last executing test programs: 2m25.234667205s ago: executing program 4 (id=10): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e21, 0x9, @empty, 0x8ff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='devfreq_frequency\x00', r2, 0x0, 0xb}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r6}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f0000000400)=@in6={0x21, 0x5, 0x2, 0x1b, {0xa, 0x4e23, 0x3ff, @local, 0xf}}, 0x24) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r12, 0x0, 0xfffffffffffffffd}, 0x18) r13 = socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$key(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02120909b100000026bd7000fbdbdf25"], 0x10}}, 0x40010) sendmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYBLOB="4d28040200", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) semget(0x2, 0x5971a0abfe197320, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003"], 0x110}}, 0x0) 2m24.734171715s ago: executing program 4 (id=14): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x2e8a, &(0x7f0000000480)={0x0, 0x758e, 0x10, 0x0, 0x34f}, &(0x7f0000001540)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m24.374100922s ago: executing program 4 (id=19): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe4, 0x0, 0x1, 0x7f, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x41e, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) acct(&(0x7f0000000300)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) clock_nanosleep(0x1, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e20, 0x3, @empty, 0xf7ffffff}}, 0x0, 0xffff}, 0x90) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) socket$nl_route(0x10, 0x3, 0x0) 2m23.299781174s ago: executing program 4 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0x44) 2m23.281841354s ago: executing program 4 (id=34): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="796100000000410077a31359882fff8dae1db4d0e81a230800040000000000eb0000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r2, @ANYBLOB="000226bd7000ffdbdf253f0000002c005e8008000700aa020000080002000400000008000200040000000800090000800000080003000100000034005e800800090005000000080002009305000008000600080000000800050017000000080009008100000008000300b100000050005e8014000100ff7f00000000000000100000000000000800050008000000080005004700000008000200774effff08000900640700008b3b090092000000080005003000000008000700610300000c005e80080005002a0000000c005e8008000300080000004c005e802000010003000000ffffffff08000000ff0f0000ff0700000800000094040000080003000001000008000300ff0e000010000100020000000000010004d0000008000100000000c004005e8014005e80080007003c01000008000500540200001c005e80080006000c00000008000300000000000800050002000000cdd0bc934e2bb9da200625a5c990ecb5bfceb25804177372fd8fe2b1b3a84bfc7c398c29e182edbebf5c1d9ecf3c969644"], 0x15c}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x8, 0x1}, 0x10) syz_open_procfs(r3, &(0x7f0000000040)='fdinfo/3\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="5c0000007a006bcd9e3fe3dc6e08170007000054250ec000488bc3a00000e517d34460bc24fff3000005251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a600"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 2m23.214463825s ago: executing program 4 (id=36): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}}, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) splice(r1, 0x0, r3, 0x0, 0x1fffffffffff, 0x0) 2m8.172141383s ago: executing program 32 (id=36): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}}, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) splice(r1, 0x0, r3, 0x0, 0x1fffffffffff, 0x0) 1m59.76087708s ago: executing program 3 (id=449): io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010180)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x3, 0x2, 0x8001, 0x10}, {0x0, 0x55, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'erspan0\x00'}]}}]}, 0x88}}, 0x24040084) 1m59.72802058s ago: executing program 3 (id=450): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000545ac20000458a337d951b620000c100"/40], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000640), &(0x7f00000008c0)=r0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r3, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 1m59.698714121s ago: executing program 3 (id=451): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 1m59.675425221s ago: executing program 3 (id=453): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0x40000000000000]}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000001140)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', r0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8000}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000040100000001000000", @ANYRES32, @ANYRES32], 0x18}, 0x20040001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r3 = fspick(r2, &(0x7f0000000240)='./cgroup/../file0\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32300653600648d0a0005000000000000005ade4a460c89b6ec0cff3959547f739058ba86c9023cd6693a000000004a32000400160004000a0000000000e000ddf66ed538f25232", 0x78, 0x4000, 0x0, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x1, 0x12) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 1m59.477513915s ago: executing program 3 (id=457): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000800000000000000050000006311d400000000009500000000000000fedc9c651202e9276fc3b91fef91b90f5012897249f4d86da709be275a1a378edd019b8cbfaf1f14353f98143d5343062cf20a38fa4db25c172d57bf2aafd60752df81cd229af88a72f5ac6c6d3b120652916b451da65099f46874adb98dcc56ff6961fdd4a5173fa9b943f898dac73305962ccd433cef3e457f4b47"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x20, 0x0, 0xfffffffffffffffe, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1fffffff, 0x5718}, 0x20, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x87) fchdir(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000001c0)=[{{0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1m59.089604403s ago: executing program 3 (id=467): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) write$selinux_validatetrans(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a617564697463fa30619dc112761a4efe12b1db6498746c5f657865635f743a73302073797374656d5f753a6f626a6563745f723a756e636f6e66696e65645f657865635f743a7330203030303030303030303030303030303030353131202f"], 0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m59.089357983s ago: executing program 33 (id=467): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) write$selinux_validatetrans(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a617564697463fa30619dc112761a4efe12b1db6498746c5f657865635f743a73302073797374656d5f753a6f626a6563745f723a756e636f6e66696e65645f657865635f743a7330203030303030303030303030303030303030353131202f"], 0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2.356208224s ago: executing program 5 (id=2673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xc7f}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r5 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r5, 0x8ba, 0x696d, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20044840) 1.449051641s ago: executing program 5 (id=2681): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, 0x0, 0x4008034) 1.376824232s ago: executing program 5 (id=2682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000050) 1.351674453s ago: executing program 2 (id=2684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000800)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008034) 1.338539893s ago: executing program 5 (id=2685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0xa0000001}) epoll_wait(r4, &(0x7f00000000c0)=[{}, {}], 0x2, 0x44001006) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0xa}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x1e, 0x4, 0x0) 1.276259055s ago: executing program 6 (id=2686): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000800000000000000050000006311d400000000009500000000000000fedc9c651202e9276fc3b91fef91b90f5012897249f4d86da709be275a1a378edd019b8cbfaf1f14353f98143d5343062cf20a38fa4db25c172d57bf2aafd60752df81cd229af88a72f5ac6c6d3b120652916b451da65099f46874adb98dcc56ff6961fdd4a5173fa9b943f898dac73305962ccd433cef3e457f4b47"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x20, 0x0, 0xfffffffffffffffe, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1fffffff, 0x5718}, 0x20, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x87) fchdir(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") socket$packet(0x11, 0x2, 0x300) 1.274839875s ago: executing program 2 (id=2687): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) 1.073378559s ago: executing program 2 (id=2688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000010018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000240)="8d6eda917b60a481d671e542165ed5513e33d448e0c604d0e75549e3ecd3edc412449154bc", &(0x7f0000000380)=""/76}, 0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000ff03000000bf0900000000000055090100000000009500000000000000bf91000000000020b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='i2c_write\x00', r6, 0x0, 0x9}, 0x48d23f96) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x200000000006, 0x0, 0xfc, 0x8}, {0x7, 0x8, 0xc3, 0x938}, {0x8, 0x9, 0xed, 0xa8}]}) r7 = timerfd_create(0x0, 0x80800) timerfd_settime(r7, 0x3, &(0x7f0000000140), 0x0) 986.73826ms ago: executing program 2 (id=2689): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r2, 0x0, 0x4002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 965.357641ms ago: executing program 6 (id=2690): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) 929.934902ms ago: executing program 6 (id=2691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xda) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000800)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008034) 887.495512ms ago: executing program 6 (id=2693): r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x88}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$sndseq(r2, &(0x7f0000000040), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0) 877.506743ms ago: executing program 2 (id=2694): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000b4000000b4000000060000000500000006000085050000000c00000005000000010000ffffffff10000000050000000800000008000000030080000f00000007000000040000000104000004000000030000000b0000001000000000000002000000000600000000000010040000000400000000000009010000000400000004000004010000000e00000005000000ee9e230a0e00000004000000000000000900000004000000030000000e000000040000001000000000006f2e6100"/210], 0x0, 0xd2, 0x0, 0x1, 0xfffffff8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000080100", @ANYRES32, @ANYBLOB="000000000040267a4b6c8e945a00000000000000aefce68c62f79844fa61ee180000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/24, @ANYRES32=r1, @ANYBLOB], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4041) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/27], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="2d00000007020015002f6465762f6275732f7573622f30000000003023007f00000003fa4d2e5d90992751191612507edc581c5657d1a5300228c50162354ecda0d71d9e6323466947d43f7fa8ec0a66c60a4120ae2bf15b259977922ca3c59257"], 0x22) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000024c0)={0x6, 0x118, 0xfa00, {{0x3, 0x800, "62c4880f51e3765fe134bfd9a1aa9dea088ba6801b657eaa450e475f3cf587b01d34c26d8835c979ff27754a932c93de101590af4a036119e73811c4f172519692c3ff2f71b1e423d6468aa0c374175195e3a4d2979974cb350e488e38ae06e0f53f6eab66c32c551ed131a6c719513783768e3bb9642bb6030d270639f1ff2d9eafa6b428a98caf430e94642762b6ed055ad25443feb4c26500d34b973da8f568af3d885cb0fb1c55ace28fe75eaf333086322493de9ef2c3bc90b76af9453674b492187d6d042141e8f5354b04605529a66c62ba2142d38fecb597570d4f9e4aa1b7c596b2ecc72545a8aad98950ac3d1c2dad2cd95a4d8bcde74c69ff15e5", 0x9, 0x40, 0xd0, 0xa, 0x50, 0x4, 0xd}}}, 0x120) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x40, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000034f28fb0000fb000002000280", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="040001000000000010000600000000002000010000000000"], 0x34, 0x1) setreuid(0xffffffffffffffff, 0xee01) mkdir(&(0x7f0000000040)='./file1\x00', 0x114) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f00000002c0)={0x400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0xa}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x7460) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000006c0)={[{@init_itable_val={'init_itable', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4000001}}, {@abort}, {@errors_remount}, {@quota}]}, 0x3, 0x433, &(0x7f0000000d80)="$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") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x10, 0x8, 0xd, 0x3, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x64, 0x0, 0xa6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_addr={0x44, 0x2c, 0xd6, 0x1, 0x6, [{@rand_addr=0x64010100}, {@loopback, 0x1}, {@loopback}, {@multicast2, 0x100}, {@remote, 0x7f}]}, @end, @cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "5b09fbc87fb9072a"}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x2}, 0x8) r7 = socket(0x9, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2717, 0x0, &(0x7f0000000300)) 552.024489ms ago: executing program 1 (id=2700): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x1000000000000000) 506.55352ms ago: executing program 1 (id=2702): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) 480.56968ms ago: executing program 5 (id=2703): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xda) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008034) 479.80372ms ago: executing program 1 (id=2704): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) (fail_nth: 7) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) iopl(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r1], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000600000001"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYRES32=r8, @ANYRES16=0x0, @ANYRESDEC=r6, @ANYRES8=r1], 0x0, 0xcd1, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000006a006bb20000000000000000000000000000010008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x28}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000200)=0x1, 0x4) 416.964582ms ago: executing program 5 (id=2705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0xa0000001}) epoll_wait(r4, &(0x7f00000000c0)=[{}, {}], 0x2, 0x44001006) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0xa}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}}}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) 416.456722ms ago: executing program 0 (id=2706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 399.817422ms ago: executing program 0 (id=2707): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 381.589262ms ago: executing program 0 (id=2708): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000800)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008034) 360.789273ms ago: executing program 0 (id=2709): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x10c000) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x104, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9135}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x42}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x99f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe52}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x104}}, 0x8000) sendmsg$tipc(r1, &(0x7f0000000800)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008034) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1b, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 215.964736ms ago: executing program 1 (id=2710): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) 214.736006ms ago: executing program 0 (id=2711): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x410e, 0x4) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000000c0)={{0x2, 0xcb4, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 'batadv0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000140)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xfcc, 0xc0000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1110d, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1bb160a35607a814}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x503, 0x0, 0x0, {0x7, 0x0, 0x7}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELFLOWTABLE={0x108, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x1d4, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJ_USERDATA={0xdc, 0x8, "f0b00e61ab4dd244dc35537df140efb46f8484c6582e4bd83a23199e0512de6da48979aa6f2c6b6466b5be39d36e1c3cd50038b78afc5e1c869cf2bc71feb47e827922239c61b7329baa9941bd9ee0222c9bf3eef8f77029ceefb537534a730a702e5b2401fa919144249b6b0b8d6297cd8d877f120dde7bfe52801d28a4927b3f142913dc5b12f31173db2191ca77ecc25260e18684f8e3a203da4a14c3ebd8ab7c834acf92ec52be830219345e105dcef0b24a081ce2a1f900261264ffc4d51171e8a07fa40333459c757f0be07cde138a2c2e2fdc827b"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xb8, 0x8, "099371dbfd1cbf3c6815d7a23e3d69748a57254b9417349c8d6eb3a70502ebef4968b8c2b45ad2d7b901c9835753b6a399d3f4b831247f5c7c6df03c168e1628db1b48dfff2616018e66da44756b980691d445faac6dc5b323b4917b0b6d5bce4788e62abf591c69008fbca0baf7af55ef00b19eb2c37b7a674ec5d33583bd76cb07115f9f3f8a805a02a3d0561f62363548f8f5955a8524e823b3d620bb1c0cb3ad6492bdce8681b0e1e22b81ec491d862c460f"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x50, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x4b3c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x598, 0x3, 0x0, 0x1, [{0x594, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x58, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "32b5b9d4ce087f83895600411d5ea1e474d86698471548d2c50cba4c48317c6109bce22507c775c3bc9dad7c1f4fca3b1d6a9a531a1f4fdb3e42c1508241f2361843d08e9040a018b7efa19286998f"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_EXPRESSIONS={0xb4, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x5c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x47}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY={0x200, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "5136f65145372fcd0b108a7eb1529bc4795c29e34d1940de10beaa070dba820df704cbf73e0283b9c62326fd0faf38f0a13795836cd8e0c5592f0b6abdd7c600076cf22f977b77b35261bedaac941ac26ee22530edf7df7399bb6cf66d7de5b3f2d55ba6a89a59cc7008b70d24"}, @NFTA_DATA_VALUE={0xbe, 0x1, "30ee3d88434b198b873d04195c55f900e630dc10a5345f48c930fec869e66088ea72470a55ea4e59e43c172681d846d41dda2ef81feb7534597e581c6e391a6a8048dd2dbe58853e24374d348fefab38bd7a9e3f78c582aaa31a6585df13eb50ea710e3712f7243346d78f58c5e4c26a633b0247f125cfedbb6eef16bb6a5d85058de4aec01b19bffb033aae878c586496b46ad391f85826e0aab209c78ff8db30fbaa3345392d6d551e46a91386a22f6735c4aaf4013a0edcbd"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "021d9ddb4446e834e2bebe6473af4762b58bf1843a3d0b75f392ee1295492de065ff63c0401236b3434ddbcf5b58c3e095b30cdff7ea55e3b5b09cc32bbeaf16e6a11a9fcd655682b3fc05a0cabecac4337ae192548470f64baaa974c93ad94cb3440839b8082f74e0e1237c4a330cdc4a5006a3839cf2d89fd529761c5c5824583fedd536018e6f9cf74b3855876d0511dabd7a1639"}]}, @NFTA_SET_ELEM_KEY_END={0x260, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xf5e4c39a4c372e71}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4f, 0x1, "037abf8a2c141902f4038cfd726f7903d8ebd9d047a83c1e1c10a11dc9b6beeb5c4fa8e0333ea2710278a47cc633e728c464d82cf297aa3264809f714e0f393763cba650510f230649546b"}, @NFTA_DATA_VALUE={0x66, 0x1, "9c9b1111b9d37757f5d5d844a79df948d2a0bb59522d018d83a0091ed3fe6a74d025e2bd7f60dc58546abefa913dbadeaf39d67fd0be21550d71b518c6d48f4540dcbe8aaea23c0e378e82a62de335cfe770db0691ca06360c9bd0d462f49bee76f1"}, @NFTA_DATA_VALUE={0xf, 0x1, "2fd901ea45532f3b45407d"}, @NFTA_DATA_VALUE={0x10, 0x1, "af14325e83fdda73ed2ba0d1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x98, 0x1, "d8f39103c074d7cf28a88f912f3b51c6cd0d617a0114d76b58bb1a5c0b28d3e8b8f909c1f533606ecd6415f1a1b64469b38cb2d97f57ad773639741f1580c10d1b1b0a82223ca0a1de0ce7ef7223ac8b1bae2bf6bab9e69b3c046c49b72b923eefd743af776a6d6a7cb40d0b01b5d02efd80aff86e63e7180243e82e9e40d6832a801d70d5c5ad7c4a250fd235fc137e02330689"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1f28, 0x3, 0x0, 0x1, [{0x2b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2a4, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x294, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_INNER_EXPR={0x25c, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x248, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x244, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "98d58742ebb5534b230fb33a75039170a7f43ea9893ae001bb63afa1187dac16242dba532f352d4683716269d71e28ea80e7ce009d3008f8472a9b0b41c8c21c80be13a98899c4ae29ca6c8e1a59d058d9a2a28a8a04bb8dab6473beabeee4f69dc75c57aeaea5af44840c4cb665ffaddaa9bdc3c0f35f40eb4264922057e50c397412dc3511745c3782d8a33c688e76606b3924647772007f1845053f65345cc77fa9d9"}, @NFTA_DATA_VALUE={0xea, 0x1, "e555dd2a6bcdca69b302bbb1e6e7f7bfe4a0e3b0e94cd6406c435b96183b3bda9f67e99ab7f1d2b6518620f2bc0072ce767933e9084ff9ffdfc16d3e54c2082e102f5326a10a28faa3ae5775721afb87fc2b90115664b22fc0c4d205ca1eca72a6a1da0fa52cd6231faeb561f66a60ff30b9f8124a705f711458ebd56bf5e475f78795a9806d8bfcfde3fbbec75c82d437307638992aff585227bbb88d13201a1254054b89b750e12ce00e9e8b65646d341f1acc324faf8619d9c3fe24d10e6c718fdab57106323d693b63969e17d2f01027fbe25bb966c044fac72c3d176b7e81546a64075c"}, @NFTA_DATA_VALUE={0x46, 0x1, "1d761207b0d624ec61fcda48833c684ca61040569b6f865dd60a2274fcf3ff091f15d3b765e789e3b3c37b6a235d0d914afc9265e0d9ea54d84ca5dffe26c2e2f556"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1374, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1358, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x91, 0x1, "d723189662e9ae7517a8a923ab3dd944ed30a313a400e034bd0e8a0c86cc9634ed91987090dd21893559e74523cddca135c1e22acf258441078ac21c2c81871b8a51672855f146417e95cb2ff4453a9e7cd20e4124d95174b315465e6b5374d17eccaba2a5b86399df041c4d88908d6d382de3516dd1363ff7f80131cf6011c1b7bc3338363f2cd845e65a28b1"}, @NFTA_DATA_VALUE={0x81, 0x1, "b2e77fe8ceb77fe3cd12c7974a224c15212cb0c927fc77308657b5e5f4a06f51b16eb4afd91d68be18bd4c004c8e95a8debdbafad930b60f0b284cd90b3c195dcd1b1a77bff45fcb1654a6e0b5a85ef086d196e5decff0ed0984697edcc1a67203bb81a1a4f756f87f6a517156d9589e03f768786475cf88577c92c746"}, @NFTA_DATA_VALUE={0xd0, 0x1, "4aaea5d1a1bc6d1c9d4b59461c797e99e4552b45a3338df3579231d08d5638ec5ff6c065d01fdf4ecc34f45c7d9ab8e3469f545b8f0ea6e4d268486b5f06b3bb55b4759eb0986244f4c0b855960c65f5e8bee643effccf7285b23ab92f4140bd8b53aa06fffea942f74eb232f5108f843db4c04b6266382cd7b8a0464d7655ac5134891b0a4689ae0fe7b84e57c958f8bf3f69260540a41ce90b46164b1e414283818de300133a1b305018fe7ce2fc6b4715baf75213f00af2e04ab5578bd314263df6f0dace4af124a32477"}, @NFTA_DATA_VALUE={0xf4, 0x1, "635c3d36e51f2053d17dabc9ab12ad06302bdcd4240f56ea71c12d3fbad4ba697f5f2af8a97673c4a421fd1dc2f6f9c78ae740e35fd17d5a8388e4f27e7e4a3045d21ef8a423e53acea1c4f0562e59a5ef0e2803896f1150adbe19f3fc55e78a5e2f78bddf07676100f289c648aab2744e9c32f5fec872aa8c6001c1f061306d5d1fc15cd53c89e2f05c693a0d4529a5cd704f76c865a67343d32abf1e6246c0ad914c23cb85e32c0f945dc53613c6443e83678fe8c0476209086ea2679cedcfca544aff8bc34c8cbac68f7ca3aa6d7354b084709319ee68d7f1b9f1d7a4db6385aa3089a4c888697efb4feab332aa3e"}, @NFTA_DATA_VALUE={0x5, 0x1, "cb"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x18, 0x1, "56e8de9aa7355323fb9c9f11775c9605396711c1"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}]}, {0x33c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "1fd0dbcb4a6255d2d62d6827c50d274931a80a54393b575d65d8da033f46cc0f6520edd19d9a7403a4dcaeda9dabb1899fd0dd43a0985d27a906908165b6f3f1ae5a7c72f607b1d1f6e3038203db5a49a93d525f4a7d50db338d860b7a50fc5b0159cdfac17b8ddcaa6b986b30981e9a168746e2441bccb0da72487e30f0abc5638eb44bba310f3db2ce64be43d0a86ab73b6414668fa8f78542bc2a99260880d879bd4d653a21f8efd673203eda"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0xa8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa4, 0x1, "f324f22d0d34f8d3d0ea5f77c8e11a975c894f0c6ef7ddd29e68ffca7c46b2e6753a144865995c670f44fe9d3cc37c56f7e99f227613df29e1f09a23d771d60027eb113cd5b1802f27c9a0461c5270fc4a988de02da530513d3c0f4c6198f42216e3074594aae74db82c9e3039cdd6dc507b5949f5f5fc518e7d70a4566806394973e62b392a8f1d226627be310cb77f856fc1f60d393e9a61c215e527cf8deb"}]}, @NFTA_SET_ELEM_DATA={0x120, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "a97eb5a3f34b1912eb5374c7d5e8f368be366d18cb5230ac8704c1f0f6dcf1f8354bf41602997d9f2513553f9ae0316936d64a0d2a41f791eac253c82671c4169596c8212c8482b8865dc3bbd436469282b5428384b80752d0e423d0639e19a7b5b35c11037e91f1bffb4bd74a6a7d92bd76efbb8fd23c65f8ccda2adfe8634f588a8e91958bccf46f646b5bb0844d974e2894554008bf0e3adab7f075203b22d40d485671c181edf11703979611199512eacdadf4a5f9b8"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x354, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0x8, 0x3, "5b3143ab"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_DYNSET_SET_ID={0x8}]}}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x16c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9a, 0x1, "b4aefb260fd7688071915df304640a7df405265598cb8efca6db8f82666fd33c5ea97a49ad4ff267a3b2ce3a879304074882588e16ef748760b5f9bf29312d9dfc0fe8688aacf3f01c902c81beafbc0601574cc1a4d16d825c7f1a91ddccea4c4de2e2c4b48417f99a4d7f1206667f704af01062b59fc3bfd36af43b5ddae823d018805e5e052772ea4bfd773449aa776f55ee6718fa"}, @NFTA_DATA_VALUE={0xb, 0x1, "2881e082af2786"}, @NFTA_DATA_VALUE={0x8b, 0x1, "12c80df6b4ad6148f0aea50a8111ea5eed6cd60ea1d38ef4ea762d7c7db8b7b7699e1886228ad2dbb7f79f68e26b407ca8c4dd75062f10d0323f4a0a36105bace02d0b163c74ce36b22b4f57a717a15bf25c6308e598d912ea211c47cd2399a5aae922fd0566db8873aa46fd5a41e5132e074cae943747e3edd2018078b4f24cfe651d14fcfba0"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdb, 0x1, "2a2d8b1158bc1f2410df52c426d7f54c6656e121bd254110c5bc368722fd2a858071821999b0e9a2bd21968bc86e975e46a3ebb8ebb6db91c77dd0caf3bd406d7f1aafcc42533deaa5547cb4a9fddb4ce3d78731440d75bf8bc0d528b85d338740458322e7683d8dd0e8b2099156afd98d8824b4435a6b53d9dcbf9d821604620579a60433ee6d5e71782968f6d6774d9d46d6c4e932e4672efa4a7e75a8f80d8c58ecca1909135241f9bfd29cf2d10c6db3d3a695e33ac7d37fc4d92fe2a0170eff8a8ff4750d5f7b286ebd69e0c7ff2543e721773c42"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, {0x168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x158, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xe0, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xd0, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8c, 0x3, "37fb33429bf7d4b7f523e5c1acf225b0c444c28ae29f2b9d241cb1b67104d53d4ce95b98830bea6ad8a3b204243918b072bbdfb79b0ab2812eb1da990cc188dea0813644847f22da3b9a9f212b4395b89730b0d0911eca913bba1a08cd1190044eb45da630d014958014378de53524c433811cbe422f960f644d4300c2ea3ceddb3fc0bbbddba8eb"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0x9, 0x1, 'DNAT\x00'}, @NFTA_TARGET_REV={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x90, 0x6, 0x1, 0x0, "bf2d785011b76077cb4b9d1edf7a65f64866a9f3202dfc85d725420d21de63c6719e9ff3ee5ec3469840341a289c1e2a18bf13a6086924fa581ad170840f262477451f7768e650d5851915ca2351221083facad9a4700b8bfb8cb7fb9f1dfeb7215bf3896b98e71444ee666f854c32c3bd1110344f8f1137d30aade189e96231c36037f7ff3d30a0e850d886"}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xbe}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x262c, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}]}, {0x23bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x73, 0x1, "9bbd5022d2b4813a749186c8ffc6a508333dc37896ec5e41eab051a15a0bcf3a344d4adebf57b42a69abb688d23c492328de643128d2c80c472158bae1174c1fdc74ba46c507efd41666d20edd6a054294273cb2febbd1dc69e713badffe74d5708bc64912a08836bfeda374ac1be7"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x4d, 0x1, "8de150204a553c2c06033b8a88d9f9a02de5de6bf946fb5f9a5e6e059aef27631712b6540fe64649340212bb99a66b0957f11b48690a3d01ea994aec878f1d5b529d6186decad7fa6f"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x479a}, @NFTA_SET_ELEM_KEY_END={0xbc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x78}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1200, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xec, 0x1, "872db1f82bacf1b5fc332efa1c239d7ce7a4e37a78105c6769acd125402c6b2cd938d4cb572ad6b91ee21e65834e7d7c883e0168eeebe2f37b7b016a91d04c11f211ef8128666ce0c141d0b4198763658b997d8dd87d5a27d0f6c69465ccce375009fc3992b1e8ff0227e029551ad1852b681ddffbc9b2ce7ce3303e0d6e17b6e137a0e245c82f15e45035dd022c749d22ec38a954938d450555229fd6acf90a41f60dc3f64cb21bbb232665f5defa3ce267cea1413e7fb572fde5bbf06867811b5a289e4fa3e85adcc0931a75b47b35ddaa51bb50aa2f3df022ee6b66a3090b2a7972830d716596"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x29, 0x1, "fc58a2d4f81e20877cf2964e189e9b86b66064e4738b83b856b1ee71411b5f872fd913ed1f"}, @NFTA_DATA_VALUE={0x51, 0x1, "dbdde30625ef64a222d86c6cbe087f13dec482d95bf6c81989eda2eb44ae02b72d4ee73f7be865a5241de3e920e3c9ca15cd355a13282a0fa94c5e71b25821d5290da5502539d2ec7838c008f8"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x23c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc0000000000}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_USERDATA={0x2e, 0x6, 0x1, 0x0, "c18df7de5a6e487069153ac0cdaacde54f18f33f8292e9239f0ba5b9b9a35f762b1c522980695838f502"}, @NFTA_SET_ELEM_KEY={0x1d0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "960a1f6fb76e4a96a50c743d399530aed0faf341fccb79c8d0863f217d7b15f9e837a40ceaa5f254373d8f99c295bf1110a3bdcf2a3fbdc7c5d5dfca924e82ab6f497f1f9f3155febd101537ceacbb2101aa202202ccce7f30323668ab80df60230c25591d8f309a79d9c7f8644b58a82f3ec4354f09b0ef3849ef337e4f0a2664e8ee4d3761353d90f3e6b688448300dd2ebb5e8449818f520b897ce82f51c3e4fed8add963a0ce15aa23587b366cd64644fccf607a6b8ca6411c18ede98c97a4bc31c6313cff98bb2d589b69df6e15a231ddc65d0d8faa82"}, @NFTA_DATA_VALUE={0x8e, 0x1, "6362f0fd7af6c4630063525f68318445b3fd66cb064a3fd58e7ce6d4182a8e503f0972fc9b9c566568f8c124ecb514d3e2e0bbf98411da46b6036414f351175ab3882cf0bb5a85b81cb4143541d8abc9fc38641f0ab20fc2d63e57215864d862f46c24cce8dfd38c1c38782d019fbb5c27fc9482510b17691507b6cb606f5f7f484a9c611e9eb9532070"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xee3d}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xd054}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4eec}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) 214.376016ms ago: executing program 1 (id=2712): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000800000000000000050000006311d400000000009500000000000000fedc9c651202e9276fc3b91fef91b90f5012897249f4d86da709be275a1a378edd019b8cbfaf1f14353f98143d5343062cf20a38fa4db25c172d57bf2aafd60752df81cd229af88a72f5ac6c6d3b120652916b451da65099f46874adb98dcc56ff6961fdd4a5173fa9b943f898dac73305962ccd433cef3e457f4b47"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x20, 0x0, 0xfffffffffffffffe, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1fffffff, 0x5718}, 0x20, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x87) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 13.27791ms ago: executing program 0 (id=2713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) process_mrelease(r3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x25, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000040000000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018460000000000000000000000000000185400000a000000000000000000000018290000", @ANYRES32=r2, @ANYBLOB="00000000050002001811764222786bafd90ba905bb120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000186400000d0000000000000005000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xa, 0x9, 0xd}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x1], &(0x7f0000000800)=[{0x5, 0x2, 0x3, 0x4}], 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%ps \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000200)="51e1551ce7", &(0x7f0000000100)=""/27, &(0x7f0000000140), &(0x7f0000000300), 0x4, r6}, 0x38) r7 = syz_open_dev$vcsa(&(0x7f00000009c0), 0x3, 0x101102) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x1d, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb64f, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x149}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x3, 0x1, 0x2, 0x344769cc837e186a, 0x1, 0x50, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000440)='GPL\x00', 0x3, 0x99, &(0x7f0000000b80)=""/153, 0x0, 0x68, '\x00', 0x0, @fallback=0xf, r3, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xd, 0x3ff, 0x800}, 0x10, 0xffffffffffffffff, r4, 0x8, &(0x7f0000000a00)=[0xffffffffffffffff, r5, r6, r7, 0x1], &(0x7f0000000a40)=[{0x1, 0x3, 0x2, 0x1}, {0x0, 0x5, 0x9, 0x7}, {0x2, 0x5, 0x3, 0xb}, {0x1, 0x4, 0x4, 0x7}, {0x5, 0x1, 0xe, 0x5}, {0x2, 0x4}, {0x5, 0x2, 0x9, 0x8}, {0x1, 0x3, 0xd, 0xa}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r12, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a8", 0x16) sendfile(r12, r11, 0x0, 0x3ffff) sendfile(r12, r11, 0x0, 0x7fffeffd) r13 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r14, 0x0, 0x0) sendfile(r14, r13, 0x0, 0x3ffff) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500005c000000000033907800000000ffffffff000000000048907803000000041fa3883e21cd9fe5caae18544a9131d14c91cf0d355079896e447a58f2e6a0893330bdb477ae5aa67404b54c7740eb6dcb6c5545363eff42"], 0x0) 11.28588ms ago: executing program 1 (id=2714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0xa0000001}) epoll_wait(r4, &(0x7f00000000c0)=[{}, {}], 0x2, 0x44001006) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0xa}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}}}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) 10.18866ms ago: executing program 6 (id=2715): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 9.31354ms ago: executing program 2 (id=2716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (fail_nth: 1) 0s ago: executing program 6 (id=2717): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) sigaltstack(&(0x7f0000000400)={&(0x7f0000000640)=""/75, 0x80000000, 0x4b}, &(0x7f0000000740)={&(0x7f00000006c0)=""/121, 0x0, 0x79}) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, r4, &(0x7f00000001c0)='./file0\x00') mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00ت0& 5) failed with errno=-22 [ 133.643727][ T29] audit: type=1326 audit(1759274974.960:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.6.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3979f1eec9 code=0x7ffc0000 [ 133.703794][ T29] audit: type=1326 audit(1759274974.960:10792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.6.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3979f1eec9 code=0x7ffc0000 [ 133.727677][ T29] audit: type=1326 audit(1759274974.960:10793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.6.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3979f1eec9 code=0x7ffc0000 [ 133.857867][ T8517] loop0: detected capacity change from 0 to 1024 [ 133.872146][ T8518] loop9: detected capacity change from 0 to 7 [ 133.879496][ T8518] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.888523][ T8518] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.890356][ T8517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.896958][ T8518] loop9: unable to read partition table [ 133.897075][ T8518] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 133.897075][ T8518] ) failed (rc=-5) [ 133.918431][ T8517] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.971326][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.991619][ T8526] batadv0: left allmulticast mode [ 133.996814][ T8526] batadv0: left promiscuous mode [ 134.002214][ T8526] bridge0: port 4(batadv0) entered disabled state [ 134.011636][ T8526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.021326][ T8526] .`: (slave batadv0): Enslaving as an active interface with an up link [ 134.042524][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.053732][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.130710][ T8535] vhci_hcd: invalid port number 96 [ 134.136185][ T8535] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 134.325928][ T8547] loop6: detected capacity change from 0 to 512 [ 134.332815][ T8547] EXT4-fs: Invalid want_extra_isize 67108865 [ 134.404698][ T8551] loop6: detected capacity change from 0 to 1024 [ 134.420734][ T8551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.433266][ T8543] rdma_rxe: rxe_newlink: failed to add lo [ 134.442774][ T8551] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.454248][ T8551] __nla_validate_parse: 11 callbacks suppressed [ 134.454267][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1842'. [ 134.485080][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.608099][ T8564] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1846'. [ 134.662623][ T8568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'. [ 134.681175][ T8566] vhci_hcd: invalid port number 96 [ 134.686980][ T8566] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 134.791025][ T8574] loop6: detected capacity change from 0 to 512 [ 134.801403][ T8574] EXT4-fs: Invalid want_extra_isize 67108865 [ 134.833530][ T8576] loop9: detected capacity change from 0 to 7 [ 134.840591][ T8576] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.848739][ T8576] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.856711][ T8576] loop9: unable to read partition table [ 134.862824][ T8576] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 134.862824][ T8576] ) failed (rc=-5) [ 134.935058][ T8582] SELinux: security_context_str_to_sid (žbUZR閾,s֧pDxsG+UHC^՗xpp9hdzT_VbѪ_j) failed with errno=-22 [ 134.960888][ T8581] loop6: detected capacity change from 0 to 1024 [ 134.983587][ T8581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.006999][ T8581] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.019664][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1854'. [ 135.043561][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.080950][ T8586] vhci_hcd: invalid port number 96 [ 135.086363][ T8586] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 135.158732][ T8594] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1859'. [ 135.186758][ T8596] validate_nla: 9 callbacks suppressed [ 135.186785][ T8596] netlink: 'syz.6.1860': attribute type 10 has an invalid length. [ 135.189114][ T8598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'. [ 135.192783][ T8596] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1860'. [ 135.255915][ T8604] loop9: detected capacity change from 0 to 7 [ 135.262628][ T8604] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.270726][ T8604] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.278729][ T8604] loop9: unable to read partition table [ 135.284629][ T8604] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 135.284629][ T8604] ) failed (rc=-5) [ 135.354868][ T8600] loop5: detected capacity change from 0 to 512 [ 135.371929][ T8600] EXT4-fs: Invalid want_extra_isize 67108865 [ 135.403248][ T8610] loop0: detected capacity change from 0 to 1024 [ 135.421777][ T8610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.435511][ T8610] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.451952][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1866'. [ 135.478110][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.510925][ T8619] netlink: 'syz.2.1869': attribute type 10 has an invalid length. [ 135.677912][ T8628] netlink: 'syz.1.1873': attribute type 4 has an invalid length. [ 135.685819][ T8628] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1873'. [ 135.734826][ T8633] netlink: 'syz.1.1874': attribute type 10 has an invalid length. [ 135.743170][ T8633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1874'. [ 135.784877][ T8635] loop9: detected capacity change from 0 to 7 [ 135.791492][ T8635] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.800714][ T8635] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.809285][ T8635] loop9: unable to read partition table [ 135.820371][ T8638] rdma_rxe: rxe_newlink: failed to add lo [ 135.828387][ T8635] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 135.828387][ T8635] ) failed (rc=-5) [ 136.068945][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.079404][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.138823][ T8646] netlink: 'syz.5.1880': attribute type 10 has an invalid length. [ 136.256669][ T8657] loop6: detected capacity change from 0 to 1024 [ 136.270270][ T8657] EXT4-fs: Ignoring removed orlov option [ 136.278765][ T8657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.646519][ T8667] netlink: 'syz.0.1886': attribute type 4 has an invalid length. [ 136.656769][ T8668] loop9: detected capacity change from 0 to 7 [ 136.664987][ T8668] Buffer I/O error on dev loop9, logical block 0, async page read [ 136.678812][ T8668] Buffer I/O error on dev loop9, logical block 0, async page read [ 136.686877][ T8668] loop9: unable to read partition table [ 136.692961][ T8668] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 136.692961][ T8668] ) failed (rc=-5) [ 136.834347][ T8681] netlink: 'syz.1.1891': attribute type 10 has an invalid length. [ 136.953905][ T8683] siw: device registration error -23 [ 137.004707][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.052790][ T8689] netlink: 'syz.1.1895': attribute type 10 has an invalid length. [ 137.067738][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.076707][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.171908][ T8695] vhci_hcd: invalid port number 96 [ 137.177507][ T8695] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 137.238475][ T8700] loop5: detected capacity change from 0 to 1024 [ 137.249133][ T8700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.261551][ T8700] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.283502][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.331512][ T8707] netlink: 'syz.5.1902': attribute type 10 has an invalid length. [ 137.474114][ T8711] siw: device registration error -23 [ 137.609499][ T8717] netlink: 'syz.0.1907': attribute type 10 has an invalid length. [ 137.634348][ T8718] loop5: detected capacity change from 0 to 1024 [ 137.646074][ T8718] EXT4-fs: Ignoring removed orlov option [ 137.660632][ T8718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.739036][ T8731] loop0: detected capacity change from 0 to 512 [ 137.747647][ T8731] EXT4-fs: Invalid want_extra_isize 67108865 [ 137.757043][ T8730] loop9: detected capacity change from 0 to 7 [ 137.773665][ T8730] loop9: unable to read partition table [ 137.790865][ T8730] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 137.790865][ T8730] ) failed (rc=-5) [ 137.921134][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.933216][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.986380][ T8751] loop1: detected capacity change from 0 to 1024 [ 138.000867][ T8751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.014193][ T8751] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.036559][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.080573][ T8755] vhci_hcd: invalid port number 96 [ 138.085925][ T8755] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 138.178293][ T8758] loop1: detected capacity change from 0 to 512 [ 138.185049][ T8758] EXT4-fs: Invalid want_extra_isize 67108865 [ 138.249232][ T8764] loop9: detected capacity change from 0 to 7 [ 138.255941][ T8764] loop9: unable to read partition table [ 138.262404][ T8764] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 138.262404][ T8764] ) failed (rc=-5) [ 138.377919][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.454757][ T8777] loop1: detected capacity change from 0 to 1024 [ 138.469259][ T8777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.481886][ T8777] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.499574][ T8779] vhci_hcd: invalid port number 96 [ 138.505108][ T8779] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 138.512982][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.594322][ T8789] loop1: detected capacity change from 0 to 512 [ 138.610292][ T8789] EXT4-fs: Invalid want_extra_isize 67108865 [ 138.634549][ T8791] loop9: detected capacity change from 0 to 7 [ 138.641413][ T8791] loop9: unable to read partition table [ 138.647510][ T8791] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 138.647510][ T8791] ) failed (rc=-5) [ 138.748964][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 138.749029][ T29] audit: type=1326 audit(1759274980.250:11354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 138.787058][ T8804] loop1: detected capacity change from 0 to 1024 [ 138.797842][ T8804] EXT4-fs: Ignoring removed orlov option [ 138.807869][ T8804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.821443][ T29] audit: type=1326 audit(1759274980.250:11355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 138.845295][ T29] audit: type=1326 audit(1759274980.250:11356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 138.869294][ T29] audit: type=1326 audit(1759274980.250:11357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 138.893177][ T29] audit: type=1326 audit(1759274980.250:11358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 138.903593][ T8811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.916771][ T29] audit: type=1326 audit(1759274980.250:11359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 138.916809][ T29] audit: type=1326 audit(1759274980.250:11360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 138.974333][ T29] audit: type=1326 audit(1759274980.250:11361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 138.998801][ T29] audit: type=1326 audit(1759274980.250:11362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 139.022219][ T8811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.022672][ T29] audit: type=1326 audit(1759274980.250:11363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 139.056341][ T8807] loop6: detected capacity change from 0 to 1024 [ 139.070359][ T8807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.083740][ T8807] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.105601][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.119961][ T8819] vhci_hcd: invalid port number 96 [ 139.125259][ T8819] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 139.213868][ T8829] loop6: detected capacity change from 0 to 512 [ 139.221267][ T8829] EXT4-fs: Invalid want_extra_isize 67108865 [ 139.298523][ T8834] loop9: detected capacity change from 0 to 7 [ 139.304821][ T8834] buffer_io_error: 6 callbacks suppressed [ 139.304832][ T8834] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.318675][ T8834] Buffer I/O error on dev loop9, logical block 0, async page read [ 139.326529][ T8834] loop9: unable to read partition table [ 139.332273][ T8834] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 139.332273][ T8834] ) failed (rc=-5) [ 139.470861][ T8837] siw: device registration error -23 [ 139.560962][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.701936][ T8846] loop2: detected capacity change from 0 to 1024 [ 139.735827][ T8846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.750829][ T8846] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.766283][ T8846] __nla_validate_parse: 13 callbacks suppressed [ 139.766301][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1956'. [ 139.800512][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.860755][ T8852] rdma_rxe: rxe_newlink: failed to add lo [ 139.915153][ T8854] vhci_hcd: invalid port number 96 [ 139.920469][ T8854] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 140.104150][ T8871] loop0: detected capacity change from 0 to 512 [ 140.110864][ T8871] EXT4-fs: Invalid want_extra_isize 67108865 [ 140.145579][ T8873] loop9: detected capacity change from 0 to 7 [ 140.155395][ T8873] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.168597][ T8874] loop6: detected capacity change from 0 to 1024 [ 140.175455][ T8874] EXT4-fs: Ignoring removed orlov option [ 140.184319][ T8873] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.192340][ T8873] loop9: unable to read partition table [ 140.208310][ T8874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.227530][ T8873] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 140.227530][ T8873] ) failed (rc=-5) [ 140.399187][ T8880] loop5: detected capacity change from 0 to 1024 [ 140.420373][ T8880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.438147][ T8880] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.468130][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1967'. [ 140.528854][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.679532][ T8902] loop0: detected capacity change from 0 to 512 [ 140.687773][ T8902] EXT4-fs: Invalid want_extra_isize 67108865 [ 140.697312][ T8901] vhci_hcd: invalid port number 96 [ 140.702751][ T8901] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 140.825358][ T8907] loop0: detected capacity change from 0 to 512 [ 140.838898][ T8907] EXT4-fs: Invalid want_extra_isize 67108865 [ 140.864823][ T8910] validate_nla: 5 callbacks suppressed [ 140.864843][ T8910] netlink: 'syz.2.1978': attribute type 10 has an invalid length. [ 140.878474][ T8910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1978'. [ 140.911056][ T8912] loop9: detected capacity change from 0 to 7 [ 140.917869][ T8912] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.926096][ T8912] Buffer I/O error on dev loop9, logical block 0, async page read [ 140.934018][ T8912] loop9: unable to read partition table [ 140.940120][ T8912] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 140.940120][ T8912] ) failed (rc=-5) [ 140.941990][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.015823][ T8920] loop2: detected capacity change from 0 to 1024 [ 141.032875][ T8920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.045510][ T8920] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.057325][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1982'. [ 141.082190][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.104829][ T8931] netlink: 'syz.6.1987': attribute type 4 has an invalid length. [ 141.112673][ T8931] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1987'. [ 141.210194][ T8939] loop6: detected capacity change from 0 to 512 [ 141.216973][ T8939] EXT4-fs: Invalid want_extra_isize 67108865 [ 141.234011][ T8935] siw: device registration error -23 [ 141.251067][ T8941] netlink: 'syz.6.1990': attribute type 10 has an invalid length. [ 141.258986][ T8941] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1990'. [ 141.338738][ T8950] netlink: 'syz.2.1994': attribute type 10 has an invalid length. [ 141.347123][ T8950] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1994'. [ 141.366302][ T8950] loop2: detected capacity change from 0 to 512 [ 141.396191][ T8956] loop6: detected capacity change from 0 to 1024 [ 141.421523][ T8956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.434186][ T8956] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.445865][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1997'. [ 141.468774][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.560202][ T8968] loop6: detected capacity change from 0 to 512 [ 141.566873][ T8968] EXT4-fs: Invalid want_extra_isize 67108865 [ 141.645570][ T8974] netlink: 'syz.5.2004': attribute type 10 has an invalid length. [ 141.654162][ T8974] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2004'. [ 141.689240][ T8970] siw: device registration error -23 [ 141.773476][ T8985] netlink: 'syz.6.2009': attribute type 10 has an invalid length. [ 141.781965][ T8985] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2009'. [ 141.803448][ T8985] loop6: detected capacity change from 0 to 512 [ 141.839840][ T8989] loop5: detected capacity change from 0 to 1024 [ 141.859351][ T8989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.872355][ T8989] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.895391][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.985690][ T9002] netlink: 'syz.0.2016': attribute type 10 has an invalid length. [ 142.034147][ T9007] loop9: detected capacity change from 0 to 7 [ 142.040774][ T9007] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.049197][ T9007] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.057954][ T9007] loop9: unable to read partition table [ 142.064103][ T9007] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 142.064103][ T9007] ) failed (rc=-5) [ 142.153198][ T9013] SELinux: security_context_str_to_sid ( 9!!U}T,'Hj7HI}D#@w}>!@,0ڛ\?Xl?, A1~)ZZiWύ@+6ہH6:a]_.b/ ?D pm6~p~EIR}72h1\nك%]Ze}с&j{) [ 142.153198][ T9013] e,=Xw,H`) failed with errno=-22 [ 142.352424][ T9026] vhci_hcd: invalid port number 96 [ 142.357830][ T9026] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 142.386717][ T9030] vhci_hcd: invalid port number 96 [ 142.392132][ T9030] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 142.438035][ T9032] loop0: detected capacity change from 0 to 1024 [ 142.460252][ T9032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.472617][ T9032] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.495551][ T9035] loop2: detected capacity change from 0 to 1024 [ 142.503545][ T9035] EXT4-fs: Ignoring removed orlov option [ 142.512665][ T9035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.600109][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.736655][ T9045] netlink: 'syz.6.2031': attribute type 10 has an invalid length. [ 142.880126][ T9053] loop6: detected capacity change from 0 to 1024 [ 142.900671][ T9053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.913568][ T9053] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.952475][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.963535][ T9056] loop5: detected capacity change from 0 to 1024 [ 142.973296][ T9056] EXT4-fs: Ignoring removed orlov option [ 142.988226][ T9056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.084119][ T9068] vhci_hcd: invalid port number 96 [ 143.089380][ T9068] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 143.287216][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.388020][ T9080] rdma_rxe: rxe_newlink: failed to add lo [ 143.545581][ T9083] loop0: detected capacity change from 0 to 512 [ 143.568568][ T9083] EXT4-fs: Invalid want_extra_isize 67108865 [ 143.750326][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.777422][ T29] kauditd_printk_skb: 552 callbacks suppressed [ 143.777442][ T29] audit: type=1326 audit(1759274985.270:11916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.5.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 143.808552][ T29] audit: type=1326 audit(1759274985.270:11917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.5.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 143.810979][ T9088] netlink: 'syz.5.2045': attribute type 10 has an invalid length. [ 143.888373][ T29] audit: type=1326 audit(1759274985.290:11918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.5.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 143.913616][ T29] audit: type=1326 audit(1759274985.290:11919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.5.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 143.941450][ T29] audit: type=1326 audit(1759274985.290:11920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.5.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 143.967525][ T29] audit: type=1326 audit(1759274985.290:11921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.5.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 143.991197][ T29] audit: type=1326 audit(1759274985.290:11922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.5.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 144.014819][ T29] audit: type=1326 audit(1759274985.290:11923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.5.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 144.038344][ T29] audit: type=1326 audit(1759274985.290:11924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.5.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 144.063170][ T29] audit: type=1326 audit(1759274985.290:11925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.5.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 144.072490][ T9095] SELinux: security_context_str_to_sid (UꚿoIE'g7V<}8m2XV9}^) failed with errno=-22 [ 144.154009][ T9092] netlink: 'syz.5.2047': attribute type 10 has an invalid length. [ 144.218543][ T9092] loop5: detected capacity change from 0 to 512 [ 144.294919][ T9102] vhci_hcd: invalid port number 96 [ 144.300285][ T9102] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 144.332516][ T9104] loop5: detected capacity change from 0 to 1024 [ 144.350620][ T9104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.414491][ T9104] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.448540][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.489993][ T9116] loop2: detected capacity change from 0 to 1024 [ 144.498976][ T9116] EXT4-fs: Ignoring removed orlov option [ 144.507794][ T9116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.521258][ T9120] loop1: detected capacity change from 0 to 512 [ 144.532795][ T9120] EXT4-fs: Invalid want_extra_isize 67108865 [ 144.554543][ T9115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.572821][ T9115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.885745][ T9130] loop1: detected capacity change from 0 to 512 [ 144.895454][ T9130] EXT4-fs: Invalid want_extra_isize 67108865 [ 144.989473][ T9137] __nla_validate_parse: 10 callbacks suppressed [ 144.989496][ T9137] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2061'. [ 145.112241][ T9145] loop1: detected capacity change from 0 to 1024 [ 145.133415][ T9145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.140160][ T9147] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2066'. [ 145.168084][ T9145] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.181909][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2065'. [ 145.204022][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.215959][ T9151] vhci_hcd: invalid port number 96 [ 145.221359][ T9151] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 145.369209][ T9153] siw: device registration error -23 [ 145.399066][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.410920][ T9160] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2072'. [ 145.449460][ T9165] loop0: detected capacity change from 0 to 512 [ 145.450533][ T9167] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2073'. [ 145.465367][ T9165] EXT4-fs: Invalid want_extra_isize 67108865 [ 145.539401][ T9173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2077'. [ 145.581694][ T9177] loop5: detected capacity change from 0 to 1024 [ 145.591511][ T9179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2080'. [ 145.601086][ T9180] loop0: detected capacity change from 0 to 1024 [ 145.608560][ T9180] EXT4-fs: Ignoring removed orlov option [ 145.609399][ T9177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.627246][ T9177] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.629489][ T9179] loop2: detected capacity change from 0 to 512 [ 145.643277][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2079'. [ 145.654586][ T9180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.685891][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.807151][ T9185] siw: device registration error -23 [ 145.868120][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2084'. [ 146.218353][ T9200] loop1: detected capacity change from 0 to 512 [ 146.230033][ T9200] EXT4-fs: Invalid want_extra_isize 67108865 [ 146.273336][ T9202] validate_nla: 6 callbacks suppressed [ 146.273399][ T9202] netlink: 'syz.6.2087': attribute type 4 has an invalid length. [ 146.289107][ T9202] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2087'. [ 146.383049][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.450485][ T9209] netlink: 'syz.0.2090': attribute type 10 has an invalid length. [ 146.525033][ T9213] loop0: detected capacity change from 0 to 1024 [ 146.542983][ T9213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.556178][ T9213] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.633710][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.801542][ T9230] netlink: 'syz.0.2099': attribute type 4 has an invalid length. [ 146.848903][ T9233] netlink: 'syz.0.2100': attribute type 10 has an invalid length. [ 146.867697][ T9233] loop0: detected capacity change from 0 to 512 [ 147.053554][ T9245] loop1: detected capacity change from 0 to 1024 [ 147.081094][ T9245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.109656][ T9245] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.137233][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.179333][ T9261] netlink: 'syz.2.2111': attribute type 4 has an invalid length. [ 147.227223][ T9263] netlink: 'syz.2.2112': attribute type 10 has an invalid length. [ 147.248190][ T9263] loop2: detected capacity change from 0 to 512 [ 147.380547][ T9275] SELinux: security_context_str_to_sid (S- t6L1{Fs6U% D,[s"zXNÈ\fqҜHNxMK?5 [ 147.380547][ T9275] 2qf$*͔}>r*]U C[`p+(Jˉ9!czʉܱnyXE/Q13 [ 147.380547][ T9275] DXG/lalD:/lw|) failed with errno=-22 [ 147.414917][ T9274] loop2: detected capacity change from 0 to 512 [ 147.422521][ T9274] EXT4-fs: Invalid want_extra_isize 67108865 [ 148.114344][ T9290] loop6: detected capacity change from 0 to 1024 [ 148.133130][ T9290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.150627][ T9290] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.184538][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.233483][ T9301] netlink: 'syz.6.2123': attribute type 4 has an invalid length. [ 148.278021][ T9299] netlink: 'syz.2.2124': attribute type 10 has an invalid length. [ 148.319159][ T9299] loop2: detected capacity change from 0 to 512 [ 148.347181][ T9308] loop9: detected capacity change from 0 to 7 [ 148.356889][ T9308] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.372887][ T9308] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.381401][ T9308] loop9: unable to read partition table [ 148.387807][ T9314] loop1: detected capacity change from 0 to 512 [ 148.390529][ T9308] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 148.390529][ T9308] ) failed (rc=-5) [ 148.402058][ T9314] EXT4-fs: Invalid want_extra_isize 67108865 [ 148.415357][ T9311] netlink: 'syz.0.2129': attribute type 10 has an invalid length. [ 148.491659][ T9321] loop2: detected capacity change from 0 to 1024 [ 148.524174][ T9321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.557828][ T9321] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.593550][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.633788][ T9326] siw: device registration error -23 [ 148.672551][ T9341] netlink: 'syz.6.2141': attribute type 10 has an invalid length. [ 148.687200][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.698911][ T9341] loop6: detected capacity change from 0 to 512 [ 148.712489][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.013634][ T9358] loop9: detected capacity change from 0 to 7 [ 149.029063][ T9358] Buffer I/O error on dev loop9, logical block 0, async page read [ 149.047779][ T9358] Buffer I/O error on dev loop9, logical block 0, async page read [ 149.056480][ T9358] loop9: unable to read partition table [ 149.078626][ T9358] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 149.078626][ T9358] ) failed (rc=-5) [ 149.082749][ T9364] loop2: detected capacity change from 0 to 1024 [ 149.147263][ T9364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.198696][ T9364] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.275801][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.339836][ T29] kauditd_printk_skb: 825 callbacks suppressed [ 149.339933][ T29] audit: type=1326 audit(1759274990.840:12751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9378 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 149.417027][ T29] audit: type=1326 audit(1759274990.880:12752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9378 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 149.442744][ T29] audit: type=1326 audit(1759274990.880:12753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9378 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 149.466744][ T29] audit: type=1326 audit(1759274990.880:12754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9378 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 149.491490][ T29] audit: type=1326 audit(1759274990.880:12755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9378 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 149.521192][ T29] audit: type=1326 audit(1759274990.880:12756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9378 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 149.546385][ T9373] siw: device registration error -23 [ 149.548979][ T29] audit: type=1326 audit(1759274990.880:12757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9378 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 149.549019][ T29] audit: type=1326 audit(1759274990.880:12758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9378 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 149.549131][ T29] audit: type=1326 audit(1759274990.880:12759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9378 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 149.549168][ T29] audit: type=1326 audit(1759274990.880:12760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9378 comm="syz.2.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 149.627979][ T9391] loop1: detected capacity change from 0 to 1024 [ 149.670960][ T9391] EXT4-fs: Ignoring removed orlov option [ 149.680641][ T9391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.789972][ T9401] loop6: detected capacity change from 0 to 512 [ 149.816683][ T9401] EXT4-fs: Invalid want_extra_isize 67108865 [ 149.836838][ T9404] loop9: detected capacity change from 0 to 7 [ 149.843605][ T9404] Buffer I/O error on dev loop9, logical block 0, async page read [ 149.852407][ T9404] Buffer I/O error on dev loop9, logical block 0, async page read [ 149.860410][ T9404] loop9: unable to read partition table [ 149.866639][ T9404] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 149.866639][ T9404] ) failed (rc=-5) [ 150.003716][ T9406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.012627][ T9406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.123240][ T9409] loop5: detected capacity change from 0 to 1024 [ 150.142124][ T9409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.154836][ T9409] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.166919][ T9409] __nla_validate_parse: 22 callbacks suppressed [ 150.166985][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2165'. [ 150.339156][ T9418] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2168'. [ 150.588322][ T9425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=9425 comm=syz.2.2171 [ 150.693969][ T9429] siw: device registration error -23 [ 150.764676][ T9437] loop0: detected capacity change from 0 to 1024 [ 150.803118][ T9437] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.836566][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2176'. [ 150.910926][ T9443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2177'. [ 150.927378][ T9444] SELinux: security_context_str_to_sid (lu"4GwָA`Hc҅^?!^Rl\*G3}dXBE;kaѾA$^Xev7ﺸ5&.KЫec;6J^(K$.㛭 1v_7,8 7%Kʾ(ek@W(^690f=UN5'" uxGIz/~rhXD^8n&mMa Ŵį}ܘŦw/t) failed with errno=-22 [ 151.083046][ T9451] loop0: detected capacity change from 0 to 1024 [ 151.095461][ T9449] vhci_hcd: invalid port number 96 [ 151.100951][ T9449] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 151.103353][ T9451] EXT4-fs: Ignoring removed orlov option [ 151.301480][ T9463] validate_nla: 4 callbacks suppressed [ 151.301511][ T9463] netlink: 'syz.1.2183': attribute type 10 has an invalid length. [ 151.315203][ T9463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2183'. [ 151.334545][ T9463] loop1: detected capacity change from 0 to 512 [ 151.569116][ T9473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2187'. [ 151.618615][ T9476] loop6: detected capacity change from 0 to 1024 [ 151.633500][ T9478] netlink: 'syz.2.2189': attribute type 10 has an invalid length. [ 151.641752][ T9478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2189'. [ 151.653479][ T9476] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.668098][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2188'. [ 151.702192][ T9482] loop9: detected capacity change from 0 to 7 [ 151.708708][ T9482] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.716948][ T9482] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.725333][ T9482] loop9: unable to read partition table [ 151.731726][ T9482] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 151.731726][ T9482] ) failed (rc=-5) [ 151.876615][ T9490] vhci_hcd: invalid port number 96 [ 151.882096][ T9490] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 151.994876][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.004283][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.217831][ T9513] SELinux: security_context_str_to_sid (@d S [ 152.217831][ T9513] oȝ^yأ- L+}W%' ,@mW ۙ?;}OK3|ϖZ"78̻=Kϙ`%?GT1Ƀ) failed with errno=-22 [ 152.364448][ T9517] netlink: 'syz.5.2202': attribute type 10 has an invalid length. [ 152.372484][ T9517] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2202'. [ 152.416921][ T9519] loop9: detected capacity change from 0 to 7 [ 152.423634][ T9519] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.433032][ T9519] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.441478][ T9519] loop9: unable to read partition table [ 152.448644][ T9519] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 152.448644][ T9519] ) failed (rc=-5) [ 152.562683][ T9521] netlink: 'syz.1.2204': attribute type 10 has an invalid length. [ 152.570852][ T9521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2204'. [ 152.622782][ T9521] loop1: detected capacity change from 0 to 512 [ 152.741492][ T9537] vhci_hcd: invalid port number 96 [ 152.747250][ T9537] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 152.777640][ T9541] loop1: detected capacity change from 0 to 512 [ 152.794739][ T9541] EXT4-fs: Invalid want_extra_isize 67108865 [ 152.913164][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.922001][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.013391][ T9557] loop9: detected capacity change from 0 to 7 [ 153.021630][ T9557] loop9: unable to read partition table [ 153.027362][ T9557] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 153.027362][ T9557] ) failed (rc=-5) [ 153.133998][ T9563] netlink: 'syz.6.2221': attribute type 10 has an invalid length. [ 153.149312][ T9563] loop6: detected capacity change from 0 to 512 [ 153.563057][ T9570] siw: device registration error -23 [ 153.637589][ T9580] loop5: detected capacity change from 0 to 1024 [ 153.659595][ T9580] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.752911][ T9588] vhci_hcd: invalid port number 96 [ 153.758199][ T9588] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 153.816385][ T9594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.844426][ T9594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.919099][ T9598] loop9: detected capacity change from 0 to 7 [ 153.925454][ T9598] buffer_io_error: 2 callbacks suppressed [ 153.925467][ T9598] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.940765][ T9598] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.949611][ T9598] loop9: unable to read partition table [ 153.956480][ T9598] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 153.956480][ T9598] ) failed (rc=-5) [ 154.125993][ T9608] loop1: detected capacity change from 0 to 512 [ 154.151319][ T9608] EXT4-fs: Invalid want_extra_isize 67108865 [ 154.164132][ T9607] siw: device registration error -23 [ 154.259540][ T9614] loop6: detected capacity change from 0 to 1024 [ 154.270407][ T9614] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.315740][ T9619] netlink: 'syz.2.2242': attribute type 10 has an invalid length. [ 154.331383][ T9621] vhci_hcd: invalid port number 96 [ 154.337067][ T9621] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 154.338174][ T9619] loop2: detected capacity change from 0 to 512 [ 154.352932][ T29] kauditd_printk_skb: 765 callbacks suppressed [ 154.352953][ T29] audit: type=1326 audit(1759274995.860:13526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e78d6db2a code=0x7ffc0000 [ 154.383279][ T29] audit: type=1326 audit(1759274995.860:13527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e78d6db2a code=0x7ffc0000 [ 154.407588][ T29] audit: type=1326 audit(1759274995.860:13528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2e78d6d617 code=0x7ffc0000 [ 154.431869][ T29] audit: type=1326 audit(1759274995.860:13529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2e78d7066a code=0x7ffc0000 [ 154.456132][ T29] audit: type=1326 audit(1759274995.860:13530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e78d6d710 code=0x7ffc0000 [ 154.480157][ T29] audit: type=1326 audit(1759274995.860:13531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e78d6eacb code=0x7ffc0000 [ 154.504284][ T29] audit: type=1326 audit(1759274995.860:13532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e78d6db2a code=0x7ffc0000 [ 154.528312][ T29] audit: type=1326 audit(1759274995.860:13533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 154.552467][ T29] audit: type=1326 audit(1759274995.860:13534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 154.576845][ T29] audit: type=1326 audit(1759274995.860:13535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e78d6eec9 code=0x7ffc0000 [ 154.589969][ T9625] vhci_hcd: invalid port number 96 [ 154.607326][ T9625] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 154.714697][ T9639] loop0: detected capacity change from 0 to 512 [ 154.725737][ T9639] EXT4-fs: Invalid want_extra_isize 67108865 [ 154.762225][ T9637] siw: device registration error -23 [ 154.827796][ T9645] vhci_hcd: invalid port number 96 [ 154.833228][ T9645] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 154.910189][ T9651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.920377][ T9651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.946593][ T9653] netlink: 'syz.1.2257': attribute type 10 has an invalid length. [ 155.293944][ T9660] netlink: 'syz.6.2260': attribute type 10 has an invalid length. [ 155.302373][ T9660] __nla_validate_parse: 8 callbacks suppressed [ 155.302403][ T9660] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2260'. [ 155.326106][ T9660] loop6: detected capacity change from 0 to 512 [ 155.427719][ T9668] netlink: 'syz.6.2264': attribute type 10 has an invalid length. [ 155.435624][ T9668] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2264'. [ 155.455250][ T9668] loop6: detected capacity change from 0 to 512 [ 155.618278][ T9680] loop2: detected capacity change from 0 to 1024 [ 155.635039][ T9680] EXT4-fs: Ignoring removed orlov option [ 155.831222][ T9687] netlink: 'syz.0.2269': attribute type 10 has an invalid length. [ 155.839359][ T9687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2269'. [ 156.182227][ T9709] SELinux: security_context_str_to_sid (A@pѪ:sw98r(a_8qD}ICSXJ[0'b?x X.[|Y;we9?ЀyČФaHdU ۞ˇe+Xِ ۙGGJq. W*M˱3w?.V(ɫ*_9`F7:3rc";C`) failed with errno=-22 [ 156.225202][ T9710] loop1: detected capacity change from 0 to 1024 [ 156.241158][ T9710] EXT4-fs: Ignoring removed orlov option [ 156.342639][ T9717] loop6: detected capacity change from 0 to 512 [ 156.364726][ T9717] EXT4-fs: Invalid want_extra_isize 67108865 [ 156.660360][ T9728] rdma_rxe: rxe_newlink: failed to add lo [ 157.041685][ T9735] vhci_hcd: invalid port number 96 [ 157.047216][ T9735] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 157.104181][ T9739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2286'. [ 157.168019][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2298'. [ 157.194221][ T9744] loop6: detected capacity change from 0 to 1024 [ 157.222000][ T9744] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.255966][ T9750] netlink: 'syz.1.2290': attribute type 10 has an invalid length. [ 157.264151][ T9750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2290'. [ 157.286676][ T9750] loop1: detected capacity change from 0 to 512 [ 157.651928][ T9764] netlink: 'syz.5.2294': attribute type 4 has an invalid length. [ 157.660037][ T9764] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2294'. [ 157.808116][ T9771] vhci_hcd: invalid port number 96 [ 157.814187][ T9771] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 157.837066][ T9776] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2301'. [ 158.054363][ T9787] loop5: detected capacity change from 0 to 1024 [ 158.069291][ T9787] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.083211][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2306'. [ 158.119467][ T9792] netlink: 'syz.5.2307': attribute type 10 has an invalid length. [ 158.130318][ T9792] netlink: 'syz.5.2307': attribute type 10 has an invalid length. [ 158.139073][ T9792] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2307'. [ 158.210373][ T9800] loop0: detected capacity change from 0 to 512 [ 158.217382][ T9800] EXT4-fs: Invalid want_extra_isize 67108865 [ 158.272657][ T9804] vhci_hcd: invalid port number 96 [ 158.278054][ T9804] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 158.405776][ T9813] siw: device registration error -23 [ 158.418908][ T9814] loop0: detected capacity change from 0 to 1024 [ 158.425820][ T9814] EXT4-fs: Ignoring removed orlov option [ 158.445520][ T9818] loop6: detected capacity change from 0 to 1024 [ 158.459217][ T9818] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.590053][ T9829] loop9: detected capacity change from 0 to 7 [ 158.596821][ T9829] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.605641][ T9829] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.613727][ T9829] loop9: unable to read partition table [ 158.620201][ T9829] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 158.620201][ T9829] ) failed (rc=-5) [ 158.769227][ T9834] loop6: detected capacity change from 0 to 512 [ 158.777207][ T9834] EXT4-fs: Invalid want_extra_isize 67108865 [ 158.929089][ T9847] loop6: detected capacity change from 0 to 512 [ 158.936387][ T9847] EXT4-fs: Invalid want_extra_isize 67108865 [ 158.983698][ T9850] loop9: detected capacity change from 0 to 7 [ 158.990567][ T9850] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.000336][ T9850] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.008299][ T9850] loop9: unable to read partition table [ 159.014377][ T9850] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 159.014377][ T9850] ) failed (rc=-5) [ 159.183162][ T9856] vhci_hcd: invalid port number 96 [ 159.188595][ T9856] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 159.233446][ T9854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.242304][ T9854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.365875][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 159.365892][ T29] audit: type=1326 audit(1759275000.860:14083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 159.396403][ T29] audit: type=1326 audit(1759275000.860:14084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 159.420604][ T29] audit: type=1326 audit(1759275000.900:14085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 159.444272][ T29] audit: type=1326 audit(1759275000.900:14086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 159.467995][ T29] audit: type=1326 audit(1759275000.900:14087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 159.492872][ T29] audit: type=1326 audit(1759275000.930:14088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 159.517766][ T29] audit: type=1326 audit(1759275000.930:14089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 159.542012][ T29] audit: type=1326 audit(1759275000.930:14090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 159.566836][ T29] audit: type=1326 audit(1759275001.000:14091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 159.593798][ T29] audit: type=1326 audit(1759275001.000:14092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 159.752745][ T9877] SELinux: security_context_str_to_sid (3nnٚ$ZR \p`XhnbsF|ӥ- [ 159.752745][ T9877] ޵:p,OBÂ-t (͞iy\Gni2!X]3W &) failed with errno=-22 [ 159.838719][ T9881] SELinux: security_context_str_to_sid (?]#츒%6R5>s>)񣓡*@2+R+Rxu:οm3ϩzw79I) failed with errno=-22 [ 159.915739][ T9882] loop6: detected capacity change from 0 to 512 [ 159.923480][ T9882] EXT4-fs: Invalid want_extra_isize 67108865 [ 160.090335][ T9888] loop1: detected capacity change from 0 to 512 [ 160.097478][ T9888] EXT4-fs: Invalid want_extra_isize 67108865 [ 160.163320][ T9890] netlink: 'syz.5.2344': attribute type 10 has an invalid length. [ 160.183457][ T9890] loop5: detected capacity change from 0 to 512 [ 160.560340][ T9902] loop2: detected capacity change from 0 to 1024 [ 160.567147][ T9902] EXT4-fs: Ignoring removed orlov option [ 160.681981][ T9905] __nla_validate_parse: 4 callbacks suppressed [ 160.682007][ T9905] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2349'. [ 160.887925][ T9910] loop9: detected capacity change from 0 to 7 [ 160.894694][ T9910] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.904606][ T9910] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.912750][ T9910] loop9: unable to read partition table [ 160.921841][ T9910] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 160.921841][ T9910] ) failed (rc=-5) [ 161.049893][ T9916] netlink: 'syz.6.2355': attribute type 4 has an invalid length. [ 161.057962][ T9916] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2355'. [ 161.110627][ T9923] rdma_rxe: rxe_newlink: failed to add lo [ 161.210855][ T9931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.222508][ T9931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.260154][ T9936] loop5: detected capacity change from 0 to 512 [ 161.272706][ T9936] EXT4-fs: Invalid want_extra_isize 67108865 [ 161.373518][ T9940] loop9: detected capacity change from 0 to 7 [ 161.393327][ T9940] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.402774][ T9935] siw: device registration error -23 [ 161.413899][ T9940] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.422299][ T9940] loop9: unable to read partition table [ 161.461429][ T9940] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 161.461429][ T9940] ) failed (rc=-5) [ 161.595921][ T9950] netlink: 'syz.5.2369': attribute type 4 has an invalid length. [ 161.603826][ T9950] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2369'. [ 161.667646][ T9954] vhci_hcd: invalid port number 96 [ 161.673117][ T9954] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 161.776769][ T9962] vhci_hcd: invalid port number 96 [ 161.782514][ T9962] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 161.814938][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2376'. [ 161.832038][ T9956] siw: device registration error -23 [ 161.884871][ T9969] loop9: detected capacity change from 0 to 7 [ 161.895638][ T9969] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.916878][ T9969] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.925508][ T9969] loop9: unable to read partition table [ 161.958748][ T9969] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 161.958748][ T9969] ) failed (rc=-5) [ 162.076307][ T9977] loop0: detected capacity change from 0 to 1024 [ 162.104578][ T9977] EXT4-fs: Ignoring removed orlov option [ 162.113227][ T9985] loop5: detected capacity change from 0 to 1024 [ 162.141752][ T9985] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.193139][ T9990] loop6: detected capacity change from 0 to 1024 [ 162.213586][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2384'. [ 162.257318][ T9990] EXT4-fs: Ignoring removed orlov option [ 162.367302][ T9996] loop2: detected capacity change from 0 to 1024 [ 162.412261][ T9996] EXT4-fs: Ignoring removed orlov option [ 162.453149][ T9999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.463185][ T9999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.982853][T10010] loop0: detected capacity change from 0 to 1024 [ 162.990060][T10010] EXT4-fs: Ignoring removed orlov option [ 163.023137][T10015] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2392'. [ 163.092041][T10021] loop9: detected capacity change from 0 to 7 [ 163.099791][T10021] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.119780][T10021] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.127789][T10021] loop9: unable to read partition table [ 163.156708][T10021] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 163.156708][T10021] ) failed (rc=-5) [ 163.364283][T10031] loop6: detected capacity change from 0 to 1024 [ 163.381322][T10031] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.408898][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2397'. [ 163.472800][T10035] netlink: 'syz.5.2398': attribute type 10 has an invalid length. [ 163.481200][T10035] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2398'. [ 163.572900][T10041] loop5: detected capacity change from 0 to 512 [ 163.580091][T10041] EXT4-fs: Invalid want_extra_isize 67108865 [ 163.591434][T10040] loop6: detected capacity change from 0 to 1024 [ 163.599545][T10040] EXT4-fs: Ignoring removed orlov option [ 163.864976][T10054] SELinux: security_context_str_to_sid (%tb*.vI [ 163.864976][T10054] m!5tSN X,EV_QؐVb5άLPADd [ 163.864976][T10054] k.@[sQUf1$:KjHQRV,;=ֳ^VG9؏^t&LNշB\[sXfl|9flEF-bj|v af{Hُ{ۖMC) failed with errno=-22 [ 164.006538][T10060] netlink: 'syz.1.2405': attribute type 10 has an invalid length. [ 164.014683][T10060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2405'. [ 164.024419][T10060] batadv0: entered promiscuous mode [ 164.029786][T10060] batadv0: entered allmulticast mode [ 164.036872][T10060] .`: (slave batadv0): Releasing backup interface [ 164.046957][T10060] bridge0: port 2(batadv0) entered blocking state [ 164.053710][T10060] bridge0: port 2(batadv0) entered disabled state [ 164.378893][ T4883] EXT4-fs unmount: 39 callbacks suppressed [ 164.378907][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.492233][T10074] loop6: detected capacity change from 0 to 512 [ 164.508279][ T3588] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 164.517929][T10074] EXT4-fs: Invalid want_extra_isize 67108865 [ 164.520974][ T3588] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 164.545357][T10076] netlink: 'syz.5.2412': attribute type 4 has an invalid length. [ 164.553707][T10076] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2412'. [ 164.705773][T10082] siw: device registration error -23 [ 164.872108][T10092] vhci_hcd: invalid port number 96 [ 164.877507][T10092] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 164.938579][T10098] rdma_rxe: rxe_newlink: failed to add lo [ 165.011937][T10087] SELinux: security_context_str_to_sid (Ht[x̦Gz(H;I$ }J1|lLV =}h?Dh`6 '3 j<&ZjE>:@"c7f}p qXTEʼV>_!c0%N2(p'Z[~8xp]NrsƸڢUv[[RnD oh8+x<8= [ 165.011937][T10087] 8#74(!.2Yuxפi-r-##e3T6jX9) failed with errno=-22 [ 165.081412][T10103] loop2: detected capacity change from 0 to 1024 [ 165.104769][T10103] EXT4-fs: Ignoring removed orlov option [ 165.117014][T10103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.371335][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 165.371355][ T29] audit: type=1326 audit(1759275006.870:14414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 165.417324][ T29] audit: type=1326 audit(1759275006.870:14415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 165.441325][ T29] audit: type=1326 audit(1759275006.910:14416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 165.465128][ T29] audit: type=1326 audit(1759275006.910:14417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 165.489203][ T29] audit: type=1326 audit(1759275006.910:14418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 165.513665][ T29] audit: type=1326 audit(1759275006.910:14419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 165.537463][ T29] audit: type=1326 audit(1759275006.910:14420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 165.561620][ T29] audit: type=1326 audit(1759275006.910:14421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 165.585407][ T29] audit: type=1326 audit(1759275006.910:14422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 165.610065][ T29] audit: type=1326 audit(1759275006.910:14423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10115 comm="syz.5.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 165.667938][T10116] netlink: 'syz.5.2426': attribute type 10 has an invalid length. [ 165.722320][T10116] loop5: detected capacity change from 0 to 512 [ 165.739124][T10124] loop0: detected capacity change from 0 to 1024 [ 165.757356][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.791439][T10124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.811921][T10124] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.843378][T10124] __nla_validate_parse: 1 callbacks suppressed [ 165.843398][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2429'. [ 165.890195][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.984977][T10141] netlink: 'syz.6.2436': attribute type 10 has an invalid length. [ 165.993349][T10141] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2436'. [ 166.015090][T10143] loop5: detected capacity change from 0 to 512 [ 166.044367][T10144] loop0: detected capacity change from 0 to 1024 [ 166.053354][T10143] EXT4-fs: Invalid want_extra_isize 67108865 [ 166.059942][T10144] EXT4-fs: Ignoring removed orlov option [ 166.081523][T10148] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2438'. [ 166.122663][T10144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.259523][T10163] loop2: detected capacity change from 0 to 1024 [ 166.267076][T10161] loop6: detected capacity change from 0 to 1024 [ 166.274955][T10161] EXT4-fs: Ignoring removed orlov option [ 166.283978][T10163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.297753][T10161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.304390][T10163] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.324505][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2443'. [ 166.352302][T10169] SELinux: security_context_str_to_sid ("Dᐜń+S+;9 Kr*7x-<ǬìzUUAfz>'DM宔LvYtuD% ֮YMV L.dm" [ 166.352302][T10169] =bӠFk! /394) failed with errno=-22 [ 166.378336][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.812459][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.986444][T10198] loop2: detected capacity change from 0 to 1024 [ 167.015244][T10198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.027926][T10198] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.041039][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 167.065772][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.083644][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.098138][T10205] SELinux: security_context_str_to_sid (ꀧ.javhrT) failed with errno=-22 [ 167.164333][T10203] siw: device registration error -23 [ 167.197566][T10212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.206325][T10212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.230581][T10214] vhci_hcd: invalid port number 96 [ 167.235785][T10214] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 167.629942][T10232] SELinux: security_context_str_to_sid (/*"X`\ε1QehiaZ=xvȊc}~DIGI/\uJ߂D QG[lv,JNۄK䛰;%uKde%EoV+KDJ.q>`Kڞ}QG.Q-51m|aZ^JR4_UFSL Zhff) failed with errno=-22 [ 167.714340][T10234] loop0: detected capacity change from 0 to 1024 [ 167.730244][T10234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.749026][T10234] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.771029][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2469'. [ 167.797543][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.825786][T10242] netlink: 'syz.1.2471': attribute type 10 has an invalid length. [ 167.835193][T10242] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2471'. [ 167.848722][T10240] vhci_hcd: invalid port number 96 [ 167.854054][T10240] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 167.871259][T10242] loop1: detected capacity change from 0 to 512 [ 168.156111][T10261] loop9: detected capacity change from 0 to 7 [ 168.162742][T10261] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.171193][T10261] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.179140][T10261] loop9: unable to read partition table [ 168.185144][T10261] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 168.185144][T10261] ) failed (rc=-5) [ 168.293290][T10265] loop9: detected capacity change from 0 to 7 [ 168.301090][T10265] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.309582][T10265] Buffer I/O error on dev loop9, logical block 0, async page read [ 168.317708][T10265] loop9: unable to read partition table [ 168.324877][T10265] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 168.324877][T10265] ) failed (rc=-5) [ 168.460622][T10267] rdma_rxe: rxe_newlink: failed to add lo [ 168.839624][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2485'. [ 168.956883][T10278] netlink: 'syz.6.2486': attribute type 10 has an invalid length. [ 168.966316][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2486'. [ 169.023392][T10285] loop6: detected capacity change from 0 to 512 [ 169.191999][T10291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.225017][T10291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.236562][T10294] loop0: detected capacity change from 0 to 1024 [ 169.259411][T10294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.272481][T10294] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.284892][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2493'. [ 169.308446][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.341444][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.350703][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.363840][T10303] vhci_hcd: invalid port number 96 [ 169.369940][T10303] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 169.495952][T10307] loop0: detected capacity change from 0 to 1024 [ 169.505270][T10307] EXT4-fs: Ignoring removed orlov option [ 169.514164][T10307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.024650][T10319] siw: device registration error -23 [ 170.045900][T10331] loop2: detected capacity change from 0 to 1024 [ 170.059328][T10331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.072060][T10331] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.119195][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.305081][T10357] loop1: detected capacity change from 0 to 1024 [ 170.313022][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.327965][T10357] EXT4-fs: Ignoring removed orlov option [ 170.355111][T10357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.474579][T10350] rdma_rxe: rxe_newlink: failed to add lo [ 171.090692][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.189105][T10375] loop1: detected capacity change from 0 to 1024 [ 171.196212][T10375] EXT4-fs: Ignoring removed orlov option [ 171.205295][T10375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.221262][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 171.221281][ T29] audit: type=1326 audit(1759275012.720:14936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 171.256382][T10378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.270559][T10379] loop2: detected capacity change from 0 to 1024 [ 171.277507][T10378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.290038][ T29] audit: type=1326 audit(1759275012.730:14937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 171.314660][ T29] audit: type=1326 audit(1759275012.730:14938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 171.340673][ T29] audit: type=1326 audit(1759275012.730:14939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 171.365336][ T29] audit: type=1326 audit(1759275012.730:14940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 171.373410][T10379] EXT4-fs: Ignoring removed orlov option [ 171.389427][ T29] audit: type=1326 audit(1759275012.730:14941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 171.389469][ T29] audit: type=1326 audit(1759275012.730:14942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 171.442741][ T29] audit: type=1326 audit(1759275012.730:14943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 171.466406][ T29] audit: type=1326 audit(1759275012.730:14944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 171.490283][ T29] audit: type=1326 audit(1759275012.730:14945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a320eec9 code=0x7ffc0000 [ 171.557072][T10379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.631314][T10393] vhci_hcd: invalid port number 96 [ 171.636558][T10393] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 171.669109][T10396] vhci_hcd: invalid port number 96 [ 171.674604][T10396] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 171.783836][T10402] loop5: detected capacity change from 0 to 1024 [ 171.797181][T10405] loop6: detected capacity change from 0 to 1024 [ 171.805351][T10405] EXT4-fs: Ignoring removed orlov option [ 171.805376][T10402] EXT4-fs: Ignoring removed orlov option [ 171.817171][T10405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.860820][T10402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.965904][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.074659][T10414] loop1: detected capacity change from 0 to 1024 [ 172.081591][T10414] EXT4-fs: Ignoring removed orlov option [ 172.094233][T10414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.109913][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.349744][T10425] rdma_rxe: rxe_newlink: failed to add lo [ 172.382074][T10423] siw: device registration error -23 [ 172.468058][T10428] netlink: 'syz.0.2537': attribute type 10 has an invalid length. [ 172.476204][T10428] __nla_validate_parse: 3 callbacks suppressed [ 172.476240][T10428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2537'. [ 172.513191][T10428] loop0: detected capacity change from 0 to 512 [ 172.592477][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.616918][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.740578][T10440] vhci_hcd: invalid port number 96 [ 172.746122][T10440] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 173.236806][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.276651][T10447] rdma_rxe: rxe_newlink: failed to add lo [ 173.441338][T10460] loop1: detected capacity change from 0 to 1024 [ 173.468188][T10460] EXT4-fs: Ignoring removed orlov option [ 173.507933][T10460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.114671][T10476] loop5: detected capacity change from 0 to 1024 [ 174.121108][T10475] siw: device registration error -23 [ 174.122457][T10476] EXT4-fs: Ignoring removed orlov option [ 174.136808][T10476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.157571][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2555'. [ 174.206967][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.241694][T10487] loop9: detected capacity change from 0 to 7 [ 174.248667][T10487] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.256753][T10487] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.264818][T10487] loop9: unable to read partition table [ 174.271046][T10487] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 174.271046][T10487] ) failed (rc=-5) [ 174.378841][T10493] netlink: 'syz.1.2560': attribute type 10 has an invalid length. [ 174.387030][T10493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2560'. [ 174.400686][T10494] loop6: detected capacity change from 0 to 512 [ 174.407944][T10493] loop1: detected capacity change from 0 to 512 [ 174.419667][T10494] EXT4-fs: Invalid want_extra_isize 67108865 [ 174.590932][T10501] netlink: 'syz.6.2563': attribute type 10 has an invalid length. [ 174.599145][T10501] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2563'. [ 174.652467][T10505] loop6: detected capacity change from 0 to 512 [ 174.751013][T10512] loop9: detected capacity change from 0 to 7 [ 174.767709][T10512] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.785958][T10512] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.794001][T10512] loop9: unable to read partition table [ 174.821206][T10512] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 174.821206][T10512] ) failed (rc=-5) [ 174.905755][T10507] siw: device registration error -23 [ 174.974207][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.007864][T10518] loop6: detected capacity change from 0 to 1024 [ 175.030364][T10518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.044262][T10518] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.045394][T10524] netlink: 'syz.1.2573': attribute type 10 has an invalid length. [ 175.063858][T10524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2573'. [ 175.065256][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2571'. [ 175.091444][T10527] loop0: detected capacity change from 0 to 1024 [ 175.098569][T10527] EXT4-fs: Ignoring removed orlov option [ 175.112524][T10527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.113677][T10524] loop1: detected capacity change from 0 to 512 [ 175.146063][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.161996][T10528] loop5: detected capacity change from 0 to 1024 [ 175.193303][T10528] EXT4-fs: Ignoring removed orlov option [ 175.225610][T10528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.503665][T10551] rdma_rxe: rxe_newlink: failed to add lo [ 175.547594][T10552] siw: device registration error -23 [ 175.664688][T10556] loop9: detected capacity change from 0 to 7 [ 175.683374][T10556] Buffer I/O error on dev loop9, logical block 0, async page read [ 175.692335][T10556] Buffer I/O error on dev loop9, logical block 0, async page read [ 175.700513][T10556] loop9: unable to read partition table [ 175.706569][T10556] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 175.706569][T10556] ) failed (rc=-5) [ 175.812976][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.883090][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.163523][T10566] siw: device registration error -23 [ 176.252839][T10585] loop5: detected capacity change from 0 to 1024 [ 176.275021][T10583] siw: device registration error -23 [ 176.290278][T10585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.327633][T10585] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.339271][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2593'. [ 176.362709][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.393068][T10590] loop2: detected capacity change from 0 to 1024 [ 176.400276][T10590] EXT4-fs: Ignoring removed orlov option [ 176.407687][T10592] FAULT_INJECTION: forcing a failure. [ 176.407687][T10592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.420928][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.5.2595 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.420965][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.420983][T10592] Call Trace: [ 176.420992][T10592] [ 176.421003][T10592] __dump_stack+0x1d/0x30 [ 176.421201][T10592] dump_stack_lvl+0xe8/0x140 [ 176.421256][T10592] dump_stack+0x15/0x1b [ 176.421279][T10592] should_fail_ex+0x265/0x280 [ 176.421383][T10592] should_fail+0xb/0x20 [ 176.421409][T10592] should_fail_usercopy+0x1a/0x20 [ 176.421475][T10592] _copy_from_user+0x1c/0xb0 [ 176.421501][T10592] __copy_msghdr+0x244/0x300 [ 176.421532][T10592] ___sys_sendmsg+0x109/0x1d0 [ 176.421577][T10592] __x64_sys_sendmsg+0xd4/0x160 [ 176.421683][T10592] x64_sys_call+0x191e/0x2ff0 [ 176.421706][T10592] do_syscall_64+0xd2/0x200 [ 176.421730][T10592] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 176.421761][T10592] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 176.421850][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.421931][T10592] RIP: 0033:0x7f47b4c8eec9 [ 176.421957][T10592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.421976][T10592] RSP: 002b:00007f47b36f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.421997][T10592] RAX: ffffffffffffffda RBX: 00007f47b4ee5fa0 RCX: 00007f47b4c8eec9 [ 176.422013][T10592] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000004 [ 176.422029][T10592] RBP: 00007f47b36f7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.422045][T10592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.422077][T10592] R13: 00007f47b4ee6038 R14: 00007f47b4ee5fa0 R15: 00007ffe2f4cfdf8 [ 176.422186][T10592] [ 176.494027][T10590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.629510][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 176.629527][ T29] audit: type=1326 audit(1759275018.130:15312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 176.650117][T10599] loop0: detected capacity change from 0 to 1024 [ 176.682952][T10600] netlink: 'syz.5.2598': attribute type 10 has an invalid length. [ 176.687671][ T29] audit: type=1326 audit(1759275018.130:15313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 176.691404][T10600] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2598'. [ 176.715417][ T29] audit: type=1326 audit(1759275018.130:15314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 176.715464][ T29] audit: type=1326 audit(1759275018.130:15315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 176.715503][ T29] audit: type=1326 audit(1759275018.130:15316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 176.798281][ T29] audit: type=1326 audit(1759275018.130:15317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 176.823307][ T29] audit: type=1326 audit(1759275018.130:15318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 176.848104][ T29] audit: type=1326 audit(1759275018.130:15319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 176.872698][ T29] audit: type=1326 audit(1759275018.130:15320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 176.896564][ T29] audit: type=1326 audit(1759275018.130:15321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10598 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b4c8eec9 code=0x7ffc0000 [ 176.925911][T10599] EXT4-fs: Ignoring removed orlov option [ 176.953067][T10599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.998294][T10605] loop5: detected capacity change from 0 to 512 [ 177.022010][T10605] EXT4-fs: Invalid want_extra_isize 67108865 [ 177.164211][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.219115][T10617] siw: device registration error -23 [ 177.417791][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.530000][T10631] siw: device registration error -23 [ 177.539455][T10635] netlink: 'syz.2.2610': attribute type 10 has an invalid length. [ 177.548094][T10635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2610'. [ 177.586474][T10641] loop9: detected capacity change from 0 to 7 [ 177.596068][T10641] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.605685][T10641] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.613755][T10641] loop9: unable to read partition table [ 177.621317][T10641] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 177.621317][T10641] ) failed (rc=-5) [ 177.641263][T10637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.651286][T10637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.754955][T10652] loop0: detected capacity change from 0 to 1024 [ 177.763627][T10652] EXT4-fs: Ignoring removed orlov option [ 177.786483][T10652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.812781][T10646] siw: device registration error -23 [ 177.901824][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.978213][T10671] netlink: 'syz.0.2623': attribute type 10 has an invalid length. [ 177.986444][T10671] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2623'. [ 178.033656][ T3534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.054200][T10676] loop0: detected capacity change from 0 to 1024 [ 178.072104][T10676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.083200][T10664] lo speed is unknown, defaulting to 1000 [ 178.091544][T10676] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.106018][ T3534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.119953][T10664] lo speed is unknown, defaulting to 1000 [ 178.120003][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2624'. [ 178.152206][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.169147][ T3534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.230823][ T3534] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.252267][T10686] loop9: detected capacity change from 0 to 7 [ 178.272638][T10686] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.290235][T10688] loop5: detected capacity change from 0 to 512 [ 178.295979][T10686] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.305371][T10686] loop9: unable to read partition table [ 178.321136][T10688] EXT4-fs: Invalid want_extra_isize 67108865 [ 178.327477][T10686] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 178.327477][T10686] ) failed (rc=-5) [ 178.348462][ T3534] dummy0: left allmulticast mode [ 178.353816][ T3534] bridge0: port 2(dummy0) entered disabled state [ 178.444256][ T3534] .` (unregistering): (slave batadv0): Releasing backup interface [ 178.461325][ T3534] .` (unregistering): Released all slaves [ 178.489253][ T3534] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 178.509075][ T3534] bond0 (unregistering): Released all slaves [ 178.526289][T10664] chnl_net:caif_netlink_parms(): no params data found [ 178.556450][T10701] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2632'. [ 178.561361][T10696] siw: device registration error -23 [ 178.671239][ T3534] hsr_slave_0: left promiscuous mode [ 178.687248][T10711] Invalid ELF header magic: != ELF [ 178.698896][ T3534] hsr_slave_1: left promiscuous mode [ 178.810126][ T3534] veth1_macvtap: left promiscuous mode [ 178.830080][ T3534] veth0_macvtap: left promiscuous mode [ 178.848045][T10715] rdma_rxe: rxe_newlink: failed to add lo [ 178.855803][ T3534] veth1_vlan: left promiscuous mode [ 178.866298][ T3534] veth0_vlan: left promiscuous mode [ 179.170729][T10664] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.178543][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.223597][T10664] bridge_slave_0: entered allmulticast mode [ 179.238243][T10664] bridge_slave_0: entered promiscuous mode [ 179.255570][T10664] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.263088][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.290851][T10664] bridge_slave_1: entered allmulticast mode [ 179.313002][T10664] bridge_slave_1: entered promiscuous mode [ 179.337949][T10718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.363523][T10718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.380614][T10664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.403933][T10664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.447214][T10664] team0: Port device team_slave_0 added [ 179.459887][T10664] team0: Port device team_slave_1 added [ 179.510433][T10664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.518150][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.544729][T10664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.559120][T10664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.566220][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.592387][T10664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.646460][T10664] hsr_slave_0: entered promiscuous mode [ 179.661119][T10664] hsr_slave_1: entered promiscuous mode [ 179.679758][T10664] debugfs: 'hsr0' already exists in 'hsr' [ 179.685651][T10664] Cannot create hsr debugfs directory [ 180.003088][T10664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.016586][T10664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.028254][T10664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.039133][T10664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.053955][T10731] loop0: detected capacity change from 0 to 512 [ 180.064746][T10731] EXT4-fs: Invalid want_extra_isize 67108865 [ 180.093591][T10664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.097665][T10737] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2641'. [ 180.117480][T10664] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.144285][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.151520][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.181570][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.188743][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.222631][T10742] SELinux: security_context_str_to_sid (=pšY|`t^d|8h#\]o]#˶K>wbsMsrU VgzhLQM޶Ս%#0/.N++}H׏j#: YH7,{H=7JAAe54{@ )ѝd'iA]f2T\x|Ra0QCL峎 >Xb0trh>PU Am HjWҝ Mj) failed with errno=-22 [ 180.256587][T10664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.267191][T10664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.340366][T10748] netlink: 'syz.0.2645': attribute type 10 has an invalid length. [ 180.348839][T10748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2645'. [ 180.384804][T10748] loop0: detected capacity change from 0 to 512 [ 180.395434][T10664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.420590][T10745] siw: device registration error -23 [ 180.475401][T10758] netlink: 'syz.6.2647': attribute type 10 has an invalid length. [ 180.483758][T10758] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2647'. [ 180.552822][T10664] veth0_vlan: entered promiscuous mode [ 180.566502][T10664] veth1_vlan: entered promiscuous mode [ 180.596921][T10664] veth0_macvtap: entered promiscuous mode [ 180.605955][T10664] veth1_macvtap: entered promiscuous mode [ 180.622501][T10664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.637994][T10664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.655372][ T3547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.668228][T10773] loop6: detected capacity change from 0 to 512 [ 180.675223][T10773] EXT4-fs: Invalid want_extra_isize 67108865 [ 180.700410][ T3547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.729204][ T3547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.748143][T10775] loop0: detected capacity change from 0 to 1024 [ 180.757034][T10778] loop5: detected capacity change from 0 to 1024 [ 180.759556][T10775] EXT4-fs: Ignoring removed orlov option [ 180.767231][ T3547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.783716][T10775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.805833][T10778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.840764][T10788] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2656'. [ 180.850730][T10778] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.864980][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2654'. [ 180.907149][ T4382] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.935345][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.035845][T10803] netlink: 'syz.6.2662': attribute type 10 has an invalid length. [ 181.043886][T10803] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2662'. [ 181.064897][T10803] loop6: detected capacity change from 0 to 512 [ 181.179247][T10815] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 181.215101][T10819] loop6: detected capacity change from 0 to 512 [ 181.223392][T10819] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 181.234833][T10819] EXT4-fs (loop6): 1 truncate cleaned up [ 181.241081][T10819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.264738][ T4883] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.663111][T10827] loop1: detected capacity change from 0 to 1024 [ 181.679141][T10827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.691859][T10827] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.713870][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.758580][T10831] loop1: detected capacity change from 0 to 1024 [ 181.765402][T10831] EXT4-fs: Ignoring removed orlov option [ 181.773962][T10831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.035045][T10846] loop0: detected capacity change from 0 to 512 [ 182.052594][T10846] EXT4-fs: Invalid want_extra_isize 67108865 [ 182.591700][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.606051][T10851] netlink: 'syz.6.2679': attribute type 3 has an invalid length. [ 182.671706][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 182.671730][ T29] audit: type=1400 audit(1759275024.170:15824): avc: denied { create } for pid=10850 comm="syz.6.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.698752][ T29] audit: type=1400 audit(1759275024.170:15825): avc: denied { bind } for pid=10850 comm="syz.6.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.698808][ T29] audit: type=1400 audit(1759275024.170:15826): avc: denied { read } for pid=10850 comm="syz.6.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.780256][T10857] loop1: detected capacity change from 0 to 1024 [ 182.822102][T10857] EXT4-fs: Ignoring removed orlov option [ 182.850213][T10857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.880314][ T29] audit: type=1326 audit(1759275024.380:15827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.6.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3979f1eec9 code=0x7ffc0000 [ 182.938908][T10872] vhci_hcd: invalid port number 96 [ 182.944072][T10872] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 182.947608][ T29] audit: type=1326 audit(1759275024.410:15828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.6.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3979f1eec9 code=0x7ffc0000 [ 182.975347][ T29] audit: type=1326 audit(1759275024.410:15829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.6.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3979f1eec9 code=0x7ffc0000 [ 182.999063][ T29] audit: type=1326 audit(1759275024.410:15830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.6.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3979f1eec9 code=0x7ffc0000 [ 183.023389][ T29] audit: type=1326 audit(1759275024.410:15831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.6.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3979f1eec9 code=0x7ffc0000 [ 183.047683][ T29] audit: type=1326 audit(1759275024.410:15832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.6.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3979f1eec9 code=0x7ffc0000 [ 183.072097][ T29] audit: type=1326 audit(1759275024.410:15833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.6.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3979f1eec9 code=0x7ffc0000 [ 183.101522][T10870] netlink: 'syz.6.2686': attribute type 10 has an invalid length. [ 183.109931][T10870] __nla_validate_parse: 1 callbacks suppressed [ 183.110032][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2686'. [ 183.165133][T10881] loop6: detected capacity change from 0 to 512 [ 183.372706][T10895] loop2: detected capacity change from 0 to 512 [ 183.383851][T10889] siw: device registration error -23 [ 183.390175][T10895] EXT4-fs: Invalid want_extra_isize 67108865 [ 183.462038][T10899] loop0: detected capacity change from 0 to 1024 [ 183.572732][T10905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2698'. [ 183.639422][T10907] netlink: 'syz.0.2699': attribute type 10 has an invalid length. [ 183.647719][T10907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2699'. [ 183.713088][T10917] sd 0:0:1:0: device reset [ 183.718747][T10912] netlink: 'syz.0.2701': attribute type 10 has an invalid length. [ 183.726780][T10912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2701'. [ 183.745349][T10912] loop0: detected capacity change from 0 to 512 [ 183.831266][T10928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2709'. [ 183.982484][T10934] loop9: detected capacity change from 0 to 7 [ 183.985607][T10935] netlink: 'syz.1.2712': attribute type 10 has an invalid length. [ 183.992636][T10934] Buffer I/O error on dev loop9, logical block 0, async page read [ 183.996620][T10935] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2712'. [ 184.004963][T10934] Buffer I/O error on dev loop9, logical block 0, async page read [ 184.021992][T10934] loop9: unable to read partition table [ 184.029470][T10934] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 184.029470][T10934] ) failed (rc=-5) [ 184.166500][T10940] loop0: detected capacity change from 0 to 1024 [ 184.176202][T10940] EXT4-fs: Ignoring removed orlov option [ 184.193639][T10946] FAULT_INJECTION: forcing a failure. [ 184.193639][T10946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.207448][T10946] CPU: 0 UID: 0 PID: 10946 Comm: syz.2.2716 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.207482][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.207504][T10946] Call Trace: [ 184.207513][T10946] [ 184.207561][T10946] __dump_stack+0x1d/0x30 [ 184.207582][T10946] dump_stack_lvl+0xe8/0x140 [ 184.207601][T10946] dump_stack+0x15/0x1b [ 184.207617][T10946] should_fail_ex+0x265/0x280 [ 184.207787][T10946] should_fail+0xb/0x20 [ 184.207833][T10946] should_fail_usercopy+0x1a/0x20 [ 184.207923][T10946] _copy_from_user+0x1c/0xb0 [ 184.207949][T10946] ___sys_sendmsg+0xc1/0x1d0 [ 184.208005][T10946] __x64_sys_sendmsg+0xd4/0x160 [ 184.208050][T10946] x64_sys_call+0x191e/0x2ff0 [ 184.208150][T10946] do_syscall_64+0xd2/0x200 [ 184.208173][T10946] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 184.208207][T10946] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 184.208243][T10946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.208308][T10946] RIP: 0033:0x7fd326cceec9 [ 184.208384][T10946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.208484][T10946] RSP: 002b:00007fd32572f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.208512][T10946] RAX: ffffffffffffffda RBX: 00007fd326f25fa0 RCX: 00007fd326cceec9 [ 184.208528][T10946] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 184.208545][T10946] RBP: 00007fd32572f090 R08: 0000000000000000 R09: 0000000000000000 [ 184.208561][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.208577][T10946] R13: 00007fd326f26038 R14: 00007fd326f25fa0 R15: 00007ffcd9882638 [ 184.208602][T10946] [ 184.440837][T10940] ================================================================== [ 184.449689][T10940] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 184.457537][T10940] [ 184.459881][T10940] write to 0xffffea0004240018 of 8 bytes by task 10949 on cpu 0: [ 184.467710][T10940] __filemap_remove_folio+0x1a5/0x2a0 [ 184.473193][T10940] folio_unmap_invalidate+0x1dd/0x360 [ 184.478691][T10940] invalidate_inode_pages2_range+0x27c/0x3d0 [ 184.484741][T10940] filemap_invalidate_pages+0x16d/0x1a0 [ 184.490327][T10940] kiocb_invalidate_pages+0x6e/0x80 [ 184.495916][T10940] __iomap_dio_rw+0x5d1/0x1240 [ 184.500780][T10940] iomap_dio_rw+0x40/0x90 [ 184.505209][T10940] ext4_file_write_iter+0xad9/0xf00 [ 184.510606][T10940] iter_file_splice_write+0x663/0xa60 [ 184.516174][T10940] direct_splice_actor+0x153/0x2a0 [ 184.521315][T10940] splice_direct_to_actor+0x30f/0x680 [ 184.526694][T10940] do_splice_direct+0xda/0x150 [ 184.531661][T10940] do_sendfile+0x380/0x650 [ 184.536099][T10940] __x64_sys_sendfile64+0x105/0x150 [ 184.541413][T10940] x64_sys_call+0x2bb0/0x2ff0 [ 184.546144][T10940] do_syscall_64+0xd2/0x200 [ 184.550693][T10940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.556943][T10940] [ 184.559283][T10940] read to 0xffffea0004240018 of 8 bytes by task 10940 on cpu 1: [ 184.567287][T10940] folio_mapping+0xa1/0x120 [ 184.571812][T10940] lru_add+0x80/0x430 [ 184.575830][T10940] folio_batch_move_lru+0x1c2/0x280 [ 184.581041][T10940] lru_add_drain_cpu+0x77/0x250 [ 184.585929][T10940] __folio_batch_release+0x44/0xb0 [ 184.591075][T10940] filemap_splice_read+0x59e/0x740 [ 184.596465][T10940] ext4_file_splice_read+0x8f/0xb0 [ 184.601807][T10940] splice_direct_to_actor+0x26f/0x680 [ 184.607201][T10940] do_splice_direct+0xda/0x150 [ 184.611979][T10940] do_sendfile+0x380/0x650 [ 184.616682][T10940] __x64_sys_sendfile64+0x105/0x150 [ 184.621910][T10940] x64_sys_call+0x2bb0/0x2ff0 [ 184.626590][T10940] do_syscall_64+0xd2/0x200 [ 184.631123][T10940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.637120][T10940] [ 184.639442][T10940] value changed: 0xffff888149262998 -> 0x0000000000000000 [ 184.646680][T10940] [ 184.649024][T10940] Reported by Kernel Concurrency Sanitizer on: [ 184.655275][T10940] CPU: 1 UID: 0 PID: 10940 Comm: syz.0.2713 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.665165][T10940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.675248][T10940] ================================================================== [ 184.795780][T10958] SELinux: security_context_str_to_sid (N{3YWd6-Tz7 :Zbf`\3{ZA !!x|kV9r-[`xJDhwn?πv,̈́]c?Iݦ9fB9 ᇵIT&l9 c2~EnМI4ϯXe]+Kcwɴ`t8k/@}jCI [ 184.795780][T10958] q;MaGc>K<Ugփb8) failed with errno=-22