056][T11375] RSP: 002b:00007f31f06b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.510154][T11375] RAX: ffffffffffffffda RBX: 00007f31f1e95fa0 RCX: 00007f31f1c4ec29 [ 115.510167][T11375] RDX: 00000000fffffffe RSI: 0000000000000086 RDI: 000020000000cffc [ 115.510180][T11375] RBP: 00007f31f06b7090 R08: 0000000000000000 R09: 00000000fffffffc [ 115.510192][T11375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.510204][T11375] R13: 00007f31f1e96038 R14: 00007f31f1e95fa0 R15: 00007fff82259138 [ 115.510224][T11375] [ 115.699896][ T23] vhci_hcd: vhci_device speed not set [ 115.770511][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 115.790298][T11390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=11390 comm=syz.8.1959 [ 115.808236][T11390] loop8: detected capacity change from 0 to 512 [ 115.811558][T11392] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 115.819292][T11390] EXT4-fs (loop8): orphan cleanup on readonly fs [ 115.834521][T11390] EXT4-fs warning (device loop8): ext4_xattr_inode_get:556: inode #11: comm syz.8.1959: EA inode hash validation failed [ 115.849118][T11390] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 115.908692][T11390] ------------[ cut here ]------------ [ 115.914203][T11390] EA inode 11 ref_count=-1 [ 115.914522][T11390] WARNING: CPU: 0 PID: 11390 at fs/ext4/xattr.c:1048 ext4_xattr_inode_update_ref+0x33e/0x3f0 [ 115.929232][T11390] Modules linked in: [ 115.933189][T11390] CPU: 0 UID: 0 PID: 11390 Comm: syz.8.1959 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.943105][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.953242][T11390] RIP: 0010:ext4_xattr_inode_update_ref+0x33e/0x3f0 [ 115.959897][T11390] Code: e8 57 ec b7 ff c6 05 1a 76 19 05 01 90 49 8d 7e 40 e8 26 f9 b7 ff 49 8b 76 40 48 c7 c7 a4 2c 5b 86 4c 89 e2 e8 93 df 66 ff 90 <0f> 0b 90 90 e9 01 ff ff ff e8 b4 3b 9d ff 48 c7 c7 89 33 d4 86 e8 [ 115.979609][T11390] RSP: 0018:ffffc9000fd477c8 EFLAGS: 00010246 [ 115.985739][T11390] RAX: bfc23031ba59ca00 RBX: ffff8881194c9760 RCX: 0000000000080000 [ 115.993838][T11390] RDX: ffffc90003035000 RSI: 0000000000014d00 RDI: 0000000000014d01 [ 116.001974][T11390] RBP: ffffffffffffffff R08: 0001c9000fd4763f R09: 0000000000000000 [ 116.009965][T11390] R10: 00000000ffffffff R11: 0000000000000002 R12: ffffffffffffffff [ 116.018010][T11390] R13: ffff8881194c9808 R14: ffff8881194c96c8 R15: 0000000000000001 [ 116.026094][T11390] FS: 00007fe72b4c76c0(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 116.035100][T11390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.041768][T11390] CR2: 0000000000000000 CR3: 000000011cce8000 CR4: 00000000003506f0 [ 116.049810][T11390] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.057908][T11390] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 116.065975][T11390] Call Trace: [ 116.069493][T11390] [ 116.072546][T11390] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 116.078706][T11390] ? errseq_check+0x2c/0x50 [ 116.083252][T11390] ext4_xattr_delete_inode+0x6b7/0x790 [ 116.088916][T11390] ? ext4_truncate+0x92e/0xae0 [ 116.091706][T11404] loop7: detected capacity change from 0 to 164 [ 116.093712][T11390] ext4_evict_inode+0xa6a/0xd90 [ 116.104866][T11390] ? __pfx_ext4_evict_inode+0x10/0x10 [ 116.110315][T11390] evict+0x2e3/0x550 [ 116.114337][T11390] ? __dquot_initialize+0x146/0x7c0 [ 116.119594][T11390] iput+0x447/0x5b0 [ 116.123503][T11390] ext4_process_orphan+0x1a9/0x1c0 [ 116.128730][T11390] ext4_orphan_cleanup+0x6a8/0xa00 [ 116.130423][T11407] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 116.133916][T11390] ext4_fill_super+0x3260/0x35d0 [ 116.133965][T11390] ? set_blocksize+0x1a8/0x310 [ 116.151251][T11390] ? sb_set_blocksize+0xe3/0x100 [ 116.156253][T11390] ? setup_bdev_super+0x30e/0x370 [ 116.161360][T11390] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.166758][T11390] get_tree_bdev_flags+0x28e/0x300 [ 116.171928][T11390] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.177367][T11390] get_tree_bdev+0x1f/0x30 [ 116.181863][T11390] ext4_get_tree+0x1c/0x30 [ 116.186308][T11390] vfs_get_tree+0x57/0x1d0 [ 116.190810][T11390] do_new_mount+0x207/0x5e0 [ 116.195367][T11390] ? security_capable+0x83/0x90 [ 116.200311][T11390] path_mount+0x4a4/0xb20 [ 116.204711][T11390] ? user_path_at+0x109/0x130 [ 116.209427][T11390] __se_sys_mount+0x28f/0x2e0 [ 116.214194][T11390] ? do_mkdirat+0x3ac/0x3f0 [ 116.218734][T11390] __x64_sys_mount+0x67/0x80 [ 116.223437][T11390] x64_sys_call+0x2b4d/0x2ff0 [ 116.228148][T11390] do_syscall_64+0xd2/0x200 [ 116.232710][T11390] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 116.238834][T11390] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 116.244656][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.250678][T11390] RIP: 0033:0x7fe72ca603ca [ 116.255128][T11390] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.274804][T11390] RSP: 002b:00007fe72b4c6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.283349][T11390] RAX: ffffffffffffffda RBX: 00007fe72b4c6ef0 RCX: 00007fe72ca603ca [ 116.291366][T11390] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fe72b4c6eb0 [ 116.299384][T11390] RBP: 0000200000000180 R08: 00007fe72b4c6ef0 R09: 000000000080078b [ 116.307507][T11390] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 116.315562][T11390] R13: 00007fe72b4c6eb0 R14: 0000000000000473 R15: 0000200000000680 [ 116.323571][T11390] [ 116.326634][T11390] ---[ end trace 0000000000000000 ]--- [ 116.332499][T11390] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.1959: corrupted inode contents [ 116.346038][T11390] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #15: comm syz.8.1959: mark_inode_dirty error [ 116.357772][T11390] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.1959: corrupted inode contents [ 116.371442][T11390] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #15: comm syz.8.1959: mark_inode_dirty error [ 116.391399][T11390] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #15: comm syz.8.1959: mark inode dirty (error -117) [ 116.409435][T11390] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 116.418711][T11390] EXT4-fs (loop8): 1 orphan inode deleted [ 116.443013][T11390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 116.459239][T11421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1967'. [ 116.481461][T11390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.522604][T11429] loop0: detected capacity change from 0 to 1024 [ 116.531731][T11429] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.538347][T11429] EXT4-fs: Ignoring removed bh option [ 116.552423][T11435] loop7: detected capacity change from 0 to 512 [ 116.563531][T11438] netlink: 'syz.8.1973': attribute type 2 has an invalid length. [ 116.563575][T11429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.585546][T11429] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.585672][T11435] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.1972: bad orphan inode 11862016 [ 116.607099][T11435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 116.613086][T11438] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 116.628338][T11438] netem: change failed [ 116.628444][T11435] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.706162][T11435] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #19: comm syz.7.1972: corrupted inode contents [ 116.758998][T11435] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #19: comm syz.7.1972: mark_inode_dirty error [ 116.781602][T11435] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #19: comm syz.7.1972: corrupted inode contents [ 116.853806][T11435] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #19: comm syz.7.1972: mark_inode_dirty error [ 116.883439][T11435] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #19: comm syz.7.1972: mark inode dirty (error -117) [ 116.897758][T11435] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 116.908134][T11471] 9pnet_fd: Insufficient options for proto=fd [ 116.933275][ T8611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 117.009064][T11488] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 117.015620][T11488] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.023107][T11488] vhci_hcd vhci_hcd.0: Device attached [ 117.036137][T11488] siw: device registration error -23 [ 117.067663][T11495] loop0: detected capacity change from 0 to 1024 [ 117.077221][T11495] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.083716][T11495] EXT4-fs: Ignoring removed bh option [ 117.103095][T11489] vhci_hcd: connection closed [ 117.104357][ T3450] vhci_hcd: stop threads [ 117.113389][ T3450] vhci_hcd: release socket [ 117.117812][ T3450] vhci_hcd: disconnect device [ 117.125334][T11495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.142369][T11495] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.504611][ T29] kauditd_printk_skb: 1361 callbacks suppressed [ 117.504627][ T29] audit: type=1326 audit(1758408838.042:19307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc555ec29 code=0x7ffc0000 [ 117.607435][ T7921] usb 17-1: enqueue for inactive port 0 [ 117.645036][ T7921] usb 17-1: enqueue for inactive port 0 [ 117.675289][ T29] audit: type=1326 audit(1758408838.074:19308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc555ec29 code=0x7ffc0000 [ 117.698962][ T29] audit: type=1326 audit(1758408838.074:19309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dc555ec29 code=0x7ffc0000 [ 117.722555][ T29] audit: type=1326 audit(1758408838.074:19310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc555ec29 code=0x7ffc0000 [ 117.746195][ T29] audit: type=1326 audit(1758408838.074:19311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc555ec29 code=0x7ffc0000 [ 117.769882][ T29] audit: type=1326 audit(1758408838.074:19312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dc555ec29 code=0x7ffc0000 [ 117.793554][ T29] audit: type=1326 audit(1758408838.074:19313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc555ec29 code=0x7ffc0000 [ 117.817205][ T29] audit: type=1326 audit(1758408838.074:19314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc555ec29 code=0x7ffc0000 [ 117.841186][ T29] audit: type=1326 audit(1758408838.074:19315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc555ec29 code=0x7ffc0000 [ 117.864936][ T29] audit: type=1326 audit(1758408838.074:19316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.6.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc555ec29 code=0x7ffc0000 [ 117.888920][ T7921] vhci_hcd: vhci_device speed not set [ 118.005663][T11513] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 118.044993][T11513] SELinux: failed to load policy [ 118.065490][T11517] 9pnet_fd: Insufficient options for proto=fd [ 118.104795][T11521] __nla_validate_parse: 4 callbacks suppressed [ 118.104816][T11521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1994'. [ 118.203029][T11528] loop6: detected capacity change from 0 to 1024 [ 118.227978][T11528] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.234631][T11528] EXT4-fs: Ignoring removed bh option [ 118.276289][T11528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.330853][T11528] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.347924][T11542] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 118.406911][T11549] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 118.413521][T11549] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.421095][T11549] vhci_hcd vhci_hcd.0: Device attached [ 118.434822][T11549] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2004'. [ 118.453034][T11549] siw: device registration error -23 [ 118.518896][T11562] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2008'. [ 118.540479][T11550] vhci_hcd: connection closed [ 118.544204][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2006'. [ 118.551473][T11033] vhci_hcd: stop threads [ 118.562262][T11033] vhci_hcd: release socket [ 118.566698][T11033] vhci_hcd: disconnect device [ 118.574398][T11558] 9pnet_fd: Insufficient options for proto=fd [ 118.591554][T11566] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 118.605442][ T23] vhci_hcd: vhci_device speed not set [ 118.634947][T11568] loop0: detected capacity change from 0 to 1024 [ 118.644084][T11568] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.650550][T11568] EXT4-fs: Ignoring removed bh option [ 119.120837][T11568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.139733][T11568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.195135][T11589] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 119.201794][T11589] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 119.209267][T11589] vhci_hcd vhci_hcd.0: Device attached [ 119.222424][T11589] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2015'. [ 119.239037][T11589] siw: device registration error -23 [ 119.262279][T11593] 9p: Unknown access argument z%*018!A͏AQåH]00000000000000000000: -22 [ 119.353058][T11603] 9pnet_fd: Insufficient options for proto=fd [ 119.368359][T11590] vhci_hcd: connection closed [ 119.368619][ T3450] vhci_hcd: stop threads [ 119.377718][ T3450] vhci_hcd: release socket [ 119.382207][ T3450] vhci_hcd: disconnect device [ 119.423239][T11609] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 119.429860][T11609] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 119.437351][T11609] vhci_hcd vhci_hcd.0: Device attached [ 119.463912][T11616] loop0: detected capacity change from 0 to 512 [ 119.473723][T11616] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.474889][T11609] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2023'. [ 119.499429][ T23] vhci_hcd: vhci_device speed not set [ 119.505573][T11616] EXT4-fs (loop0): 1 truncate cleaned up [ 119.519406][T11616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.543525][T11618] siw: device registration error -23 [ 119.622651][ T3397] vhci_hcd: vhci_device speed not set [ 119.643274][T11611] vhci_hcd: connection closed [ 119.645080][T11033] vhci_hcd: stop threads [ 119.654098][T11033] vhci_hcd: release socket [ 119.658534][T11033] vhci_hcd: disconnect device [ 119.688953][ T3397] usb 17-1: new full-speed USB device number 7 using vhci_hcd [ 119.697614][ T3397] usb 17-1: enqueue for inactive port 0 [ 119.704383][ T3397] usb 17-1: enqueue for inactive port 0 [ 119.712704][ T3397] usb 17-1: enqueue for inactive port 0 [ 119.728293][T11616] ================================================================== [ 119.736527][T11616] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 119.743886][T11616] [ 119.746224][T11616] read-write to 0xffff888119609478 of 8 bytes by task 11625 on cpu 1: [ 119.754391][T11616] xas_clear_mark+0x91/0x180 [ 119.759019][T11616] __folio_start_writeback+0x2e7/0x440 [ 119.764508][T11616] ext4_bio_write_folio+0x5ad/0x9f0 [ 119.769788][T11616] mpage_process_page_bufs+0x4a1/0x620 [ 119.775266][T11616] mpage_prepare_extent_to_map+0x786/0xc00 [ 119.781526][T11616] ext4_do_writepages+0x708/0x2750 [ 119.786670][T11616] ext4_writepages+0x176/0x300 [ 119.791460][T11616] do_writepages+0x1c3/0x310 [ 119.796067][T11616] filemap_write_and_wait_range+0x144/0x340 [ 119.801984][T11616] fiemap_prep+0x14d/0x170 [ 119.806409][T11616] iomap_fiemap+0x8c/0x460 [ 119.810849][T11616] ext4_fiemap+0x1f9/0x220 [ 119.815371][T11616] do_vfs_ioctl+0xc5e/0xe10 [ 119.819885][T11616] __se_sys_ioctl+0x82/0x140 [ 119.824561][T11616] __x64_sys_ioctl+0x43/0x50 [ 119.829160][T11616] x64_sys_call+0x1816/0x2ff0 [ 119.833854][T11616] do_syscall_64+0xd2/0x200 [ 119.838381][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.844294][T11616] [ 119.846626][T11616] read to 0xffff888119609478 of 8 bytes by task 11616 on cpu 0: [ 119.854264][T11616] xas_find_marked+0x218/0x620 [ 119.859054][T11616] find_get_entry+0x5d/0x380 [ 119.863653][T11616] filemap_get_folios_tag+0x13b/0x210 [ 119.869042][T11616] mpage_prepare_extent_to_map+0x320/0xc00 [ 119.874862][T11616] ext4_do_writepages+0x708/0x2750 [ 119.879994][T11616] ext4_writepages+0x176/0x300 [ 119.884774][T11616] do_writepages+0x1c3/0x310 [ 119.889385][T11616] file_write_and_wait_range+0x156/0x2c0 [ 119.895040][T11616] generic_buffers_fsync_noflush+0x45/0x120 [ 119.900948][T11616] ext4_sync_file+0x1ab/0x690 [ 119.905640][T11616] vfs_fsync_range+0x10a/0x130 [ 119.910433][T11616] ext4_buffered_write_iter+0x34f/0x3c0 [ 119.916025][T11616] ext4_file_write_iter+0x383/0xf00 [ 119.921261][T11616] do_iter_readv_writev+0x499/0x540 [ 119.926503][T11616] vfs_writev+0x2df/0x8b0 [ 119.930860][T11616] do_writev+0xe7/0x210 [ 119.935035][T11616] __x64_sys_writev+0x45/0x50 [ 119.939729][T11616] x64_sys_call+0x1e9a/0x2ff0 [ 119.944421][T11616] do_syscall_64+0xd2/0x200 [ 119.948964][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.954867][T11616] [ 119.957196][T11616] value changed: 0x003fffff80000000 -> 0x003ffff000000000 [ 119.964307][T11616] [ 119.966634][T11616] Reported by Kernel Concurrency Sanitizer on: [ 119.972806][T11616] CPU: 0 UID: 0 PID: 11616 Comm: Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.983325][T11616] Tainted: [W]=WARN [ 119.987134][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.997199][T11616] ================================================================== [ 120.009522][ T3397] vhci_hcd: vhci_device speed not set [ 120.258242][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.