last executing test programs: 9m28.966151639s ago: executing program 1 (id=1629): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x1401, 0x20, 0x0, 0x4e, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0}) 9m28.938197539s ago: executing program 1 (id=1630): setgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000380)='./bus\x00', 0x10, &(0x7f0000000300), 0x1, 0x79d, &(0x7f0000000800)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 9m28.418123337s ago: executing program 1 (id=1632): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000410902120001000000000904000000ef"], 0x0) 9m27.598080814s ago: executing program 1 (id=1640): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {}, {@grpjquota}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x652240, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x2a000, 0x30) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d627780820d1cbf7db710382aceb38a0ef8da65697e4298d1e02dcb8eb8c6b105d9600fdff00000000040000000000000000000000438ea359866cfe1a00", "be1d0000ae9ef30bea2a004000010000000000008000", [0x4000000]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x440, &(0x7f00000001c0)={[{@data_journal}, {@errors_remount}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@noblock_validity}]}, 0x1, 0x58c, &(0x7f00000005c0)="$eJzs3T1sG2UfAPD/neO3X3mbvtL7Si+oQwVIRarqJP2AwtSuiEqVOiCxlMhxoyhOHMUONFGGdK8QHRCgLmWDgRHEwIBYkFhYWUDMSBWNQGo6gJG/0jaxg1OaOI1/P+nse+45+/88d/4/9p3u5AD61rHaQxrxTERcSiKGHqobiGblscZ6qytL+fsrS/kkqtXLvyaRRMS9laV8a/2k+XwoIpYj4v8R8U024kS6MW55YXFqrFgszDXLw5Xp2eHywuLJyemxicJEYeb0y6+cPXfm7Oip0c6Nz26trzd+uvnuje9fu33z08+OLuffH0vifAw26x7ux5PU2CbZOL9u+ZntCNZDSa8bwGPJNPO8lkr/i6HINLO+nerQjjYN2GbVfRHVrUiWt7Q6sJslW8t/YM9o/Q6oHf+2pp38/XHnQuMApBZ3tTk1agYa5yZif/3Y5OBvySNHJrXjzSM72VD2pOXrETEyMLDx8580P3+Pb+RJNJBt9fWFxo7auP/TtfEn2ow/g61zp/9Qa/xb3TD+PYif6TD+Xeoyxh9v/vxRx/jXI55tGz9Zi5+0iZ9GxFtdxr/1xpfnOtVVP444Hu3jtySbnx8evjpZLIw0HtvG+Or40Vc36//BDvEb52z3179m2m3/2S77/8W3nz+3vEn8F5/ffP+32/4HIuK9LuP/594nr3equ3M9uVv7FbDV/V9bdrvL+C+dP/Zjh6oDXb4FAAAAAAAAAADQRlq/li1Jc2vzaZrLNe7h/W8cTIulcuXE1dL8zHjjmrcjkU1bV1oNNcpJrTzavB63VT61rnw60wyYOVAv5/Kl4niP+w4AAAAAAAAAAAAAAAAAAAC7xaF19///nqnf/7/+76qBvarzX34De538h/71aP4nPWsHsPN8/0Pfqsp/6F/yH/qX/If+Jf+hf8l/6F/yH/qX/AcAAAAAAAAAAAAAAAAAAAAAAAAAgG1x6eLF2lS9v7KUr5XHBxbmp0pvnxwvlKdy0/P5XL40N5ubKJUmioVcvjT9d+9XLJVmR2Jm/tpwpVCuDJcXFq9Ml+ZnKlcmp8cmClcK2R3pFQAAAAAAAAAAAAAAAAAAADxdButTkuYiIq3Pp2kuF/HviDgS2eTqZLEwEhGHI+KHTHZfrTza60YDAAAAAAAAAAAAAAAAAADAHlNeWJwaKxYLc30yM7BhyXedV46I5SfbjNo7bvlV2ea+2i3b8GmbObw7mvGUzfR4YAIAAAAAAAAAAAAAAAAAgD704Kbfbl/x5/Y2CAAAAAAAAAAAAAAAAAAAAPpS+ksSEbXp+NALg+tr/5WsZurPEfHOrcsfXBurVOZGa8vvri2vfNhcfqoX7Qe61crTVh4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5QXFqfGisXC3DbO9LqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/jrwAAAP//iG/XoQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) 9m25.930141058s ago: executing program 1 (id=1650): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x4, @mcast2, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 9m25.269845965s ago: executing program 1 (id=1661): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) socket$nl_route(0x10, 0x3, 0x0) 9m25.253573535s ago: executing program 32 (id=1661): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) socket$nl_route(0x10, 0x3, 0x0) 9m24.215783721s ago: executing program 2 (id=1676): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 9m24.174360141s ago: executing program 2 (id=1677): socket$packet(0x11, 0x2, 0x300) r0 = fsopen(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(r0, 0x0, 0x0) 9m21.798738172s ago: executing program 2 (id=1695): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 9m20.896075119s ago: executing program 2 (id=1704): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2007}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 9m20.631489887s ago: executing program 2 (id=1710): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000540), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x4, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3b7e, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, 0xfffffffffffffffe, 0x60) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 9m19.203876512s ago: executing program 2 (id=1727): io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xfffffffffffffffe}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x63, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{}], "491eaf"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "d5"}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r5 = open(0x0, 0x1e5842, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000002c0)=0x5) write$cgroup_subtree(r6, 0x0, 0x4a) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000a3) r7 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000340), &(0x7f0000000300)='%pI4 \x00'}, 0x20) write(r7, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 9m19.155839002s ago: executing program 33 (id=1727): io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xfffffffffffffffe}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x63, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{}], "491eaf"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "d5"}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r5 = open(0x0, 0x1e5842, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000002c0)=0x5) write$cgroup_subtree(r6, 0x0, 0x4a) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000a3) r7 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000340), &(0x7f0000000300)='%pI4 \x00'}, 0x20) write(r7, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 6m45.451219827s ago: executing program 5 (id=7148): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000170c0)) 6m45.385400047s ago: executing program 5 (id=7151): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000540), 0x0, 0x52e, &(0x7f0000000f00)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 6m45.025923556s ago: executing program 5 (id=7157): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 6m44.496446704s ago: executing program 5 (id=7159): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f0000000200)=ANY=[@ANYBLOB='codepage=875,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nodots,dots,nodots,dots,dots,dots,check=strict,check=strict,nodots,nodots,nodots,fmask=00000000000000000000003,dots,nodots,nodots,errors=remount-ro,usefree,codepage=860,nodots,dots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x8000000d) 6m44.338743033s ago: executing program 5 (id=7162): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x20, 0x420004}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 6m42.673760537s ago: executing program 5 (id=7179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}, &(0x7f0000000c00)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001cc0)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee547844ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000041ced6a7015000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc2, '\x00', r2, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x6) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(0x0, 0x0) 2m8.48967415s ago: executing program 3 (id=13066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) unshare(0x62040200) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00'}, 0x10) lchown(&(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002740)=ANY=[@ANYBLOB="000000000000000000000020200000009e6ba0d413b374aac8409347bea734ccf065a745029bb5330e8cfa3e2be4f2502f7f13a4b2d8c56fae490fe947d3787fa9cba6ad54c1b381985bb2d186b5fbba8e20b200d211c67ae2b793ed9c81f7992732f37869d4c20c1dda2d21ea1cfd685b7f61974104f50354893c68f10b0000000000000008ca1c72881fb2333c41e25e4602d9616d598acea2", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000300008000000000fe2fa454bf3f55b9"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002000)=@delchain={0x6d0, 0x65, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x4}, {0xffe0, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x69c, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x674, 0x7, [@m_mirred={0x22c, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x0, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0x19d, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x60, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x32, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x54, 0x15, 0x0, 0x0, {{0x7}, {0x4}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x88, 0x1f, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84ff2b5000000000800"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x6c, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x108}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x2d, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f2e4d1b78"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xd8, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0xa9, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96c84f3a440023eb3e68c8f4ce4718278e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x180, 0x2, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ACTION={0x6, 0x3, 0x22}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0xf9, 0x6, "a1f2a4ce007ddd8790543600a2420ec559f8c649a2a9f3d420934096de08ac63d9c315e8dded6fb2508c68041b7a0aaceed27574893969cda1525b9c8934a0e1e629652c69b92b0c6af575f0df47a043720f08c20d25a11fd3d0a1a33bb49821dd083349fa0d176cd4a307e71c04cd22f512591403a4b3bf2f517e65c5c9da8db780c47af490bf4f5a3657faefcdd5726a3328052df3f62a23cdddee72c32714d8e6fe2a05fbf6e706ce8982979ef8f4a0b551d14b2f93f6166542955dc5bce3689be9fe95626bbded9b18f97ec2efe958898f5beb20933796e6b3c7209a4c6a7ab7fcfcac6e41ee18e29999441f5131306482f32b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2m7.910280638s ago: executing program 3 (id=13081): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e6c7bbd4dbaaae3af04662d606b229f3d36a44238", 0x59}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a", 0x50}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707c25f5412e40742ee435f6774a8edced6ae721b6ce231cfeedd7d71", 0x60}, {&(0x7f0000000640)="853ef8e048602d96b1098f1b1265a8315b5158ee6dc61dfe5be1063bac6eec0a9525fcfe6be179cbbd8c5cf9a7fc", 0x2e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000900)="9b76f00d7896f57313214b00958aef52901a18ff216310ac27dfc6ab72d9613160c3fe223de4ef6e9dcd5966d72ac2fc4a746fc1e58398e50f7b08bba2b56220a751e01156a10aa2d92861404dfce53be69bfbf0faf3f853d5564407f0eff9eac60e1876ff775bdd17d67ca7b0826783e51e632396fa918cfe55adfeb1c5de1f5db782645a54057c205ce92ac4452f95ea214c24046862a0c7d172664efe5359850941e99a984a02579e6e76ed6a2d2d3e14457ef8fd37a65bd54fa0af9a14822a0b17efd93089f033a33419a6b1551cff524261ab14ce3981e0155aeae9f3d41b98d22267970f8db7710b53546995dcd1d0302bd1c3d09d35c93425adfe9cfb250edea1e4df50d9c0744615708cf0ebf24396a3fe9af2675629938555c8a13b9d05f8c0819c", 0x126}], 0x1}}], 0x2, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2m7.837352298s ago: executing program 3 (id=13084): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de"], 0x6, 0x2c9, &(0x7f0000000440)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2003, &(0x7f00000002c0)=0x0) r1 = memfd_create(&(0x7f0000000080)='$(}]#\\\x00', 0x7) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) r2 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRESHEX, @ANYRES16], 0x1, 0x128d, &(0x7f0000002300)="$eJzs3U1rXFUcB+D/JJNkkpoXtVZTKB50owhjkoUrN0FSKA4I0RRUEG7NREMmL2SGQERsXLkS/BiiLt0J4hfIxo1rQRDJxmUX4pXJTGymM0nbmGmkPM9mLuec3zn33jNcOHAP9+D1r9bXVurllawRA4VCFLeGongnRYqBGIyWvXj55i+/Xnv73ffenK9UFhZTuj7/zuxrKaWJ5398/9PvXvipcenm9xM/jMT+1AcHf879tn9lf/rg729jtZ5W62ljs5GydGtzs5HdqlXT8mp9rZzStahm9Woqtce4W79S29za2k3ZxvL42NZ2tV5P2cZuWqvupkYhNbZ3U/ZRtrqRyuVyGh8L/oulb+7keR6R50MxHHme56MxFpfiiRiPiZiMqXgynoqn43I8E1fi2Xgupg9bHeWHL/b0AQAAAAAAAAAAAAAAAAAA4DFxn/3/he79/yMXfcoAAAAAAAAAAAAAAAAAAADw2Ll3/38x4iG+/w8AAAAAAAAAAAAAAAAAAACch/t8//+e/f+v2P8PAAAAAAAAAAAAAAAAAAAA/VBq/SymVIpY/2JnaWep9dsqn1+J1ahFNWZiMv6Kw93/La3j66XKwkw6NBWvrt9u52/vLA125meHJmOq0J2/UVmYbeVTZ34kxo7n52IyLvcY/0ZlYa5nvhQvvdjMf97Kl2Myfv4wNqMWyxGF9tUf5j+bTemNtyqjnfmrzXYnGuzztAAAAMB5Kqd/da/f99qNeta3qtrr89RuWei1Pp/puT4vxtXiRV01R+q7n6xltVp1+4wHwyf3M9xZMtpueeaxChGRdcQnxn5fbHZ51pM/t4PBB2s8ej6DDp3eJppzcqxkunRqhwPHZjCK/4ObeQ4Hf3x9rKQU/RprqPl37qo6uqFZrfn8fLAOYy/P+3pbhntVjZyWOvmZUejj84hH6+6kX/SZAAAAAAAAAAAA8DB6vv03GhFd7wN+3FVy9Hp4Z7y755NH//IRXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8ww4cCwAAAAAI87dOo2MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+RTr32") msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents(r2, &(0x7f0000000180)=""/179, 0xb3) r3 = open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x4, 0x0, 0x0, 0x1c, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea000000000000b600", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) truncate(&(0x7f0000000100)='./file1\x00', 0xc88) 2m7.201755495s ago: executing program 3 (id=13100): creat(&(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m6.728917603s ago: executing program 3 (id=13112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88"], 0xdd12}], 0x1}, 0x0) 2m6.725066904s ago: executing program 35 (id=13112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88"], 0xdd12}], 0x1}, 0x0) 6.156214883s ago: executing program 6 (id=16084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x0) 6.069666622s ago: executing program 6 (id=16087): r0 = socket$pppoe(0x18, 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='inet_sk_error_report\x00', r6}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000050016000000000008001700", @ANYRES32], 0x2c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb5e4fd27cae43ac5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x340, 0x9403, 0x0, 0x0, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c10"]) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'veth1_to_batadv\x00'}}, 0x1e) 5.907779372s ago: executing program 6 (id=16093): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x400c0c8, &(0x7f0000000000)={0xc9, 0xf7, 0x0, 0x1, 0x1, 0x6, @random="71b2ca929713"}, 0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={0x0, @rand_addr, @local}, &(0x7f0000000400)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x0, 0x3, 0x28, @mcast1, @mcast2, 0x40, 0x8, 0x7, 0x6bc}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'tunl0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x8000, 0x10, 0x3, 0xd90, {{0xd, 0x4, 0x3, 0x6, 0x34, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x8, 0x3f, 0x0, 0xf, [0x2]}, @end, @timestamp_addr={0x44, 0x14, 0xfb, 0x1, 0x6, [{@multicast1, 0x80000001}, {@local, 0x2d}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)={0x20, r6, 0x10db0db96401d82d, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000180)={@local, 0x1a}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a40)={0x1584, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1cc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffb30}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "ef78ed34c5c3b1778ba5783d4c2d8d1e59d456453237ebc8e608765864c3c9833ae90bb6002989dae8f3e853549fe428a0c7d023f7a39959e4b48ab1acc9d459ae6ce7f59f837ca6abd5537efe1bd2ed380e808848f686589b1a12523bd947a2f28ba12aa91a7e3d768162a3186a444d18758137865805dc37314239c9c9aa310f51a9e5903092f2d94555af0dc37875777775971f55807cda610d82501c81f92c97df66f71a1790518efadac4383af0534f24b085a255d3dbdc3239af1075f2297bf7f7bac2bc5a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0xda, 0x5, "9b4e5ed0f279840a26f3895bc2a56c54ca7e2a77dbd58ccba619ef208e59750b5a9aa2b90d767a5b6e14633ec9a83f38736f132f4439102e086624df8dce175a4ca4e9e2d9ca43b2dc778148c9022303b49e93a5e5b5eb69ce64dea5fc91fa65d91fa1e57907471379d0511a536b8b90ef45f6c8f01c041688b76418fcd5e42b30c64c02a98447a817d10bb39e772f0870da12824dc3c7328a3a1ba87d5df24e0a97fc7be8c9c9a6f0f2320fe2d1221a0f464cb665efa459823ecefa0c1ce9f34805763e880e789d0d97f5a6164bc47952e282179d8a"}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_WANTED={0x122c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "33a1c31ee94cbdc3d955f7d77866c9a431c37c3bac5b952b963c9d162746e01d3366934edd4adfcbb0ab7f508ce69a3812de37562d884a379ad9c12330486ddb16906b1bf33265bb9cddb042f24afcffd631361c52d25d599b52efd9f93e755826a7e8b87ece4a795553d1c0a0c5827e937bffb37737c8eba76070b7c8801fdf08b5b2e8ff3e96c2165f3fa42f98e3485e72feb268680a23dfd579117cd321"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x9f, 0x4, "30b71813460d8a2d5fe4910f86f0559bebe75ee0a14b7266f0d6d5df879a64bed4b12abc236687cc4c9e9bb7ff51a31c186f673964611e4bc48dc35619169ef2b8d59d4d1f00ffb7efa3fc39291b90b9ddd48a01ae20182c632cb6089d8c4ed34e0b6090eb42ed83a77d2f6cf53df20625d2f8c59672e2953d25238cb3c6728e95bf6fa5e8ce7dd9ad67b2132e333837336c1b88806c38d602c1fc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x38, 0x4, "6de6f241a6d5e0bb22b665312189d0aadab0378ff72fdd4495e3516e3f0f8f81f5ab7f1aac557adc8400f1c06994470caf641493"}, @ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "8a2c107b93e9ab04c5e80b38a0bf15df75d324dd76507c7e082484b2a4020720c3288a2f4f9798a6bb8a755210bb5d654484f0aecefe2bdbb390c4a3e127c87e08ddf4a886fd299f5edc0a9dafe96783f13dc676337b6a1cd17e2b75047323502a3cbd78c0d6c5b5d89c4ef0eb873322e4cfdd50e26298ec7bd9a46cb544d7c953e817623b3327d27efca3b9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1584}, 0x1, 0x0, 0x0, 0x4153}, 0x20004011) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.805286612s ago: executing program 6 (id=16096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000110001010000502638598db7da070008", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 5.661343991s ago: executing program 6 (id=16099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x2, 0xc6500) 5.609975251s ago: executing program 6 (id=16101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x140, 0x140, 0xc, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @union={0x8, 0x4, 0x0, 0x5, 0x1, 0x8, [{0x8, 0x5, 0x3}, {0x3, 0x4, 0x8001}, {0x5, 0x1, 0xf0c}, {0xc, 0x5, 0xfffffffd}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0xc, 0x5}]}, @enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0xc, [{0x9, 0x0, 0xffff}, {0xf, 0x40, 0xa}]}, @fwd={0x4}, @union={0xf, 0x3, 0x0, 0x5, 0x1, 0xfc, [{0xa, 0x3, 0xb}, {0xc, 0x5, 0x6}, {0x10, 0x2}]}, @union={0x6, 0x6, 0x0, 0x5, 0x1, 0x61e6bf3f, [{0x8, 0x4, 0x40}, {0x6, 0x1, 0x9}, {0x4, 0x2, 0xffff7fff}, {0xb, 0x5, 0x80000000}, {0x2, 0x5, 0x5}, {0x1, 0x1, 0x6}]}, @volatile={0x9}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}, @var={0x10, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61, 0x2e, 0x5f, 0x61, 0x5f, 0x5f, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000540)=""/123, 0x164, 0x7b, 0x0, 0x7f, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000fff000/0x1000)=nil, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r5}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz79twkAYBfB3seM/SpERkiUipUyGyB5pKJHNKLQsxC4IycjCZgSg+P2Ke+/uvuYLD9WX5KOqv0va29vPZiljle61SbKdjyZ9ks+hz7T/X2dflnxfS3a/qcuYfJ3m23nq5piatBmu/yUlOb4lqf4Od1oTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7aJQAA//9ADA2E") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.136126768s ago: executing program 4 (id=16193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x140, 0x140, 0xc, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @union={0x8, 0x4, 0x0, 0x5, 0x1, 0x8, [{0x8, 0x5, 0x3}, {0x3, 0x4, 0x8001}, {0x5, 0x1, 0xf0c}, {0xc, 0x5, 0xfffffffd}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0xc, 0x5}]}, @enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0xc, [{0x9, 0x0, 0xffff}, {0xf, 0x40, 0xa}]}, @fwd={0x4}, @union={0xf, 0x3, 0x0, 0x5, 0x1, 0xfc, [{0xa, 0x3, 0xb}, {0xc, 0x5, 0x6}, {0x10, 0x2}]}, @union={0x6, 0x6, 0x0, 0x5, 0x1, 0x61e6bf3f, [{0x8, 0x4, 0x40}, {0x6, 0x1, 0x9}, {0x4, 0x2, 0xffff7fff}, {0xb, 0x5, 0x80000000}, {0x2, 0x5, 0x5}, {0x1, 0x1, 0x6}]}, @volatile={0x9}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}, @var={0x10, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61, 0x2e, 0x5f, 0x61, 0x5f, 0x5f, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000540)=""/123, 0x164, 0x7b, 0x0, 0x7f, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) getitimer(0x0, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000fff000/0x1000)=nil, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r5}, 0x18) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz79twkAYBfB3seM/SpERkiUipUyGyB5pKJHNKLQsxC4IycjCZgSg+P2Ke+/uvuYLD9WX5KOqv0va29vPZiljle61SbKdjyZ9ks+hz7T/X2dflnxfS3a/qcuYfJ3m23nq5piatBmu/yUlOb4lqf4Od1oTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7aJQAA//9ADA2E") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.944932237s ago: executing program 8 (id=16194): r0 = socket$pppoe(0x18, 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)=r1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='inet_sk_error_report\x00', r5}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000050016000000000008001700", @ANYRES32], 0x2c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb5e4fd27cae43ac5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x340, 0x9403, 0x0, 0x0, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r9, r8) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'veth1_to_batadv\x00'}}, 0x1e) 1.798680056s ago: executing program 8 (id=16197): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4}, 0x1c) 1.729401556s ago: executing program 8 (id=16200): ioperm(0x2, 0x2, 0x81) unshare(0x28000600) fsopen(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100040e, &(0x7f00000000c0)={[{@norecovery}, {@mblk_io_submit}, {@lazytime}, {}, {@block_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x3ed}}]}, 0x3, 0x449, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x10) ftruncate(r0, 0x12081ff) r1 = open(&(0x7f0000000200)='./bus\x00', 0x16507e, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 1.500169506s ago: executing program 4 (id=16205): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) 1.432919045s ago: executing program 4 (id=16206): r0 = socket$pppoe(0x18, 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)=r3}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='inet_sk_error_report\x00', r7}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000050016000000000008001700", @ANYRES32], 0x2c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb5e4fd27cae43ac5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x340, 0x9403, 0x0, 0x0, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c10"]) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r10, r9) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'veth1_to_batadv\x00'}}, 0x1e) 1.065064834s ago: executing program 0 (id=16214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x140, 0x140, 0xc, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @union={0x8, 0x4, 0x0, 0x5, 0x1, 0x8, [{0x8, 0x5, 0x3}, {0x3, 0x4, 0x8001}, {0x5, 0x1, 0xf0c}, {0xc, 0x5, 0xfffffffd}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0xc, 0x5}]}, @enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0xc, [{0x9, 0x0, 0xffff}, {0xf, 0x40, 0xa}]}, @fwd={0x4}, @union={0xf, 0x3, 0x0, 0x5, 0x1, 0xfc, [{0xa, 0x3, 0xb}, {0xc, 0x5, 0x6}, {0x10, 0x2}]}, @union={0x6, 0x6, 0x0, 0x5, 0x1, 0x61e6bf3f, [{0x8, 0x4, 0x40}, {0x6, 0x1, 0x9}, {0x4, 0x2, 0xffff7fff}, {0xb, 0x5, 0x80000000}, {0x2, 0x5, 0x5}, {0x1, 0x1, 0x6}]}, @volatile={0x9}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}, @var={0x10, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61, 0x2e, 0x5f, 0x61, 0x5f, 0x5f, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000540)=""/123, 0x164, 0x7b, 0x0, 0x7f, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000fff000/0x1000)=nil, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r5}, 0x18) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz79twkAYBfB3seM/SpERkiUipUyGyB5pKJHNKLQsxC4IycjCZgSg+P2Ke+/uvuYLD9WX5KOqv0va29vPZiljle61SbKdjyZ9ks+hz7T/X2dflnxfS3a/qcuYfJ3m23nq5piatBmu/yUlOb4lqf4Od1oTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7aJQAA//9ADA2E") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.063347194s ago: executing program 4 (id=16215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x140, 0x140, 0xc, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @union={0x8, 0x4, 0x0, 0x5, 0x1, 0x8, [{0x8, 0x5, 0x3}, {0x3, 0x4, 0x8001}, {0x5, 0x1, 0xf0c}, {0xc, 0x5, 0xfffffffd}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0xc, 0x5}]}, @enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0xc, [{0x9, 0x0, 0xffff}, {0xf, 0x40, 0xa}]}, @fwd={0x4}, @union={0xf, 0x3, 0x0, 0x5, 0x1, 0xfc, [{0xa, 0x3, 0xb}, {0xc, 0x5, 0x6}, {0x10, 0x2}]}, @union={0x6, 0x6, 0x0, 0x5, 0x1, 0x61e6bf3f, [{0x8, 0x4, 0x40}, {0x6, 0x1, 0x9}, {0x4, 0x2, 0xffff7fff}, {0xb, 0x5, 0x80000000}, {0x2, 0x5, 0x5}, {0x1, 0x1, 0x6}]}, @volatile={0x9}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}, @var={0x10, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61, 0x2e, 0x5f, 0x61, 0x5f, 0x5f, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000540)=""/123, 0x164, 0x7b, 0x0, 0x7f, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) getitimer(0x0, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000fff000/0x1000)=nil, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r5}, 0x18) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz79twkAYBfB3seM/SpERkiUipUyGyB5pKJHNKLQsxC4IycjCZgSg+P2Ke+/uvuYLD9WX5KOqv0va29vPZiljle61SbKdjyZ9ks+hz7T/X2dflnxfS3a/qcuYfJ3m23nq5piatBmu/yUlOb4lqf4Od1oTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7aJQAA//9ADA2E") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 812.800913ms ago: executing program 7 (id=16219): r0 = socket$pppoe(0x18, 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)=r3}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='inet_sk_error_report\x00', r7}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000050016000000000008001700", @ANYRES32], 0x2c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb5e4fd27cae43ac5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x340, 0x9403, 0x0, 0x0, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c10"]) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r10, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'veth1_to_batadv\x00'}}, 0x1e) 556.923292ms ago: executing program 0 (id=16220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 495.120282ms ago: executing program 8 (id=16221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1600ffff000000000400000005000000eaffffff4ae19492c43f9f5f235b5bc9fe5882e5e0b8253c580ad8cf70b7e74ddaf04689a77baa53426273d5e8461d0b6312ff7744cddddc86be4e5059ed0f18dc5201fc657b15f5a8dc4f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000001100)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1], &(0x7f0000000880)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x8, 0x400) waitid(0x1, 0x0, 0x0, 0x60000008, 0x0) syz_io_uring_setup(0x3430, &(0x7f0000000100)={0x0, 0x53c3, 0x10100, 0x0, 0x263}, &(0x7f0000001240), &(0x7f0000000080)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x7, 0xcf, 0x9, 0xb4f2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001180)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r4, 0x0, 0xb2}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x8090) syz_open_procfs(0xffffffffffffffff, 0x0) socket(0x1, 0x803, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000004348daa8724cb0fc0000000000000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r6}, &(0x7f0000000cc0), 0x0}, 0x20) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_bp={0x0}, 0x4008, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2b8, 0x0, 0x0, 0x0, 0x6, 0x374, 0x0, 0x0, 0x6e8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 476.299711ms ago: executing program 0 (id=16222): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) vmsplice(r2, &(0x7f0000000180), 0x19, 0x2) 467.682982ms ago: executing program 4 (id=16223): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x400c0c8, &(0x7f0000000000)={0xc9, 0xf7, 0x0, 0x1, 0x1, 0x6, @random="71b2ca929713"}, 0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={0x0, @rand_addr, @local}, &(0x7f0000000400)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x0, 0x3, 0x28, @mcast1, @mcast2, 0x40, 0x8, 0x7, 0x6bc}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'tunl0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x8000, 0x10, 0x3, 0xd90, {{0xd, 0x4, 0x3, 0x6, 0x34, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x8, 0x3f, 0x0, 0xf, [0x2]}, @end, @timestamp_addr={0x44, 0x14, 0xfb, 0x1, 0x6, [{@multicast1, 0x80000001}, {@local, 0x2d}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)={0x20, r6, 0x10db0db96401d82d, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000180)={@local, 0x1a}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a40)={0x1584, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1cc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffb30}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "ef78ed34c5c3b1778ba5783d4c2d8d1e59d456453237ebc8e608765864c3c9833ae90bb6002989dae8f3e853549fe428a0c7d023f7a39959e4b48ab1acc9d459ae6ce7f59f837ca6abd5537efe1bd2ed380e808848f686589b1a12523bd947a2f28ba12aa91a7e3d768162a3186a444d18758137865805dc37314239c9c9aa310f51a9e5903092f2d94555af0dc37875777775971f55807cda610d82501c81f92c97df66f71a1790518efadac4383af0534f24b085a255d3dbdc3239af1075f2297bf7f7bac2bc5a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0xda, 0x5, "9b4e5ed0f279840a26f3895bc2a56c54ca7e2a77dbd58ccba619ef208e59750b5a9aa2b90d767a5b6e14633ec9a83f38736f132f4439102e086624df8dce175a4ca4e9e2d9ca43b2dc778148c9022303b49e93a5e5b5eb69ce64dea5fc91fa65d91fa1e57907471379d0511a536b8b90ef45f6c8f01c041688b76418fcd5e42b30c64c02a98447a817d10bb39e772f0870da12824dc3c7328a3a1ba87d5df24e0a97fc7be8c9c9a6f0f2320fe2d1221a0f464cb665efa459823ecefa0c1ce9f34805763e880e789d0d97f5a6164bc47952e282179d8a"}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_WANTED={0x122c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "5380da7ad06fd7d4309b5e70acb61bd03ca100bd5644d150b735ca40dc0b82372fad97c7fc062f5b5e82718a7133ae5c534d8d16d18291c987028b3bd7bb76140c921f93e5bf82b354a0764a4c52182b3ac78bee6ef0c658fe28462b3e649b1e2d6e7163972c9aff81473b728da7041160dc74ef1c8a5213e0b9e5a55b5e5445f7212650c0ded959aa2cddde445d6bc96224c41bfea4ff52a7418fe66befc6c75b32981dae5c9a1d68b346fd32617b0d1aadd4d60ab0b1b89907c1205975cedf2bddd5663bbe7db7b5b392bc114d4690e65845cb8cbcadc984cf4bd9bd5c0761385013bac18455e749439c00e9ebef65d36a3b07a2bde70495e1439e2b9b3b27a0207c254e5af1830a54e6c6a532b296a9721961cbf808da8a612e29add1789e3c509576d0e3963fcb420db50069d127ba94df06c14cfd2d915052d77b26478b757e5b98a14f8c52cc9aa1ee77773f61a5964bf0ac811dd6960a9ca7bdab8585cb14c68ff0b76eaf6e2aff0b51583853fc3d40e4e5e93faf6c18f07b9a0a93cb1448e2a5a66a4d920d2e337d9d37ceea505b650567e02a24538e5406ad78c2bc132b5198ed0b4db7f9b636339cf4d8c2186ef2e3fad7bb7e06fcf47921d9d3ce45ee9820bc85a2480761c35436cf49858f24458e9a420fb72c1d200a626436939acf178cb56292d179e5710a62da3eb40a93e6de50d636907286872cdced1defc634bc5dd5ed20c6d8bf6f75f167b4ddcaccbd72b302cf3ba16d6b3007dfe319a39c270c2801ada42b41c61daf5c10fe05df3a168005011c61c8434824f5f18399075bda55163e80f30a516865178ebf2e235a0cea681d4d8a3a8c24673bed93e17f111c6083554d71f57b495ed87bc227cbd21cd3c20725e4386adc17d48f680194043ceb14459d31dda362ae4867e718a25fb3283833d495996a0b38134bdb7d70ee4bc5ea947fc4c9d8a058c6a3fc839e1abf89b4644be040e27598371306308ad1890f95d73dc5416f812026ea33abbaddb5aa0f998202ed061fb28b1540a7b574056c749bbae409fb6468cd2d99b75feb1630b4b4391208ccddf929a19ae7a2b0943beaf39f44b984b98d57fa389d9b0bc60e87a5bacd9ae0c8eabf46e0bba032f93030ba85ef34297d7e4e6fc971e867b4c8d6ca3174761b837ab7bd494f1899fb9bd6ec4b5ffdc82d34145bc4eed40ffe973d1bd36236a87d03a03f2edfab48a967dceb27a17100315719d19705fae0dc14695ee0ae9f1e291ad777b812bd42a2006a01d268f1ed6b46e9fb4afde09bc588e841d6ed84b51e89f6d4dc66733b0003b48a006f3788e1827875f071c8619acce2c02b896071954cde4c6e114a2e0b77f763d276df4b34cdd18b0f43716fb7734e444456b6bc0a8cb4f1ff7c8d5f841ff7a1a6b1356ba4568176669c0dbbdce59798ee483810a9dc2a8a41c508f8d8217e6caef0493c69d1d1ecba08d985aa6cf768f99c3832a5936126402736bbc74bb0cfad1b91ef17983445d604002ecd3b40e8e6a2103f8be1b5e10a9988751c175ba74317e5807e5db96bc8dc36f7ead1d1665fd1e729a41a520422f8aa32e4ebb803f493d1ac99e4b87e09fa9d1efbac36188d940da208103b3275332d0609ddc10d892275bccd852ad67c974cd3c3a80186629aac3a1260376c945159baf1dcc66934e13eec1b3617b502ffc08025682101153afb5cef1d700b566f83e4c21e222f312004a9cf6ec8a0733ae36602cd7e1d470ae1bc63085d3a8ca447ad5acbb8ec7622f9196b53f39b0aa1db4187bc53cb363f1c41a4b7a25df3d78a5980c67a165db720d9686f7f260ee0dfc8818d86ca4ceed3bfd4a1e4d81c45da63943f44352d3b0bba53cb7e94d1fa05eb66d6e433d19a21b1a2a2ae75ed8c78069b41d7fbcdf09e74a7590f4e9969849fa6d1cb94ba4ce4c27aa8ff53536a8cca32d4c570ab1855a1b7fc158aa2bd0470406b9172d18e739a97592a9839a92d974e2c66bb08c2be8b21568004a45d9ae2cfdfa8f381003df837844374269531486e99944ce66063da6e27bbfb5b696057522ef89acc6b8abbf0bb754595ad486ae7025449a3863b2db308ef081150505ff92b7c02ded03e2dc4a7e680b3307c85676cce518639f84c024c03a7376c3f0d36430c8fd9fad718a26127d0017edddc453c47533a6ec8fec41c2c93cfbb3925266286a59fbd29b62547bbee38580eea4079f158402c39078ca62cf41b8db491d6e384898be4f8154608bd7d115f5a890b5d788be40706c60824181411fa4755eb32dac54306004751d1e35113a2615dc0243d798503894d944c94ba5c2def37372a3cbf0de34afb35192356b1d879cbbcf03b3e8d627e8b32cb9f019c3ad8fad28f154c5e18014a6dd6388a9d2cd3b7f92a86eb0b6780bc56f0f00b505c8d1b1a4000f31ece8a08f4c02bddf4059b45420a31ec2d9d1724a0a93a7e4033cc44161d1ae2deb029433eee3b643b3f57593dba390624538d0bb3ef7e63180004402d69f331ec33730bac39b998f8902730e9fdad417018e7f24eb91729d0c2fe0345663d5c8e36cab71b3528830352a0fb444892b7c5a467f925ede82f281cbf10b7be97396321e99d10e9e0b999633b0f5d8ecffaab85fd63683aa3c81feda0e2465e29afcb0048aa7daa810bec9c53c81b6648377d64df69b6d1f8f131f36ae3ea46ef8a6758c25dee7924b1ff379084777c5f6afa189e9ec7b3adf551b6c4dfa2a0240cd9af13202de0418c8d1540733caa8ae23cfc8da9a37c25d1f422cb7988c4bf4038ef2afb6456444375dd27c0f0dfb0ab0c746f42050a4bce9bf876dcb0d47c027aa138ae7dcb4174286eca1a717cd923a49c3b4a9abef3dfc2d6212639e5adbb06624cc490f663a4f94a4873d9c2b6d992500de2326835140259e8795fe19879adfbd4d8aec3ffacd7182ce60599b0e0e2c9637dc00a3d39d453b29927c14b718803d12ca00b6e9c60a5a1267c86101d735b6debe914901825d97072536a1ea9f5839d9fc58f0aa546fcc9e61e8db1641d93ff0dc6aa3d50c725c2792aa20be8f5a61a04b072bf314940ddaa5cdc9f2fb7a1604f041b6e3f3fb3c96668fc05ea4ef32ee4a68431bf55ab40cf3d1a2b0814df751b4446f55387d56a2ca5166fcde83d44de7a87ce3873567f8c9dc63e4444c13dbe47f810a17165155eea2c9fbe8f566fa45b2960fda715c432cdeb120a65f82c6a7a1dccdeae00699daa86c9373ba6e6a821d349910c958e1b50bfd1b922871ea3b58101b400866662b3d9b6d4a71d5802a25e4629199e9e2b8390cec517c41f7481e84240dfa35c4204207b8e910c0da16cfc6e79782badef5460c770c5150f841b1e6f869c64e5cf906fb8fc51e7671a25a2ad89a94c0a5a7001ab8fc2dd76ec58dcb9da6745000f4d5ce9409ae74a1a42ef2e40a2682006c2bd5ad08c5c9f40f299a1e74d09509569f3160251a03e7038e4d408a37ac326f538f6b0704c56961e4a4c50acf68e872e66c9f7095d8af3c6c552e1efda9d8693ee4eed32c8a6fbaf7378002cde396ad38d50a59d071f2c386ba90fd801ea8ddb49979ad62df53658091fb1b36bf466d2f1f8ecba79195a4bbca95af3ef73a54734690534c84f8a2546a53eb3d80e17e00f0009a84c8282f9f9c57791284656426484c248175f5e0cee2de2218f7a4fffff9349674f739d3fc35c6baea9becdbfdd43202bcd56a76060dc31509a51e7d4021bcdd211daa07b7fc368d1e5d7be9246494b4d5ec99a835bb6afe291c5693c087a588a96b524af588891f3942c05a8fd3ccc0afe650a247f290294540148c70d2ee2d45e89404c6035018def30cd1c7a10895ebf8c2785c9fdfae113ed179013e1ec340deb1c2629ef934d76dcac14e0cae68a086a519e04161a06b154c8299ed643944dcc566d6ea4c2400989954673bd0846fd562347a6abe8c3a1675289e034e68d04129cbb89c8745df43b3181fefa0ccc2f955ea1400f302f5e1c19bcb702514278a6c911f47f18943365acdd1e5444cbe60bc97b099a36dda7863183e1221419b8bcba876debd4f7e5c2473b120af94293b9eeba0ca10b6b1747685488157ec61276787ba9f2e8c6deb6a2a7a5bb3e54f1b48f217c33c4ee37478b98491bf168a5606cf9ca84d04d81bc49fa0ace911da90b370df298683550d73025248bced8179fd10693f8a22d424356a88f7df3f8e3e3a45fbbe7d16672bfc03dd4776270c6dab2ca3253a647ec6e5d183ca2a3c9aaf944f8e00357d94d852908fe2065cdd523ac40cc45b88227b81785836f63a0348dbfef0f56f1cb919ff3885d760ea9856e8f081cae4e6386c75d8a7f91a532e49b31e608da756aec7b69984af5036956235b23f421ff0bcce5af070ba53419e973563d8af4abf7cd9d39392ec3f14cea12443524187237c734617b1a7cf8410fee14c4a71f9f3feb4c943833ffc4725bee05aa646695fbdfbd8e9dbd8e4947159c9cbe20e7a5c1d5f596b2a7af648bd773ae88e6f4c5ec358d8aef1c0c6408c7046d5a26aca660c7d0bc498e5335e191464bfa6a5d4612f31d960d6845b69c2fbfff32e3c4493c7f291858c45c5005d2835e242323b8b63e3151078620c4c039605d0d81e136380d55aa6692942c3a7fcfa99c8171f7ec05532e2645cb2a6332e0472c69ced90d84708024b36643c12975d9202411e3e0fc5ebb6d99e6d5ce36acf35905169061509e58706b6cc5b31d00c25ad69b28eb479990496331800cd3a7c2603a0e28b160940f4ede4e3982e63fe1c5e14c34b58063e4acf6360aefa20e5aeae00ddc149f19bd42b00009fd53aba99e8d1b7c937b1dcd933240cbf408b98f45ba9596f418f97a45a00fd1c2eedfae903d387cd82781d3b507ec7a4a96a0eeb7231cd16c7366106c1131251cc5828bda45faa38c220f0bce538795c99b7f01579b76c95e595c721e22e70bc812a73aa924cb8b27f322d0be1403b141b961a4db57e712f0fec9c99a2277886a21a65a2892512fb7f55650b53424b2d646b6dc9c34eaa647c3357952b214a4410304e7db250bfc1c51da180fa2a75e26a4ced49508f677569fbc9b90e4fb569ba8e87726acac5d7cd0aeb694130f366fad61f9a35e2e75757171a28f69c9ff552f80e88ea5f3905069771a92bd41ef6e0fa62ff01bd218c65474ec412205e08f5d321676992e7063dcfca33dd35532ed998592b1780286690fe4b6188936aa221763dd8467b9a062dac70185ead428ba35441c3885e930497660bb0179f838655cdad613d0965498a0d5e22ae80a72350ada4632f9e53a8fd8b7473fce17faf1b8a02a65be3171a91ce7fa2fad6c2e2165af665a90ca8d611d8ad4786d788e88b467ea8bcf1cd3477d88b8e6a786804f6e8e0180d438b2f788b19fde096906431d91b047f97afc9a655943e29868b0d4010336ca9f6e487b456932dd6bf2ac31a902f2f8b8c0acb687f1c322b0a8bc90fc05f6f807e2e46ad27b144829404ab53e56fd7b14551a7ac99f98e75b942d323577ad515d7f0015c0ea9ccdf9000319e3e9c65401ffb314240fe18627f7d3163c518b1c8d2a90c101346c0fa9990850ee5cdf684da0eece029f2e1a4909437ecad9c317928f6b01f7e915dfd424560ffa1609fe85b99eb1ad5a0db23883e8db73b7c5b620acaaf3b15d17922bf208c6e0b478d34e7678b6ada64a7a809a0c02aa48e5e5fa54258aa2962d9a3e7e2e1c01133fa4930ca3b5e2f03fdc64e8c22529a31f0da8a18946ae8ef4ca17cca346d2fa69477b78c4d5"}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "33a1c31ee94cbdc3d955f7d77866c9a431c37c3bac5b952b963c9d162746e01d3366934edd4adfcbb0ab7f508ce69a3812de37562d884a379ad9c12330486ddb16906b1bf33265bb9cddb042f24afcffd631361c52d25d599b52efd9f93e755826a7e8b87ece4a795553d1c0a0c5827e937bffb37737c8eba76070b7c8801fdf08b5b2e8ff3e96c2165f3fa42f98e3485e72feb268680a23dfd579117cd321"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x9f, 0x4, "30b71813460d8a2d5fe4910f86f0559bebe75ee0a14b7266f0d6d5df879a64bed4b12abc236687cc4c9e9bb7ff51a31c186f673964611e4bc48dc35619169ef2b8d59d4d1f00ffb7efa3fc39291b90b9ddd48a01ae20182c632cb6089d8c4ed34e0b6090eb42ed83a77d2f6cf53df20625d2f8c59672e2953d25238cb3c6728e95bf6fa5e8ce7dd9ad67b2132e333837336c1b88806c38d602c1fc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x38, 0x4, "6de6f241a6d5e0bb22b665312189d0aadab0378ff72fdd4495e3516e3f0f8f81f5ab7f1aac557adc8400f1c06994470caf641493"}, @ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "8a2c107b93e9ab04c5e80b38a0bf15df75d324dd76507c7e082484b2a4020720c3288a2f4f9798a6bb8a755210bb5d654484f0aecefe2bdbb390c4a3e127c87e08ddf4a886fd299f5edc0a9dafe96783f13dc676337b6a1cd17e2b75047323502a3cbd78c0d6c5b5d89c4ef0eb873322e4cfdd50e26298ec7bd9a46cb544d7c953e817623b3327d27efca3b9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1584}, 0x1, 0x0, 0x0, 0x4153}, 0x20004011) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 453.912801ms ago: executing program 7 (id=16224): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x200000000000021e, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x24fd, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYBLOB="c2388f953a72e89ca919da4400988c868f3d52423648399e1dc24f0f674d88ebf21a4eb9bfcaa136172be40c9c7c16d7d74fa190addd57b4d70e3242b7fe31e9afd2b5e7a0e8d78e29691309efd2941276ffeff83ffe5e7aa69144dfabaf42d21f61608dab78cac55a1409599ce59e5f18c5288a3cfd906fc449d5021ca923678a8c68efc06b458c53e68d80b07a0fad37d993610790136cc1668f1c33e73486a529d83fde6e8b94c9177f71e12c956ed7060cb6bc68e1a663d18e64f24f4f34793065acf63c97b791754751afebd7ed87db5314b48baae36d1244fb5812aeb9f3295748ea67d1a62e223ed4e8e168b9", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) symlink(0x0, &(0x7f00000017c0)='./file0\x00') creat(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) 341.926381ms ago: executing program 0 (id=16225): r0 = socket$pppoe(0x18, 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)=r3}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='inet_sk_error_report\x00', r7}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000050016000000000008001700", @ANYRES32], 0x2c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb5e4fd27cae43ac5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x340, 0x9403, 0x0, 0x0, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c10"]) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r10, r9) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'veth1_to_batadv\x00'}}, 0x1e) 341.523211ms ago: executing program 7 (id=16226): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460004000cff7f00000000000002003e"], 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 340.374621ms ago: executing program 8 (id=16227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRESHEX=0x0, @ANYBLOB="000000000000000000007d61e04714120ffff800"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000010000000000000000000000791209000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)="0096bf50f949b332a2ff", 0xa}], 0x1, 0xb9c4, 0x0) 281.436761ms ago: executing program 7 (id=16228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r1, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file2\x00', 0x301865a, &(0x7f0000000180)={[{@grpjquota}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x36, 0x36, 0x39, 0x39, 0x36, 0x63, 0x36], 0x2d, [0x32, 0x33, 0x32, 0x63], 0x2d, [0x33, 0x5, 0x27, 0x36], 0x2d, [0x32, 0x33, 0x35, 0x63], 0x2d, [0x34, 0x64, 0x64, 0x64, 0x37, 0x64, 0x65, 0x38]}}}, {@fowner_lt}]}, 0x3, 0x60e, &(0x7f0000001240)="$eJzs3c9rHFUcAPDvzCZp0kbTiogtigEPLUjTpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtNAUPCgoiXkV68R/wLr17E0G9eRaqSEVBpZGZnU03yW6apNndNPP5wGbnvdnse999eTvv7eTtBFBaw9mPNGJ3xL3TScRQw77BqO0cLh5394/rZ7JbEvPzb/2eRFLk1R+fFPc7ikR/RHx/LOKJyvJyZ65eOzdena+5EXFg9vylAzNXr+2fPj9+dvLs5IWxgy8fOjz6ytihsQ2Jc0dxf/zEm898+uF7L039UN2fxJE41fvBRCyJY6MMx3DcK0JszO+JiMPZRpPX5VGzthDSttWD9akUf4+9EfFUDEUlT9UMxfQnXa0c0FbzlYh5oKQS/R9Kqj4OqM/tVzcPPtXmUUnn3DlamwAtj79nW/7ZSPTnc6Ptd5OGmVHts42dG1B+VsZ/1/d8md1i0ecQfy+0Ts8GlNPK3M2IeLpZ/Elet515pFn86aK5fhIRoxHRV9Tv9fqOxR91rErSsN2Oz2FWspb4G9shjYgjxX2Wf2yd5Q8vSXc6fgDK6fbR4kA+l6XuH/+yw3h9/BNNxj+DTY5d69Ht41/r8V/9eN+fj3vSJeOwbMxysvlT9i7N+OXj45+3Kr9x/JfdsvLrY8FOuHMzYs+S+D/KT9MkC+2fNGn/7CGnj6yujDd+/O14q33djn/+VsTepvOf+6PSbGuF85MHpqark6O1n03L+Pa7d79uVX6348/af3uL+Gvzm7z9l524y16TS6ss45uTt8632jf4wPjTX/uS2nyzr8h5f3x29vJYRF9yonhIQ/7BletSf0z9ObL49z3fvP8v+vu/ufh5Bupvmatw6e1zd1vtW0/7N8yw7q19trVYFv9Ei/Zfqf9neZ+tpoAbEX+9c+XZVrtXin/gIWMDAAAAAACAsknzc7BJOrKwnaYjI7X1sk/G9rR6cWb2hamLVy5MROzL/x+yN62f6R6qpZMsPVb8P2w9fXBJ+sWI2BURX1QG8vTImYvViW4HDwAAAAAAAAAAAAAAAAAAAJvEjmL9f/061X9Wauv/gZJo5wXmgM1N/4fyyvv/sks8AWXg+A/ltab+780CthRdGspL/4fy0v+hvPR/KC/9H8pL/wcAAACALWnXc7d/TiJi7tWB/JbpK/ZZEQRbW2+3KwB0TaXbFQC6ZuHUv8E+lM6qxv//FF8O2P7qAF2QNMvMBwfzK3f+201/EwAAAAAAAAAAAABog727W6//tzYYtjbL/qC8HmL9v68OgEecr/6H8jLHBx60ir+/1Q7r/wEAAAAAAAAAAACgYwbzW5KOFGuBByNNR0YiHouIndGbTE1XJ0cj4vGI+KnSuy1Lj3W70gAAAAAAAAAAAAAAAAAAALDFzFy9dm68Wp283Ljx77Kcrb1RvwpqB8p6Ldb4W5F0/mUZiIiuN0rbNnoacpKIuazlN0XFLs/E5qhGvtHlNyYAAAAAAAAAAAAAAAAAACihhrXHze35qsM1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDOu3/9//ZtdDtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODR9H8AAAD//56eQqU=") 219.840321ms ago: executing program 0 (id=16229): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 188.56911ms ago: executing program 8 (id=16230): ioperm(0x2, 0x2, 0x81) unshare(0x28000600) fsopen(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100040e, &(0x7f00000000c0)={[{@norecovery}, {@mblk_io_submit}, {@lazytime}, {}, {@block_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x3ed}}]}, 0x3, 0x449, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x10) ftruncate(r0, 0x12081ff) r1 = open(&(0x7f0000000200)='./bus\x00', 0x16507e, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 128.22461ms ago: executing program 7 (id=16231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 65.28645ms ago: executing program 0 (id=16232): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9f6b010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000080000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000030000000000000c00000000100000000000000900000000000000000000000205000000020000000000000a02"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xd, 0x0}}, 0x10) 59.38548ms ago: executing program 4 (id=16233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x140, 0x140, 0xc, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @union={0x8, 0x4, 0x0, 0x5, 0x1, 0x8, [{0x8, 0x5, 0x3}, {0x3, 0x4, 0x8001}, {0x5, 0x1, 0xf0c}, {0xc, 0x5, 0xfffffffd}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0xc, 0x5}]}, @enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0xc, [{0x9, 0x0, 0xffff}, {0xf, 0x40, 0xa}]}, @fwd={0x4}, @union={0xf, 0x3, 0x0, 0x5, 0x1, 0xfc, [{0xa, 0x3, 0xb}, {0xc, 0x5, 0x6}, {0x10, 0x2}]}, @union={0x6, 0x6, 0x0, 0x5, 0x1, 0x61e6bf3f, [{0x8, 0x4, 0x40}, {0x6, 0x1, 0x9}, {0x4, 0x2, 0xffff7fff}, {0xb, 0x5, 0x80000000}, {0x2, 0x5, 0x5}, {0x1, 0x1, 0x6}]}, @volatile={0x9}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}, @var={0x10, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61, 0x2e, 0x5f, 0x61, 0x5f, 0x5f, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000540)=""/123, 0x164, 0x7b, 0x0, 0x7f, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) getitimer(0x0, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000fff000/0x1000)=nil, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r5}, 0x18) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz79twkAYBfB3seM/SpERkiUipUyGyB5pKJHNKLQsxC4IycjCZgSg+P2Ke+/uvuYLD9WX5KOqv0va29vPZiljle61SbKdjyZ9ks+hz7T/X2dflnxfS3a/qcuYfJ3m23nq5piatBmu/yUlOb4lqf4Od1oTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7aJQAA//9ADA2E") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 7 (id=16234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) kernel console output (not intermixed with test programs): 683.663874][T10673] syz_tun: entered promiscuous mode [ 683.679487][T10673] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 683.691930][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15133'. [ 683.702474][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15133'. [ 683.726795][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15133'. [ 683.756911][T10664] 9pnet: Could not find request transport: t [ 683.782707][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15133'. [ 683.793378][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15133'. [ 683.811987][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15133'. [ 683.902346][T10701] netlink: 'syz.4.15144': attribute type 3 has an invalid length. [ 683.975823][T10705] lo speed is unknown, defaulting to 1000 [ 683.995641][T10705] lo speed is unknown, defaulting to 1000 [ 684.001622][T10705] lo speed is unknown, defaulting to 1000 [ 684.013471][T10703] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 684.022312][T10703] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 684.061623][T10705] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 684.074139][T10703] vhci_hcd: invalid port number 15 [ 684.080676][T10703] vhci_hcd: invalid port number 15 [ 684.091754][T10705] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 684.107340][T10705] lo speed is unknown, defaulting to 1000 [ 684.120260][T10705] lo speed is unknown, defaulting to 1000 [ 684.150281][T10705] lo speed is unknown, defaulting to 1000 [ 684.160833][T10719] netlink: 'syz.8.15147': attribute type 1 has an invalid length. [ 684.195296][T10705] lo speed is unknown, defaulting to 1000 [ 684.219769][T10705] lo speed is unknown, defaulting to 1000 [ 684.240427][T10705] lo speed is unknown, defaulting to 1000 [ 684.246583][T10705] lo speed is unknown, defaulting to 1000 [ 684.252735][T10705] lo speed is unknown, defaulting to 1000 [ 684.260305][T10705] lo speed is unknown, defaulting to 1000 [ 684.276072][T10705] lo speed is unknown, defaulting to 1000 [ 684.282095][T10705] lo speed is unknown, defaulting to 1000 [ 684.293256][T10705] lo speed is unknown, defaulting to 1000 [ 684.300980][T10705] lo speed is unknown, defaulting to 1000 [ 684.312201][T10705] lo speed is unknown, defaulting to 1000 [ 684.319770][T10705] lo speed is unknown, defaulting to 1000 [ 684.327470][T10705] lo speed is unknown, defaulting to 1000 [ 684.337105][T10705] lo speed is unknown, defaulting to 1000 [ 684.343893][T10705] lo speed is unknown, defaulting to 1000 [ 684.400868][T10729] wireguard0: entered promiscuous mode [ 684.406541][T10729] wireguard0: entered allmulticast mode [ 684.413817][T10734] warn_alloc: 6 callbacks suppressed [ 684.413834][T10734] syz.8.15149: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 684.433818][T10734] CPU: 1 UID: 0 PID: 10734 Comm: syz.8.15149 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 684.444707][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 684.454903][T10734] Call Trace: [ 684.458274][T10734] [ 684.461221][T10734] dump_stack_lvl+0xf2/0x150 [ 684.465897][T10734] dump_stack+0x15/0x1a [ 684.470122][T10734] warn_alloc+0x145/0x1b0 [ 684.474629][T10734] ? __schedule+0x6fa/0x930 [ 684.479325][T10734] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 684.485270][T10734] __vmalloc_node_range_noprof+0xaa/0xe80 [ 684.491035][T10734] ? __pfx_futex_wake_mark+0x10/0x10 [ 684.496406][T10734] ? __rcu_read_unlock+0x4e/0x70 [ 684.501409][T10734] ? avc_has_perm_noaudit+0x1cc/0x210 [ 684.506830][T10734] ? should_fail_ex+0x31/0x230 [ 684.511663][T10734] ? xskq_create+0x36/0xd0 [ 684.516124][T10734] ? should_failslab+0x8f/0xb0 [ 684.521421][T10734] vmalloc_user_noprof+0x59/0x70 [ 684.526451][T10734] ? xskq_create+0x79/0xd0 [ 684.530956][T10734] xskq_create+0x79/0xd0 [ 684.535333][T10734] xsk_init_queue+0x82/0xd0 [ 684.539864][T10734] xsk_setsockopt+0x388/0x520 [ 684.544594][T10734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 684.549902][T10734] __sys_setsockopt+0x187/0x200 [ 684.554800][T10734] __x64_sys_setsockopt+0x66/0x80 [ 684.559929][T10734] x64_sys_call+0x282e/0x2dc0 [ 684.564741][T10734] do_syscall_64+0xc9/0x1c0 [ 684.569274][T10734] ? clear_bhb_loop+0x55/0xb0 [ 684.573986][T10734] ? clear_bhb_loop+0x55/0xb0 [ 684.578766][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.584877][T10734] RIP: 0033:0x7f2004755d29 [ 684.589448][T10734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.609671][T10734] RSP: 002b:00007f2002dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 684.618183][T10734] RAX: ffffffffffffffda RBX: 00007f2004945fa0 RCX: 00007f2004755d29 [ 684.626189][T10734] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 684.634183][T10734] RBP: 00007f20047d1b08 R08: 0000000000000004 R09: 0000000000000000 [ 684.642181][T10734] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.650185][T10734] R13: 0000000000000000 R14: 00007f2004945fa0 R15: 00007ffc43bd0318 [ 684.658203][T10734] [ 684.661615][T10734] Mem-Info: [ 684.664855][T10734] active_anon:14987 inactive_anon:1 isolated_anon:0 [ 684.664855][T10734] active_file:25854 inactive_file:2503 isolated_file:0 [ 684.664855][T10734] unevictable:0 dirty:382 writeback:0 [ 684.664855][T10734] slab_reclaimable:3720 slab_unreclaimable:40191 [ 684.664855][T10734] mapped:32339 shmem:4568 pagetables:864 [ 684.664855][T10734] sec_pagetables:0 bounce:0 [ 684.664855][T10734] kernel_misc_reclaimable:0 [ 684.664855][T10734] free:1708339 free_pcp:47387 free_cma:0 [ 684.709864][T10734] Node 0 active_anon:59948kB inactive_anon:4kB active_file:103416kB inactive_file:10012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129356kB dirty:1528kB writeback:0kB shmem:18272kB writeback_tmp:0kB kernel_stack:7760kB pagetables:3456kB sec_pagetables:0kB all_unreclaimable? no [ 684.738085][T10734] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 684.757140][T10741] netlink: 56 bytes leftover after parsing attributes in process `syz.8.15149'. [ 684.765280][T10734] lowmem_reserve[]: 0 2866 7844 0 [ 684.765321][T10734] Node 0 DMA32 free:2949148kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:4768kB local_pcp:3532kB free_cma:0kB [ 684.765458][T10734] lowmem_reserve[]: 0 0 4978 0 [ 684.765489][T10734] Node 0 Normal free:3868612kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:59716kB inactive_anon:4kB active_file:103416kB inactive_file:10012kB unevictable:0kB writepending:1528kB present:5242880kB managed:5098208kB mlocked:8kB bounce:0kB free_pcp:185260kB local_pcp:150916kB free_cma:0kB [ 684.765752][T10734] lowmem_reserve[]: 0 0 0 0 [ 684.765785][T10734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 684.766001][T10734] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 4*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949148kB [ 684.766369][T10734] Node 0 Normal: 1091*4kB (UE) 655*8kB (UM) 2579*16kB (UME) 1901*32kB (UME) 1343*64kB (UME) 608*128kB (UME) 265*256kB (UME) 83*512kB (UME) 51*1024kB (UM) 55*2048kB (UM) 810*4096kB (UM) = 3868436kB [ 684.897402][T10734] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 684.906809][T10734] 32925 total pagecache pages [ 684.911606][T10734] 1 pages in swap cache [ 684.915791][T10734] Free swap = 124336kB [ 684.920048][T10734] Total swap = 124996kB [ 684.924244][T10734] 2097051 pages RAM [ 684.928060][T10734] 0 pages HighMem/MovableOnly [ 684.932746][T10734] 80180 pages reserved [ 684.940921][T10760] netlink: 'syz.4.15153': attribute type 10 has an invalid length. [ 685.430780][T10784] netlink: 'syz.0.15164': attribute type 1 has an invalid length. [ 685.440975][T10785] netlink: 'syz.6.15163': attribute type 1 has an invalid length. [ 685.782497][T10801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.808212][T10801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.084299][T10806] loop7: detected capacity change from 0 to 8192 [ 686.128304][T10808] loop8: detected capacity change from 0 to 8192 [ 686.155762][T10806] loop7: p2 p3 p4 [ 686.159638][T10806] loop7: p2 start 32769 is beyond EOD, truncated [ 686.166116][T10806] loop7: p3 start 458496 is beyond EOD, truncated [ 686.172639][T10806] loop7: p4 start 198639616 is beyond EOD, truncated [ 686.424034][T10838] netlink: 'syz.6.15177': attribute type 10 has an invalid length. [ 686.437627][T10833] netlink: 'syz.4.15180': attribute type 1 has an invalid length. [ 686.458129][T10840] netlink: 'syz.0.15182': attribute type 1 has an invalid length. [ 686.507965][T10847] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 686.574895][T10852] loop4: detected capacity change from 0 to 1024 [ 686.615707][T10852] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 686.642428][T10852] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 686.673009][T10852] EXT4-fs (loop4): invalid journal inode [ 687.248008][T10937] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 687.348844][T10953] siw: device registration error -23 [ 687.439432][T10964] loop8: detected capacity change from 0 to 2048 [ 687.466905][T10964] EXT4-fs (loop8): failed to initialize system zone (-117) [ 687.484316][T10964] EXT4-fs (loop8): mount failed [ 687.930066][T11018] rdma_op ffff888148dd0180 conn xmit_rdma 0000000000000000 [ 687.969681][T11018] loop6: detected capacity change from 0 to 1024 [ 688.624326][T11018] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 688.638218][T11018] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 688.682913][T11018] EXT4-fs (loop6): mount failed [ 688.806999][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 688.807017][ T29] audit: type=1326 audit(1735768483.870:57227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11012 comm="syz.6.15225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0adf6a4690 code=0x7ffc0000 [ 688.837098][ T29] audit: type=1326 audit(1735768483.870:57228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11012 comm="syz.6.15225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0adf6a592b code=0x7ffc0000 [ 688.860773][ T29] audit: type=1326 audit(1735768483.870:57229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11012 comm="syz.6.15225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0adf6a498a code=0x7ffc0000 [ 688.884450][ T29] audit: type=1326 audit(1735768483.870:57230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11012 comm="syz.6.15225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 688.998186][ T29] audit: type=1326 audit(1735768483.900:57231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11012 comm="syz.6.15225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 689.022050][ T29] audit: type=1326 audit(1735768484.020:57232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11063 comm="syz.6.15237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 689.045075][T11071] validate_nla: 6 callbacks suppressed [ 689.045096][T11071] netlink: 'syz.0.15238': attribute type 1 has an invalid length. [ 689.045994][ T29] audit: type=1326 audit(1735768484.020:57233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11063 comm="syz.6.15237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 689.083246][ T29] audit: type=1326 audit(1735768484.020:57234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11063 comm="syz.6.15237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 689.090657][T11073] netlink: 'syz.7.15239': attribute type 1 has an invalid length. [ 689.107002][ T29] audit: type=1326 audit(1735768484.020:57235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11063 comm="syz.6.15237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 689.107082][ T29] audit: type=1326 audit(1735768484.020:57236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11063 comm="syz.6.15237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 689.352697][T11084] loop4: detected capacity change from 0 to 8192 [ 689.411677][T11084] loop4: p2 p3 p4 [ 689.416977][T11084] loop4: p2 start 32769 is beyond EOD, truncated [ 689.423386][T11084] loop4: p3 start 458496 is beyond EOD, truncated [ 689.431171][T11084] loop4: p4 start 198639616 is beyond EOD, truncated [ 689.475894][ T3000] loop4: p2 p3 p4 [ 689.479826][ T3000] loop4: p2 start 32769 is beyond EOD, truncated [ 689.486216][ T3000] loop4: p3 start 458496 is beyond EOD, truncated [ 689.492677][ T3000] loop4: p4 start 198639616 is beyond EOD, truncated [ 689.586110][T11114] netlink: 'syz.4.15250': attribute type 1 has an invalid length. [ 689.635991][T11121] netlink: 'syz.6.15253': attribute type 1 has an invalid length. [ 689.981677][T11143] loop4: detected capacity change from 0 to 8192 [ 690.036205][T11143] loop4: p2 p3 p4 [ 690.040151][T11143] loop4: p2 start 32769 is beyond EOD, truncated [ 690.048007][T11143] loop4: p3 start 458496 is beyond EOD, truncated [ 690.055856][T11143] loop4: p4 start 198639616 is beyond EOD, truncated [ 690.074702][ T3000] loop4: p2 p3 p4 [ 690.078606][ T3000] loop4: p2 start 32769 is beyond EOD, truncated [ 690.085618][ T3000] loop4: p3 start 458496 is beyond EOD, truncated [ 690.092193][ T3000] loop4: p4 start 198639616 is beyond EOD, truncated [ 690.236463][T11174] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 690.368140][T11186] netlink: 'syz.4.15268': attribute type 1 has an invalid length. [ 690.382743][T11188] netlink: 'syz.0.15269': attribute type 1 has an invalid length. [ 690.393336][T11193] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 690.402074][T11193] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 690.445481][T11193] vhci_hcd: invalid port number 15 [ 690.450718][T11193] vhci_hcd: invalid port number 15 [ 690.487396][T11195] loop7: detected capacity change from 0 to 512 [ 690.496697][T11194] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 690.503360][T11194] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 690.512290][T11194] vhci_hcd vhci_hcd.0: Device attached [ 690.531372][T11195] EXT4-fs: journaled quota format not specified [ 690.603121][T11196] vhci_hcd: connection closed [ 690.609300][ T3287] vhci_hcd: stop threads [ 690.618451][ T3287] vhci_hcd: release socket [ 690.622889][ T3287] vhci_hcd: disconnect device [ 690.646290][T11202] netlink: 'syz.7.15271': attribute type 1 has an invalid length. [ 690.959965][T11233] loop8: detected capacity change from 0 to 8192 [ 691.032287][T11233] loop8: p2 p3 p4 [ 691.037702][T11233] loop8: p2 start 32769 is beyond EOD, truncated [ 691.044129][T11233] loop8: p3 start 458496 is beyond EOD, truncated [ 691.052052][T11233] loop8: p4 start 198639616 is beyond EOD, truncated [ 691.075529][T11258] __nla_validate_parse: 46 callbacks suppressed [ 691.075552][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15283'. [ 691.092231][ T3000] loop8: p2 p3 p4 [ 691.096306][ T3000] loop8: p2 start 32769 is beyond EOD, truncated [ 691.102884][ T3000] loop8: p3 start 458496 is beyond EOD, truncated [ 691.109447][ T3000] loop8: p4 start 198639616 is beyond EOD, truncated [ 691.346325][T11276] netlink: 'syz.6.15294': attribute type 1 has an invalid length. [ 691.438331][T11243] lo speed is unknown, defaulting to 1000 [ 691.628877][T11243] lo speed is unknown, defaulting to 1000 [ 691.688134][T11298] loop4: detected capacity change from 0 to 8192 [ 691.758775][T11298] loop4: p2 p3 p4 [ 691.762671][T11298] loop4: p2 start 32769 is beyond EOD, truncated [ 691.770447][T11298] loop4: p3 start 458496 is beyond EOD, truncated [ 691.778301][T11298] loop4: p4 start 198639616 is beyond EOD, truncated [ 691.807996][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15304'. [ 691.817192][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15304'. [ 691.851335][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15304'. [ 691.861550][ T3000] loop4: p2 p3 p4 [ 691.865571][ T3000] loop4: p2 start 32769 is beyond EOD, truncated [ 691.872091][ T3000] loop4: p3 start 458496 is beyond EOD, truncated [ 691.878569][ T3000] loop4: p4 start 198639616 is beyond EOD, truncated [ 691.936831][T11331] netlink: 'syz.0.15304': attribute type 10 has an invalid length. [ 691.962478][T11335] netlink: 'syz.6.15307': attribute type 1 has an invalid length. [ 691.976276][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15304'. [ 691.985487][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15304'. [ 692.014310][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15304'. [ 692.122907][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15304'. [ 692.133471][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15304'. [ 692.155217][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15304'. [ 692.300262][T11360] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 692.310079][T11362] syz_tun: entered promiscuous mode [ 692.339231][T11362] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 692.572200][T11377] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 692.578928][T11377] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 692.586695][T11377] vhci_hcd vhci_hcd.0: Device attached [ 692.685553][T11393] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 692.692997][T11393] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 692.707160][T11393] vhci_hcd: invalid port number 15 [ 692.712414][T11393] vhci_hcd: invalid port number 15 [ 692.746233][T11404] loop4: detected capacity change from 0 to 8192 [ 692.748380][T11397] vhci_hcd: connection closed [ 692.753076][ T3287] vhci_hcd: stop threads [ 692.763472][ T3287] vhci_hcd: release socket [ 692.769314][ T3287] vhci_hcd: disconnect device [ 692.785353][T11404] loop4: p2 p3 p4 [ 692.790517][T11404] loop4: p2 start 32769 is beyond EOD, truncated [ 692.797001][T11404] loop4: p3 start 458496 is beyond EOD, truncated [ 692.803555][T11404] loop4: p4 start 198639616 is beyond EOD, truncated [ 692.810365][ T3374] vhci_hcd: vhci_device speed not set [ 693.509297][T11471] loop4: detected capacity change from 0 to 8192 [ 693.580166][T11471] loop4: p2 p3 p4 [ 693.586534][T11471] loop4: p2 start 32769 is beyond EOD, truncated [ 693.592933][T11471] loop4: p3 start 458496 is beyond EOD, truncated [ 693.600785][T11471] loop4: p4 start 198639616 is beyond EOD, truncated [ 693.648077][ T3419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.688971][ T3419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.748935][ T3419] team0: Port device netdevsim1 removed [ 693.770072][ T3419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.788541][T11504] Cannot find add_set index 0 as target [ 693.800241][T11481] lo speed is unknown, defaulting to 1000 [ 693.829286][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 693.829303][ T29] audit: type=1326 audit(1735768488.890:57458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.6.15351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 693.862413][ T29] audit: type=1326 audit(1735768488.900:57459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.6.15351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 693.892155][T11481] lo speed is unknown, defaulting to 1000 [ 693.902872][ T3419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.007298][ T29] audit: type=1326 audit(1735768489.060:57460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.4.15353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 694.031357][ T29] audit: type=1326 audit(1735768489.060:57461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.4.15353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 694.055091][ T29] audit: type=1326 audit(1735768489.060:57462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.4.15353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 694.078954][ T29] audit: type=1326 audit(1735768489.060:57463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.4.15353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 694.103008][ T29] audit: type=1326 audit(1735768489.060:57464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.4.15353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 694.126773][ T29] audit: type=1326 audit(1735768489.060:57465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.4.15353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 694.150608][ T29] audit: type=1326 audit(1735768489.060:57466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.4.15353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 694.175226][ T29] audit: type=1326 audit(1735768489.060:57467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.4.15353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 694.186891][T11481] chnl_net:caif_netlink_parms(): no params data found [ 694.210883][ T3419] bridge_slave_1: left allmulticast mode [ 694.216651][ T3419] bridge_slave_1: left promiscuous mode [ 694.222358][ T3419] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.234472][ T3419] bridge_slave_0: left allmulticast mode [ 694.240156][ T3419] bridge_slave_0: left promiscuous mode [ 694.247346][ T3419] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.317558][T11523] loop4: detected capacity change from 0 to 8192 [ 694.374795][T11523] loop4: p2 p3 p4 [ 694.378811][T11523] loop4: p2 start 32769 is beyond EOD, truncated [ 694.385399][T11523] loop4: p3 start 458496 is beyond EOD, truncated [ 694.391858][T11523] loop4: p4 start 198639616 is beyond EOD, truncated [ 694.449655][ T3419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.461616][ T3419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.472071][ T3419] bond0 (unregistering): Released all slaves [ 694.481395][ T3419] bond1 (unregistering): Released all slaves [ 694.487951][T11529] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 694.491532][ T3419] bond2 (unregistering): Released all slaves [ 694.494568][T11529] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 694.496065][T11529] vhci_hcd vhci_hcd.0: Device attached [ 694.504257][ T3419] bond3 (unregistering): Released all slaves [ 694.538382][ T3419] bond4 (unregistering): Released all slaves [ 694.551977][ T3419] bond5 (unregistering): Released all slaves [ 694.561727][ T3419] bond6 (unregistering): Released all slaves [ 694.570853][ T3419] bond7 (unregistering): Released all slaves [ 694.580522][ T3419] bond8 (unregistering): Released all slaves [ 694.608578][ T3419] bond9 (unregistering): Released all slaves [ 694.632157][ T3419] bond10 (unregistering): Released all slaves [ 694.648820][ T3419] bond11 (unregistering): Released all slaves [ 694.658170][ T3419] bond12 (unregistering): Released all slaves [ 694.670533][ T3419] bond13 (unregistering): Released all slaves [ 694.691467][ T3419] bond14 (unregistering): Released all slaves [ 694.703681][T11548] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 694.710326][T11548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 694.711355][ T3419] bond15 (unregistering): Released all slaves [ 694.719394][T11548] vhci_hcd vhci_hcd.0: Device attached [ 694.731027][ T3419] bond16 (unregistering): Released all slaves [ 694.745578][ T9] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 694.750992][ T3419] bond17 (unregistering): Released all slaves [ 694.766152][ T3419] bond18 (unregistering): Released all slaves [ 694.796158][ T3419] bond19 (unregistering): Released all slaves [ 694.805303][ T3419] bond20 (unregistering): Released all slaves [ 694.814655][ T3419] bond21 (unregistering): Released all slaves [ 694.823456][ T3419] bond22 (unregistering): Released all slaves [ 694.832705][ T3419] bond23 (unregistering): Released all slaves [ 694.839936][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 694.842369][ T3419] bond24 (unregistering): Released all slaves [ 694.860736][ T3419] bond25 (unregistering): Released all slaves [ 694.870420][ T3419] bond26 (unregistering): Released all slaves [ 694.879709][ T3419] bond27 (unregistering): Released all slaves [ 694.889268][ T3419] bond28 (unregistering): Released all slaves [ 694.897975][ T3419] bond29 (unregistering): Released all slaves [ 694.908218][ T3419] bond30 (unregistering): Released all slaves [ 694.918140][ T3419] bond31 (unregistering): Released all slaves [ 694.928058][ T3419] bond32 (unregistering): Released all slaves [ 694.938544][ T3419] bond33 (unregistering): Released all slaves [ 694.947472][ T3419] bond34 (unregistering): Released all slaves [ 694.956518][ T3419] bond35 (unregistering): Released all slaves [ 694.965583][ T3372] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 694.966222][ T3419] bond36 (unregistering): Released all slaves [ 694.981710][T11544] vhci_hcd: connection reset by peer [ 694.982302][ T3419] bond37 (unregistering): Released all slaves [ 694.987529][ T3301] vhci_hcd: stop threads [ 694.987541][ T3301] vhci_hcd: release socket [ 694.987554][ T3301] vhci_hcd: disconnect device [ 695.012520][ T3419] bond38 (unregistering): Released all slaves [ 695.022077][ T3419] bond39 (unregistering): Released all slaves [ 695.034099][T11524] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 695.049239][T11547] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 695.060498][T11560] vhci_hcd: connection reset by peer [ 695.066630][ T3287] vhci_hcd: stop threads [ 695.070962][ T3287] vhci_hcd: release socket [ 695.076891][ T3287] vhci_hcd: disconnect device [ 695.117562][T11481] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.124831][T11481] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.136390][T11481] bridge_slave_0: entered allmulticast mode [ 695.143343][T11481] bridge_slave_0: entered promiscuous mode [ 695.152479][T11481] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.161127][T11481] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.171056][T11481] bridge_slave_1: entered allmulticast mode [ 695.179136][T11481] bridge_slave_1: entered promiscuous mode [ 695.189843][ T3419] hsr_slave_0: left promiscuous mode [ 695.196993][ T3419] hsr_slave_1: left promiscuous mode [ 695.203102][ T3419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.211956][ T3419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.221178][ T3419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.230082][ T3419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.241130][T11575] validate_nla: 5 callbacks suppressed [ 695.241150][T11575] netlink: 'syz.7.15364': attribute type 1 has an invalid length. [ 695.255606][ T3419] veth1_macvtap: left promiscuous mode [ 695.261202][ T3419] veth0_macvtap: left promiscuous mode [ 695.266883][ T3419] veth1_vlan: left promiscuous mode [ 695.272170][ T3419] veth0_vlan: left promiscuous mode [ 695.338560][ T3419] team0 (unregistering): Port device team_slave_1 removed [ 695.349629][ T3419] team0 (unregistering): Port device team_slave_0 removed [ 695.419568][T11481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.432099][T11481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.462621][T11481] team0: Port device team_slave_0 added [ 695.470966][T11481] team0: Port device team_slave_1 added [ 695.537615][T11481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.545913][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.573213][T11481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.600925][T11481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.609209][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.636519][T11481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.743566][T11595] netlink: 'syz.4.15370': attribute type 1 has an invalid length. [ 695.812128][T11481] hsr_slave_0: entered promiscuous mode [ 695.838408][T11608] netlink: 'syz.6.15371': attribute type 1 has an invalid length. [ 695.842174][T11481] hsr_slave_1: entered promiscuous mode [ 695.859678][T11481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.877320][T11481] Cannot create hsr debugfs directory [ 696.263942][T11642] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 696.272851][T11642] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 696.289834][T11644] netlink: 'syz.7.15385': attribute type 1 has an invalid length. [ 696.312676][T11642] vhci_hcd: invalid port number 15 [ 696.317895][T11642] vhci_hcd: invalid port number 15 [ 696.384625][T11639] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 696.392119][T11639] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 696.399657][T11639] vhci_hcd: invalid port number 15 [ 696.404923][T11639] vhci_hcd: invalid port number 15 [ 696.453527][T11481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 696.468797][T11481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 696.484046][T11481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 696.499444][T11481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 696.620464][T11670] netlink: 'syz.8.15390': attribute type 1 has an invalid length. [ 696.635524][T11661] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 696.642970][T11661] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 696.651666][T11661] vhci_hcd: invalid port number 15 [ 696.658062][T11661] vhci_hcd: invalid port number 15 [ 696.664060][T11481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.719082][T11481] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.735483][T11668] loop4: detected capacity change from 0 to 8192 [ 696.745444][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.752531][ T3297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.771530][T24499] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.778641][T24499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.788614][T11668] loop4: p2 p3 p4 [ 696.792491][T11668] loop4: p2 start 32769 is beyond EOD, truncated [ 696.800133][T11668] loop4: p3 start 458496 is beyond EOD, truncated [ 696.807956][T11668] loop4: p4 start 198639616 is beyond EOD, truncated [ 696.823910][ T3000] loop4: p2 p3 p4 [ 696.848535][ T3000] loop4: p2 start 32769 is beyond EOD, truncated [ 696.851015][T11481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 696.854942][ T3000] loop4: p3 start 458496 is beyond EOD, truncated [ 696.854963][ T3000] loop4: p4 start 198639616 is beyond EOD, truncated [ 697.013442][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 697.069149][T11481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.246006][T11481] veth0_vlan: entered promiscuous mode [ 697.268358][T11481] veth1_vlan: entered promiscuous mode [ 697.282818][T11706] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 697.287561][T11481] veth0_macvtap: entered promiscuous mode [ 697.310476][T11481] veth1_macvtap: entered promiscuous mode [ 697.322363][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.332910][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.342799][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.353341][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.363355][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.373946][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.383810][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.394355][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.404299][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.414760][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.424649][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.435278][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.445375][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.456154][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.466057][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.476526][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.486392][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.496845][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.506710][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.517240][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.527200][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.537719][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.547587][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.558127][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.568129][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.578748][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.588611][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.599332][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.609286][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.619732][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.629591][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.640097][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.654309][T11481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.663086][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.673571][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.683504][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.694029][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.703873][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.714368][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.724321][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.734776][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.744676][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.755129][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.765006][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.775468][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.785331][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.795831][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.803132][T11732] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 697.805774][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.812333][T11732] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 697.822777][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.831832][T11732] vhci_hcd vhci_hcd.0: Device attached [ 697.840160][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.840181][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.840199][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.840297][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.840316][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.840340][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.840357][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.840374][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.840397][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.840410][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.840425][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.840440][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.840459][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.840491][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.840514][T11481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.840527][T11481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.860352][T11481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.020793][T11724] smc: net device bond0 applied user defined pnetid SYZ0 [ 698.020875][T11716] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 698.039211][T11481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.048086][T11481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.048201][T11734] vhci_hcd: connection closed [ 698.056966][T11481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.057088][T11481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.107869][ T3373] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 698.131958][T11736] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 698.171874][ T3303] vhci_hcd: stop threads [ 698.176250][ T3303] vhci_hcd: release socket [ 698.180762][ T3303] vhci_hcd: disconnect device [ 698.542210][T11796] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 698.610022][T11800] smc: net device bond0 erased user defined pnetid SYZ0 [ 698.699039][T11808] loop8: detected capacity change from 0 to 1024 [ 698.732595][T11808] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.744799][T11808] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.765791][T11808] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 698.778245][T11808] EXT4-fs (loop8): This should not happen!! Data will be lost [ 698.778245][T11808] [ 698.787990][T11808] EXT4-fs (loop8): Total free blocks count 0 [ 698.794045][T11808] EXT4-fs (loop8): Free/Dirty block details [ 698.801277][T11808] EXT4-fs (loop8): free_blocks=0 [ 698.807673][T11808] EXT4-fs (loop8): dirty_blocks=0 [ 698.812725][T11808] EXT4-fs (loop8): Block reservation details [ 698.820119][T11808] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 698.850834][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 698.850850][ T29] audit: type=1326 audit(1735768493.910:57694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.4.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 698.883327][ T29] audit: type=1326 audit(1735768493.910:57695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.4.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 698.908489][ T29] audit: type=1326 audit(1735768493.910:57696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.4.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 698.933557][ T29] audit: type=1326 audit(1735768493.910:57697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.4.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 698.958511][ T29] audit: type=1326 audit(1735768493.910:57698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.4.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 698.983675][ T29] audit: type=1326 audit(1735768493.910:57699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.4.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 699.008688][ T29] audit: type=1326 audit(1735768493.910:57700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.4.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 699.033781][ T29] audit: type=1326 audit(1735768493.910:57701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.4.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 699.058904][ T29] audit: type=1326 audit(1735768493.910:57702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.4.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 699.083960][ T29] audit: type=1326 audit(1735768493.910:57703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.4.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dcf35d29 code=0x7ffc0000 [ 699.140728][ T4505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.241724][T11840] Cannot find add_set index 0 as target [ 699.250975][T11840] netlink: 'syz.8.15432': attribute type 10 has an invalid length. [ 699.263883][T11840] syz_tun: entered promiscuous mode [ 699.276882][T11840] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 699.288377][T11843] __nla_validate_parse: 9 callbacks suppressed [ 699.288431][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15437'. [ 699.303839][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15437'. [ 699.313133][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15437'. [ 699.339315][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15437'. [ 699.349880][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15437'. [ 699.361456][T11849] netlink: 'syz.6.15437': attribute type 10 has an invalid length. [ 699.374124][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15437'. [ 699.426061][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15437'. [ 699.436558][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15437'. [ 699.447465][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15437'. [ 699.661198][T11880] netlink: 'syz.0.15452': attribute type 1 has an invalid length. [ 699.686169][T11878] smc: net device bond0 applied user defined pnetid SYZ0 [ 699.733307][T11882] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15453'. [ 699.780049][T11882] netlink: 'syz.7.15453': attribute type 10 has an invalid length. [ 699.820914][T11889] loop6: detected capacity change from 0 to 1024 [ 699.846474][ T9] vhci_hcd: vhci_device speed not set [ 699.880301][T11889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.893797][T11889] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.909779][T11889] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 699.923688][T11889] EXT4-fs (loop6): This should not happen!! Data will be lost [ 699.923688][T11889] [ 699.933828][T11889] EXT4-fs (loop6): Total free blocks count 0 [ 699.939905][T11889] EXT4-fs (loop6): Free/Dirty block details [ 699.945910][T11889] EXT4-fs (loop6): free_blocks=0 [ 699.950872][T11889] EXT4-fs (loop6): dirty_blocks=0 [ 699.954905][T11903] smc: net device bond0 erased user defined pnetid SYZ0 [ 699.957413][T11889] EXT4-fs (loop6): Block reservation details [ 699.970371][T11889] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 700.014038][T11907] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 700.032201][ T4822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.075625][ T3372] vhci_hcd: vhci_device speed not set [ 700.089252][T11913] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 700.260412][T11937] netlink: 'syz.6.15470': attribute type 10 has an invalid length. [ 700.485944][T11955] smc: net device bond0 applied user defined pnetid SYZ0 [ 700.590611][T11969] netlink: 'syz.7.15481': attribute type 1 has an invalid length. [ 700.840397][T11980] netlink: 'syz.6.15486': attribute type 10 has an invalid length. [ 701.029619][T11993] loop8: detected capacity change from 0 to 1024 [ 701.061411][T11993] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.105611][T11993] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.127412][T11993] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 701.141187][T11993] EXT4-fs (loop8): This should not happen!! Data will be lost [ 701.141187][T11993] [ 701.151293][T11993] EXT4-fs (loop8): Total free blocks count 0 [ 701.157410][T11993] EXT4-fs (loop8): Free/Dirty block details [ 701.163314][T11993] EXT4-fs (loop8): free_blocks=0 [ 701.168297][T11993] EXT4-fs (loop8): dirty_blocks=0 [ 701.173386][T11993] EXT4-fs (loop8): Block reservation details [ 701.180685][T11993] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 701.221787][ T4505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.433376][T12015] netlink: 'syz.8.15496': attribute type 10 has an invalid length. [ 701.470138][T12017] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 701.635927][T12028] netlink: 'syz.0.15498': attribute type 1 has an invalid length. [ 701.773074][T12030] loop7: detected capacity change from 0 to 1024 [ 701.822152][T12030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.834518][T12030] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.853505][T12030] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 701.865887][T12030] EXT4-fs (loop7): This should not happen!! Data will be lost [ 701.865887][T12030] [ 701.875679][T12030] EXT4-fs (loop7): Total free blocks count 0 [ 701.881677][T12030] EXT4-fs (loop7): Free/Dirty block details [ 701.887624][T12030] EXT4-fs (loop7): free_blocks=0 [ 701.892610][T12030] EXT4-fs (loop7): dirty_blocks=0 [ 701.897699][T12030] EXT4-fs (loop7): Block reservation details [ 701.903780][T12030] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 701.928577][ T6168] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.003675][T12061] netlink: 'syz.6.15504': attribute type 10 has an invalid length. [ 702.151628][T12080] loop7: detected capacity change from 0 to 1024 [ 702.201015][T12080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.221557][T12080] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.252822][T12092] netlink: 'syz.0.15516': attribute type 1 has an invalid length. [ 702.261444][T12080] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 702.273775][T12080] EXT4-fs (loop7): This should not happen!! Data will be lost [ 702.273775][T12080] [ 702.283462][T12080] EXT4-fs (loop7): Total free blocks count 0 [ 702.289532][T12080] EXT4-fs (loop7): Free/Dirty block details [ 702.295488][T12080] EXT4-fs (loop7): free_blocks=0 [ 702.300459][T12080] EXT4-fs (loop7): dirty_blocks=0 [ 702.305632][T12080] EXT4-fs (loop7): Block reservation details [ 702.311625][T12080] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 702.371716][ T6168] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.442936][T12106] netlink: 'syz.7.15517': attribute type 10 has an invalid length. [ 702.521928][T12120] netlink: 'syz.0.15522': attribute type 1 has an invalid length. [ 702.592812][T12133] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 702.712645][T12146] netlink: 'syz.8.15531': attribute type 1 has an invalid length. [ 702.799173][T12142] loop6: detected capacity change from 0 to 8192 [ 702.855712][T12142] loop6: p2 p3 p4 [ 702.859652][T12142] loop6: p2 start 32769 is beyond EOD, truncated [ 702.867414][T12142] loop6: p3 start 458496 is beyond EOD, truncated [ 702.873955][T12142] loop6: p4 start 198639616 is beyond EOD, truncated [ 703.137375][T12205] smc: net device bond0 erased user defined pnetid SYZ0 [ 703.278304][ T3373] vhci_hcd: vhci_device speed not set [ 703.526594][T12253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.541147][T12253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.590765][T12253] loop8: detected capacity change from 0 to 2048 [ 703.677012][T12263] IPv6: Can't replace route, no match found [ 703.942242][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 703.942262][ T29] audit: type=1326 audit(1735768499.000:58113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 703.972280][ T29] audit: type=1326 audit(1735768499.000:58114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 703.996139][ T29] audit: type=1326 audit(1735768499.000:58115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 704.020280][ T29] audit: type=1326 audit(1735768499.000:58116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 704.044027][ T29] audit: type=1326 audit(1735768499.000:58117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 704.067703][ T29] audit: type=1326 audit(1735768499.000:58118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 704.091571][ T29] audit: type=1326 audit(1735768499.000:58119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 704.115372][ T29] audit: type=1326 audit(1735768499.090:58120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 704.139113][ T29] audit: type=1326 audit(1735768499.090:58121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 704.162944][ T29] audit: type=1326 audit(1735768499.130:58122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12282 comm="syz.6.15566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 704.392113][ T3370] kernel write not supported for file /112/attr/keycreate (pid: 3370 comm: kworker/1:3) [ 704.551346][T12315] loop4: detected capacity change from 0 to 1024 [ 704.582566][T12315] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 704.593604][T12315] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 704.632979][T12315] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 704.651969][T12315] EXT4-fs (loop4): invalid journal inode [ 704.659056][T12315] EXT4-fs (loop4): can't get journal size [ 704.671540][T12315] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.15580: blocks 2-2 from inode overlap system zone [ 704.690439][T12315] EXT4-fs (loop4): failed to initialize system zone (-117) [ 704.699353][T12315] EXT4-fs (loop4): mount failed [ 704.926197][T12340] futex_wake_op: syz.8.15589 tries to shift op by -1; fix this program [ 704.973255][T12342] __nla_validate_parse: 36 callbacks suppressed [ 704.973275][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15590'. [ 704.988864][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15590'. [ 705.014061][T12347] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 705.068877][T12349] ebtables: ebtables: counters copy to user failed while replacing table [ 705.152474][T12373] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 705.159114][T12373] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 705.166933][T12373] vhci_hcd vhci_hcd.0: Device attached [ 705.190989][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 705.246138][T12382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15596'. [ 705.323951][T12374] vhci_hcd: connection closed [ 705.324071][ T3291] vhci_hcd: stop threads [ 705.333076][ T3291] vhci_hcd: release socket [ 705.337610][ T3291] vhci_hcd: disconnect device [ 705.370491][T12385] lo speed is unknown, defaulting to 1000 [ 705.376604][ T3370] vhci_hcd: vhci_device speed not set [ 705.484433][T12385] lo speed is unknown, defaulting to 1000 [ 705.724849][T12420] validate_nla: 3 callbacks suppressed [ 705.724867][T12420] netlink: 'syz.0.15608': attribute type 1 has an invalid length. [ 705.986089][T12437] netlink: 'syz.4.15610': attribute type 1 has an invalid length. [ 706.122321][T12441] loop8: detected capacity change from 0 to 512 [ 706.153528][T12441] EXT4-fs: Ignoring removed mblk_io_submit option [ 706.208988][T12441] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 706.270565][T12441] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.15617: corrupted in-inode xattr: e_value out of bounds [ 706.326751][T12441] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.15617: couldn't read orphan inode 15 (err -117) [ 706.447928][T12475] Cannot find add_set index 0 as target [ 706.457678][T12475] netlink: 'syz.6.15624': attribute type 10 has an invalid length. [ 706.472473][T12441] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.718561][T12493] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 706.762870][T12499] netlink: 'syz.0.15631': attribute type 1 has an invalid length. [ 707.112384][ T4505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.161154][T12522] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 707.255037][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 707.309712][T12535] IPv6: Can't replace route, no match found [ 707.326682][T12537] netlink: 'syz.0.15642': attribute type 1 has an invalid length. [ 707.521193][T12551] netlink: 'syz.4.15647': attribute type 1 has an invalid length. [ 707.571382][T12559] IPv6: Can't replace route, no match found [ 707.609200][T12563] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 707.715698][T12563] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 707.722425][T12563] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 707.730169][T12563] vhci_hcd vhci_hcd.0: Device attached [ 707.824686][T12566] vhci_hcd: connection closed [ 707.825582][ T3291] vhci_hcd: stop threads [ 707.834618][ T3291] vhci_hcd: release socket [ 707.839063][ T3291] vhci_hcd: disconnect device [ 707.961215][T12592] netlink: 'syz.8.15659': attribute type 1 has an invalid length. [ 708.371049][T12628] loop7: detected capacity change from 0 to 8192 [ 708.421772][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 708.436189][T12640] netlink: 'syz.0.15670': attribute type 1 has an invalid length. [ 708.470363][T12628] loop7: p2 p3 p4 [ 708.475773][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 708.476530][T12628] loop7: p2 start 32769 is beyond EOD, truncated [ 708.491926][T12628] loop7: p3 start 458496 is beyond EOD, truncated [ 708.498407][T12628] loop7: p4 start 198639616 is beyond EOD, truncated [ 708.509583][ T3000] loop7: p2 p3 p4 [ 708.513463][ T3000] loop7: p2 start 32769 is beyond EOD, truncated [ 708.520046][ T3000] loop7: p3 start 458496 is beyond EOD, truncated [ 708.526562][ T3000] loop7: p4 start 198639616 is beyond EOD, truncated [ 708.601628][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15676'. [ 708.610778][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15676'. [ 708.654533][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15676'. [ 708.678591][T12659] netlink: 'syz.4.15676': attribute type 10 has an invalid length. [ 708.686522][T12661] netlink: 'syz.8.15678': attribute type 1 has an invalid length. [ 708.773655][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15676'. [ 708.784321][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15676'. [ 708.797914][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15676'. [ 708.838890][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15676'. [ 708.947824][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 708.947839][ T29] audit: type=1326 audit(1735768504.010:58589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.7.15688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 709.022882][T12692] loop4: detected capacity change from 0 to 1024 [ 709.035667][ T29] audit: type=1326 audit(1735768504.020:58590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.7.15688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 709.060890][ T29] audit: type=1326 audit(1735768504.020:58591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.7.15688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 709.085930][ T29] audit: type=1326 audit(1735768504.020:58592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.7.15688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 709.111164][ T29] audit: type=1326 audit(1735768504.030:58593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.7.15688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 709.136165][ T29] audit: type=1326 audit(1735768504.030:58594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.7.15688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 709.161376][ T29] audit: type=1326 audit(1735768504.030:58595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.7.15688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 709.185291][ T29] audit: type=1326 audit(1735768504.030:58596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.7.15688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 709.208999][ T29] audit: type=1326 audit(1735768504.030:58597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.7.15688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 709.233950][ T29] audit: type=1326 audit(1735768504.030:58598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.7.15688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 709.261393][T12692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.285650][T12692] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.339694][T12716] Cannot find add_set index 0 as target [ 709.358744][T12692] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 709.371192][T12692] EXT4-fs (loop4): This should not happen!! Data will be lost [ 709.371192][T12692] [ 709.380978][T12692] EXT4-fs (loop4): Total free blocks count 0 [ 709.387099][T12692] EXT4-fs (loop4): Free/Dirty block details [ 709.393077][T12692] EXT4-fs (loop4): free_blocks=0 [ 709.398192][T12692] EXT4-fs (loop4): dirty_blocks=0 [ 709.403350][T12692] EXT4-fs (loop4): Block reservation details [ 709.409420][T12692] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 709.456638][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.607602][T12734] IPv6: Can't replace route, no match found [ 709.930343][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 709.963615][T12754] loop4: detected capacity change from 0 to 512 [ 709.999922][T12754] EXT4-fs: Ignoring removed mblk_io_submit option [ 710.032615][T12754] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 710.077471][T12768] loop6: detected capacity change from 0 to 1024 [ 710.100884][T12770] __nla_validate_parse: 11 callbacks suppressed [ 710.100903][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15718'. [ 710.116472][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15718'. [ 710.125684][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15718'. [ 710.138650][T12754] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.15710: corrupted in-inode xattr: e_value out of bounds [ 710.190790][T12776] IPv6: Can't replace route, no match found [ 710.196096][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15718'. [ 710.207079][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15718'. [ 710.229357][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15718'. [ 710.276357][T12768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.289636][T12754] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.15710: couldn't read orphan inode 15 (err -117) [ 710.310796][T12768] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.313698][T12768] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 710.313732][T12768] EXT4-fs (loop6): This should not happen!! Data will be lost [ 710.313732][T12768] [ 710.313745][T12768] EXT4-fs (loop6): Total free blocks count 0 [ 710.313761][T12768] EXT4-fs (loop6): Free/Dirty block details [ 710.313775][T12768] EXT4-fs (loop6): free_blocks=0 [ 710.313791][T12768] EXT4-fs (loop6): dirty_blocks=0 [ 710.313886][T12768] EXT4-fs (loop6): Block reservation details [ 710.313937][T12768] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 710.382728][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15718'. [ 710.400084][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15718'. [ 710.413119][ T4822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.417014][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15718'. [ 710.450895][T12754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.625973][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 710.770277][T12812] Cannot find add_set index 0 as target [ 710.838236][T12812] validate_nla: 8 callbacks suppressed [ 710.838254][T12812] netlink: 'syz.6.15731': attribute type 10 has an invalid length. [ 710.902299][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.956659][T12829] loop8: detected capacity change from 0 to 1024 [ 711.011766][T12829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.025259][T12829] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.045634][T12829] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 711.059448][T12829] EXT4-fs (loop8): This should not happen!! Data will be lost [ 711.059448][T12829] [ 711.070669][T12829] EXT4-fs (loop8): Total free blocks count 0 [ 711.078058][T12829] EXT4-fs (loop8): Free/Dirty block details [ 711.083991][T12829] EXT4-fs (loop8): free_blocks=0 [ 711.090392][T12829] EXT4-fs (loop8): dirty_blocks=0 [ 711.096915][T12829] EXT4-fs (loop8): Block reservation details [ 711.103098][T12829] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 711.116591][T12851] Cannot find add_set index 0 as target [ 711.126042][T12851] netlink: 'syz.7.15747': attribute type 10 has an invalid length. [ 711.141068][ T4505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.211996][T12862] IPv6: Can't replace route, no match found [ 711.263745][T12869] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 711.325849][T12869] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 711.332499][T12869] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 711.340152][T12869] vhci_hcd vhci_hcd.0: Device attached [ 711.417135][T12880] vhci_hcd: connection closed [ 711.417344][ T3301] vhci_hcd: stop threads [ 711.427759][ T3301] vhci_hcd: release socket [ 711.432199][ T3301] vhci_hcd: disconnect device [ 711.477953][T12894] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 711.587452][T12905] loop6: detected capacity change from 0 to 8192 [ 711.596701][T12910] IPv6: Can't replace route, no match found [ 711.625828][T12905] loop6: p2 p3 p4 [ 711.629731][T12905] loop6: p2 start 32769 is beyond EOD, truncated [ 711.636161][T12905] loop6: p3 start 458496 is beyond EOD, truncated [ 711.642675][T12905] loop6: p4 start 198639616 is beyond EOD, truncated [ 711.721858][T12922] loop7: detected capacity change from 0 to 512 [ 711.732899][T12922] EXT4-fs: Ignoring removed mblk_io_submit option [ 711.737475][T12919] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 711.752056][T12922] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 711.812756][T12922] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.15770: corrupted in-inode xattr: e_value out of bounds [ 711.827567][T12922] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.15770: couldn't read orphan inode 15 (err -117) [ 711.842299][T12930] netlink: 'syz.6.15774': attribute type 1 has an invalid length. [ 711.847023][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 711.861168][T12922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.893658][T12934] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 711.980277][T12939] IPv6: Can't replace route, no match found [ 712.054069][ T6168] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.181797][T12952] loop6: detected capacity change from 0 to 8192 [ 712.222858][T12962] IPv6: Can't replace route, no match found [ 712.229710][T12952] loop6: p2 p3 p4 [ 712.233648][T12952] loop6: p2 start 32769 is beyond EOD, truncated [ 712.240204][T12952] loop6: p3 start 458496 is beyond EOD, truncated [ 712.246891][T12952] loop6: p4 start 198639616 is beyond EOD, truncated [ 712.273186][ T3000] loop6: p2 p3 p4 [ 712.277092][ T3000] loop6: p2 start 32769 is beyond EOD, truncated [ 712.283513][ T3000] loop6: p3 start 458496 is beyond EOD, truncated [ 712.290011][ T3000] loop6: p4 start 198639616 is beyond EOD, truncated [ 712.358058][T12980] netlink: 'syz.4.15790': attribute type 1 has an invalid length. [ 712.432458][T12986] IPv6: Can't replace route, no match found [ 712.662729][T13007] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 712.698945][T13013] IPv6: Can't replace route, no match found [ 712.700402][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 712.721419][T13018] loop8: detected capacity change from 0 to 512 [ 712.747394][T13018] EXT4-fs: Ignoring removed mblk_io_submit option [ 712.760980][T13018] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 712.784000][T13018] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.15808: corrupted in-inode xattr: e_value out of bounds [ 712.853291][T13018] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.15808: couldn't read orphan inode 15 (err -117) [ 712.888007][T13028] loop6: detected capacity change from 0 to 512 [ 712.892081][T13033] netlink: 'syz.4.15813': attribute type 1 has an invalid length. [ 712.900603][T13028] EXT4-fs: Ignoring removed mblk_io_submit option [ 712.913511][T13028] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 712.937041][T13018] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.957713][T13028] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.15810: corrupted in-inode xattr: e_value out of bounds [ 712.988161][T13028] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.15810: couldn't read orphan inode 15 (err -117) [ 713.001275][T13042] netlink: 'syz.7.15817': attribute type 1 has an invalid length. [ 713.012553][T13028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.092095][ T4822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.160699][ T4505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.271559][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 713.415937][T13082] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 713.538493][T13097] IPv6: Can't replace route, no match found [ 713.708800][T13112] netlink: 'syz.8.15840': attribute type 1 has an invalid length. [ 713.746406][T13119] netlink: 'syz.6.15844': attribute type 1 has an invalid length. [ 713.750802][T13117] team0 (unregistering): Port device team_slave_0 removed [ 713.764084][T13117] team0 (unregistering): Port device team_slave_1 removed [ 713.993335][T13131] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 714.122788][T13142] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 714.242200][T13142] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 714.248947][T13142] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 714.256715][T13142] vhci_hcd vhci_hcd.0: Device attached [ 714.303620][T13146] vhci_hcd: connection closed [ 714.303823][ T3301] vhci_hcd: stop threads [ 714.312852][ T3301] vhci_hcd: release socket [ 714.317360][ T3301] vhci_hcd: disconnect device [ 714.476347][ T29] kauditd_printk_skb: 660 callbacks suppressed [ 714.476368][ T29] audit: type=1326 audit(1735768509.490:59259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.6.15851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 714.506470][ T29] audit: type=1326 audit(1735768509.490:59260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.6.15851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 714.530375][ T29] audit: type=1326 audit(1735768509.490:59261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.6.15851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 714.554126][ T29] audit: type=1326 audit(1735768509.490:59262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.6.15851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 714.577948][ T29] audit: type=1326 audit(1735768509.490:59263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13145 comm="syz.6.15851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 714.645247][T13173] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15856'. [ 714.713116][T13181] netlink: 'syz.6.15856': attribute type 10 has an invalid length. [ 714.765216][T13187] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 714.813111][T13183] loop4: detected capacity change from 0 to 8192 [ 714.827640][T13192] IPv6: Can't replace route, no match found [ 714.831395][T13195] netlink: 'syz.6.15863': attribute type 1 has an invalid length. [ 714.856986][T13183] loop4: p2 p3 p4 [ 714.860892][T13183] loop4: p2 start 32769 is beyond EOD, truncated [ 714.868689][T13183] loop4: p3 start 458496 is beyond EOD, truncated [ 714.876420][T13183] loop4: p4 start 198639616 is beyond EOD, truncated [ 714.891936][ T3000] loop4: p2 p3 p4 [ 714.897784][ T3000] loop4: p2 start 32769 is beyond EOD, truncated [ 714.905645][ T3000] loop4: p3 start 458496 is beyond EOD, truncated [ 714.912180][ T3000] loop4: p4 start 198639616 is beyond EOD, truncated [ 714.983433][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 715.184371][ T29] audit: type=1400 audit(1735768510.240:59264): avc: denied { wake_alarm } for pid=13209 comm="syz.7.15871" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 715.252892][T13223] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 715.282421][T13225] loop8: detected capacity change from 0 to 1024 [ 715.292600][T13231] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 715.320263][T13231] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 715.326960][T13231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 715.334815][T13231] vhci_hcd vhci_hcd.0: Device attached [ 715.341469][T13233] IPv6: Can't replace route, no match found [ 715.354840][T13234] vhci_hcd: connection closed [ 715.358688][ T3301] vhci_hcd: stop threads [ 715.369060][ T3301] vhci_hcd: release socket [ 715.373534][ T3301] vhci_hcd: disconnect device [ 715.390688][T13225] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.395852][ T29] audit: type=1326 audit(1735768510.450:59265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13239 comm="syz.6.15881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 715.404189][T13225] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 715.426872][ T29] audit: type=1326 audit(1735768510.450:59266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13239 comm="syz.6.15881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 715.461841][ T29] audit: type=1326 audit(1735768510.450:59267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13239 comm="syz.6.15881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 715.487052][ T29] audit: type=1326 audit(1735768510.450:59268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13239 comm="syz.6.15881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0adf6a5d29 code=0x7ffc0000 [ 715.526101][T13225] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 715.538498][T13225] EXT4-fs (loop8): This should not happen!! Data will be lost [ 715.538498][T13225] [ 715.548262][T13225] EXT4-fs (loop8): Total free blocks count 0 [ 715.554361][T13225] EXT4-fs (loop8): Free/Dirty block details [ 715.560335][T13225] EXT4-fs (loop8): free_blocks=0 [ 715.565376][T13225] EXT4-fs (loop8): dirty_blocks=0 [ 715.570437][T13225] EXT4-fs (loop8): Block reservation details [ 715.576458][T13225] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 715.652287][ T4505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.668454][T13246] loop4: detected capacity change from 0 to 8192 [ 715.683859][T13253] loop6: detected capacity change from 0 to 512 [ 715.702407][T13253] EXT4-fs: Ignoring removed mblk_io_submit option [ 715.710645][T13246] loop4: p2 p3 p4 [ 715.715059][T13253] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 715.727728][T13253] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.15887: corrupted in-inode xattr: e_value out of bounds [ 715.740908][T13246] loop4: p2 start 32769 is beyond EOD, truncated [ 715.749494][T13246] loop4: p3 start 458496 is beyond EOD, truncated [ 715.757418][T13246] loop4: p4 start 198639616 is beyond EOD, truncated [ 715.766231][T13253] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.15887: couldn't read orphan inode 15 (err -117) [ 715.778389][ T3000] loop4: p2 p3 p4 [ 715.782204][ T3000] loop4: p2 start 32769 is beyond EOD, truncated [ 715.789850][ T3000] loop4: p3 start 458496 is beyond EOD, truncated [ 715.797689][ T3000] loop4: p4 start 198639616 is beyond EOD, truncated [ 715.807176][T13253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.838679][T13261] loop8: detected capacity change from 0 to 512 [ 715.850408][T13261] EXT4-fs: inline encryption not supported [ 715.876896][T13261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.897954][T13261] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 715.904343][ T4822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.911542][T13261] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.15889: corrupted inode contents [ 715.936065][T13261] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #2: comm syz.8.15889: mark_inode_dirty error [ 715.952059][T13261] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.15889: corrupted inode contents [ 715.989350][T13261] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.15889: mark_inode_dirty error [ 716.011806][T13273] IPv6: Can't replace route, no match found [ 716.061510][ T4505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.088483][T13279] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 716.149586][T13289] IPv6: Can't replace route, no match found [ 716.150892][T13290] loop6: detected capacity change from 0 to 512 [ 716.183345][T13290] EXT4-fs: Ignoring removed mblk_io_submit option [ 716.204930][T13290] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 716.238781][T13295] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 716.261054][T13302] validate_nla: 1 callbacks suppressed [ 716.261069][T13302] netlink: 'syz.4.15906': attribute type 1 has an invalid length. [ 716.283927][T13290] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.15901: corrupted in-inode xattr: e_value out of bounds [ 716.304417][T13290] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.15901: couldn't read orphan inode 15 (err -117) [ 716.332667][T13290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.378642][ T4822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.389225][T13318] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 716.395898][T13318] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 716.404910][T13318] vhci_hcd vhci_hcd.0: Device attached [ 716.472590][T13333] __nla_validate_parse: 8 callbacks suppressed [ 716.472606][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15909'. [ 716.488457][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15909'. [ 716.511832][T13335] team0 (unregistering): Port device team_slave_0 removed [ 716.519681][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15909'. [ 716.548284][T13335] team0 (unregistering): Port device team_slave_1 removed [ 716.579206][T13335] team0 (unregistering): Port device netdevsim1 removed [ 716.582474][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15909'. [ 716.593362][T13342] loop4: detected capacity change from 0 to 1024 [ 716.598059][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15909'. [ 716.609225][T13342] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 716.621607][T13344] netlink: 'syz.0.15909': attribute type 10 has an invalid length. [ 716.631518][T13342] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 716.641423][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15909'. [ 716.661622][T13348] loop8: detected capacity change from 0 to 1024 [ 716.668857][T13348] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 716.674825][ T3372] usb 15-1: new high-speed USB device number 3 using vhci_hcd [ 716.680101][T13348] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 716.685575][T13342] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 716.718248][T13345] team0 (unregistering): Port device team_slave_0 removed [ 716.742171][T13348] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 716.742551][T13342] EXT4-fs (loop4): orphan cleanup on readonly fs [ 716.757289][T13348] EXT4-fs (loop8): orphan cleanup on readonly fs [ 716.769851][T13342] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 716.781719][T13348] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 716.786509][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15909'. [ 716.791377][T13348] EXT4-fs (loop8): Remounting filesystem read-only [ 716.801653][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15909'. [ 716.811563][T13348] EXT4-fs (loop8): 1 orphan inode deleted [ 716.824045][T13348] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 716.838349][T13345] team0 (unregistering): Port device team_slave_1 removed [ 716.846211][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15909'. [ 716.846490][T13322] vhci_hcd: connection reset by peer [ 716.855741][T13345] team0 (unregistering): Port device netdevsim1 removed [ 716.867126][T13348] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 716.870723][T13342] EXT4-fs (loop4): Remounting filesystem read-only [ 716.875919][T13348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.891453][T13342] EXT4-fs (loop4): 1 orphan inode deleted [ 716.897370][ T3301] vhci_hcd: stop threads [ 716.901690][ T3301] vhci_hcd: release socket [ 716.906205][ T3301] vhci_hcd: disconnect device [ 716.910650][T13342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 716.932204][T13342] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 716.940733][T13342] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.944597][T13348] loop8: detected capacity change from 0 to 1024 [ 716.963206][T13348] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 716.990791][T13335] loop4: detected capacity change from 0 to 1024 [ 717.000845][T13335] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 717.121650][T13369] netlink: 'syz.4.15921': attribute type 1 has an invalid length. [ 717.465895][T13410] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 717.506067][T13415] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 717.572057][T13417] IPv6: Can't replace route, no match found [ 717.658725][T13415] lo speed is unknown, defaulting to 1000 [ 717.671218][T13422] loop8: detected capacity change from 0 to 8192 [ 717.695035][T13422] loop8: p2 p3 p4 [ 717.699172][T13422] loop8: p2 start 32769 is beyond EOD, truncated [ 717.705607][T13422] loop8: p3 start 458496 is beyond EOD, truncated [ 717.712056][T13422] loop8: p4 start 198639616 is beyond EOD, truncated [ 717.753389][T13445] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 717.786701][T13415] lo speed is unknown, defaulting to 1000 [ 717.897558][T13445] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 717.904214][T13445] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 717.913234][T13445] vhci_hcd vhci_hcd.0: Device attached [ 718.061487][T13454] vhci_hcd: connection closed [ 718.062115][ T3301] vhci_hcd: stop threads [ 718.071110][ T3301] vhci_hcd: release socket [ 718.075657][ T3301] vhci_hcd: disconnect device [ 718.085044][T13467] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 718.094389][ T3373] vhci_hcd: vhci_device speed not set [ 718.106496][T13475] netlink: 'syz.7.15958': attribute type 1 has an invalid length. [ 718.152674][T13480] Cannot find add_set index 0 as target [ 718.162491][T13480] netlink: 'syz.8.15960': attribute type 10 has an invalid length. [ 718.286308][T13483] team0 (unregistering): Port device team_slave_0 removed [ 718.300097][T13493] loop6: detected capacity change from 0 to 1024 [ 718.308027][T13493] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 718.326601][T13483] team0 (unregistering): Port device team_slave_1 removed [ 718.341961][T13496] loop7: detected capacity change from 0 to 512 [ 718.350594][T13483] team0 (unregistering): Port device netdevsim1 removed [ 718.353293][T13496] EXT4-fs: Ignoring removed mblk_io_submit option [ 718.369135][T13496] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 718.383978][T13497] loop4: detected capacity change from 0 to 1024 [ 718.392485][T13497] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 718.403186][T13497] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 718.416507][T13496] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.15966: corrupted in-inode xattr: e_value out of bounds [ 718.432965][T13497] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 718.451834][T13497] EXT4-fs (loop4): orphan cleanup on readonly fs [ 718.470207][T13496] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.15966: couldn't read orphan inode 15 (err -117) [ 718.470323][T13497] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 718.470433][T13497] EXT4-fs (loop4): Remounting filesystem read-only [ 718.470519][T13497] EXT4-fs (loop4): 1 orphan inode deleted [ 718.520079][T13496] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.521629][T13497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 718.548559][T13497] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 718.556791][T13497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.627833][T13489] loop4: detected capacity change from 0 to 1024 [ 718.675472][T13489] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 718.751802][T13513] netlink: 'syz.8.15973': attribute type 1 has an invalid length. [ 718.804078][T13515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15972'. [ 718.848289][ T6168] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.881508][T13528] netlink: 'syz.0.15972': attribute type 10 has an invalid length. [ 718.980129][T13541] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 719.020551][T13545] IPv6: Can't replace route, no match found [ 719.087755][T13550] loop4: detected capacity change from 0 to 512 [ 719.096074][T13550] EXT4-fs: Ignoring removed mblk_io_submit option [ 719.130531][T13550] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 719.158656][T13550] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.15987: corrupted in-inode xattr: e_value out of bounds [ 719.180794][T13550] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.15987: couldn't read orphan inode 15 (err -117) [ 719.224589][T13562] loop6: detected capacity change from 0 to 1024 [ 719.237592][T13560] IPv6: Can't replace route, no match found [ 719.239665][T13548] loop7: detected capacity change from 0 to 8192 [ 719.260546][T13562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 719.271337][T13562] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 719.283854][T13550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.289513][T13548] loop7: p2 p3 p4 [ 719.303440][T13548] loop7: p2 start 32769 is beyond EOD, truncated [ 719.311128][T13548] loop7: p3 start 458496 is beyond EOD, truncated [ 719.318937][T13548] loop7: p4 start 198639616 is beyond EOD, truncated [ 719.333819][T13562] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 719.369244][T13562] EXT4-fs (loop6): orphan cleanup on readonly fs [ 719.388792][T13562] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 719.415995][T13574] netlink: 'syz.0.15993': attribute type 10 has an invalid length. [ 719.423696][T13562] EXT4-fs (loop6): Remounting filesystem read-only [ 719.431030][T13562] EXT4-fs (loop6): 1 orphan inode deleted [ 719.447256][T13562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 719.472536][T13562] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 719.505883][T13562] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.570267][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 719.570285][ T29] audit: type=1326 audit(1735768514.630:59610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf9d5d29 code=0x7ffc0000 [ 719.585106][T13582] IPv6: Can't replace route, no match found [ 719.601964][ T29] audit: type=1326 audit(1735768514.640:59611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf9d5d29 code=0x7ffc0000 [ 719.632683][ T29] audit: type=1326 audit(1735768514.640:59612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff1bf9d5d29 code=0x7ffc0000 [ 719.646564][T13557] loop6: detected capacity change from 0 to 1024 [ 719.657863][ T29] audit: type=1326 audit(1735768514.640:59613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf9d5d29 code=0x7ffc0000 [ 719.676552][T13557] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 719.688560][ T29] audit: type=1326 audit(1735768514.640:59614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1bf9d5d29 code=0x7ffc0000 [ 719.721200][ T29] audit: type=1326 audit(1735768514.640:59615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf9d5d29 code=0x7ffc0000 [ 719.746288][ T29] audit: type=1326 audit(1735768514.640:59616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1bf9d5d29 code=0x7ffc0000 [ 719.771421][ T29] audit: type=1326 audit(1735768514.640:59617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf9d5d29 code=0x7ffc0000 [ 719.796381][ T29] audit: type=1326 audit(1735768514.640:59618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff1bf9d5d29 code=0x7ffc0000 [ 719.821516][ T29] audit: type=1326 audit(1735768514.640:59619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.0.15998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bf9d5d29 code=0x7ffc0000 [ 719.857827][T13587] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 719.865708][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.946720][T13599] netlink: 'syz.0.16006': attribute type 1 has an invalid length. [ 720.028902][T13604] team0 (unregistering): Port device team_slave_0 removed [ 720.050622][T13609] loop7: detected capacity change from 0 to 1024 [ 720.059095][T13609] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 720.069677][T13609] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 720.081813][T13609] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 720.096351][T13609] EXT4-fs (loop7): orphan cleanup on readonly fs [ 720.103263][T13609] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 720.104958][T13604] team0 (unregistering): Port device team_slave_1 removed [ 720.117152][T13609] EXT4-fs (loop7): Remounting filesystem read-only [ 720.126465][T13609] EXT4-fs (loop7): 1 orphan inode deleted [ 720.133907][T13609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 720.147560][T13609] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 720.155791][T13609] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.169663][T13604] team0 (unregistering): Port device netdevsim1 removed [ 720.197372][T13611] IPv6: Can't replace route, no match found [ 720.203424][T13615] IPv6: Can't replace route, no match found [ 720.351655][T13621] loop6: detected capacity change from 0 to 512 [ 720.391725][T13621] EXT4-fs: Ignoring removed mblk_io_submit option [ 720.434730][T13621] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 720.470927][T13642] loop4: detected capacity change from 0 to 1024 [ 720.490419][T13644] IPv6: Can't replace route, no match found [ 720.508237][T13621] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.16014: corrupted in-inode xattr: e_value out of bounds [ 720.561515][T13621] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.16014: couldn't read orphan inode 15 (err -117) [ 720.586132][T13621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.596091][T13642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.640057][T13642] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.777911][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.847522][ T4822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.028168][T13674] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 721.102789][T13673] loop6: detected capacity change from 0 to 8192 [ 721.162083][T13694] netlink: 'syz.4.16041': attribute type 10 has an invalid length. [ 721.168285][T13673] loop6: p2 p3 p4 [ 721.173949][T13673] loop6: p2 start 32769 is beyond EOD, truncated [ 721.180457][T13673] loop6: p3 start 458496 is beyond EOD, truncated [ 721.186954][T13673] loop6: p4 start 198639616 is beyond EOD, truncated [ 721.270729][T13696] loop7: detected capacity change from 0 to 1024 [ 721.289512][T13696] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 721.310912][T13702] IPv6: Can't replace route, no match found [ 721.315681][T13696] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 721.407601][T13696] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 721.417300][T13696] EXT4-fs (loop7): orphan cleanup on readonly fs [ 721.453572][T13696] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 721.464468][T13696] EXT4-fs (loop7): Remounting filesystem read-only [ 721.471341][T13696] EXT4-fs (loop7): 1 orphan inode deleted [ 721.478922][T13696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 721.498725][T13696] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 721.508603][T13696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.573315][T13717] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 721.583107][T13696] loop7: detected capacity change from 0 to 1024 [ 721.611244][T13696] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 721.643002][T13727] netlink: 'syz.4.16055': attribute type 1 has an invalid length. [ 721.725971][T13734] __nla_validate_parse: 26 callbacks suppressed [ 721.725990][T13734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16056'. [ 721.742711][T13734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16056'. [ 721.768925][T13734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16056'. [ 721.827417][T13734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16056'. [ 721.835794][ T3372] vhci_hcd: vhci_device speed not set [ 721.836546][T13734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16056'. [ 721.852093][T13734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16056'. [ 721.879754][T13755] netlink: 'syz.0.16056': attribute type 10 has an invalid length. [ 721.888149][T13734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16056'. [ 721.897259][T13734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16056'. [ 721.915564][T13734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16056'. [ 722.061481][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 722.166033][T13798] netlink: 36 bytes leftover after parsing attributes in process `syz.7.16075'. [ 722.191624][T13796] loop4: detected capacity change from 0 to 1024 [ 722.206819][T13796] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 722.253411][T13810] netlink: 'syz.7.16075': attribute type 10 has an invalid length. [ 722.278860][T13811] netlink: 'syz.6.16069': attribute type 1 has an invalid length. [ 722.342255][T13818] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 722.515701][T13841] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 722.611632][T13852] netlink: 'syz.8.16090': attribute type 10 has an invalid length. [ 722.633032][T13847] loop7: detected capacity change from 0 to 8192 [ 722.691681][T13863] netlink: 'syz.6.16093': attribute type 1 has an invalid length. [ 722.701328][T13847] loop7: p2 p3 p4 [ 722.710103][T13866] netlink: 'syz.8.16094': attribute type 1 has an invalid length. [ 722.724285][T13847] loop7: p2 start 32769 is beyond EOD, truncated [ 722.730698][T13847] loop7: p3 start 458496 is beyond EOD, truncated [ 722.737287][T13847] loop7: p4 start 198639616 is beyond EOD, truncated [ 722.769780][ T3000] loop7: p2 p3 p4 [ 722.773699][ T3000] loop7: p2 start 32769 is beyond EOD, truncated [ 722.781403][ T3000] loop7: p3 start 458496 is beyond EOD, truncated [ 722.789267][ T3000] loop7: p4 start 198639616 is beyond EOD, truncated [ 722.891987][T13880] loop4: detected capacity change from 0 to 512 [ 722.908468][T13880] EXT4-fs: Ignoring removed mblk_io_submit option [ 722.929958][T13880] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 722.946095][T13880] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.16098: corrupted in-inode xattr: e_value out of bounds [ 723.001812][T13880] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.16098: couldn't read orphan inode 15 (err -117) [ 723.026263][T13887] loop6: detected capacity change from 0 to 8192 [ 723.053738][T13880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.069873][T13887] loop6: p2 p3 p4 [ 723.087745][T13887] loop6: p2 start 32769 is beyond EOD, truncated [ 723.094127][T13887] loop6: p3 start 458496 is beyond EOD, truncated [ 723.100624][T13887] loop6: p4 start 198639616 is beyond EOD, truncated [ 723.128114][ T3000] loop6: p2 p3 p4 [ 723.131994][ T3000] loop6: p2 start 32769 is beyond EOD, truncated [ 723.139792][ T3000] loop6: p3 start 458496 is beyond EOD, truncated [ 723.147700][ T3000] loop6: p4 start 198639616 is beyond EOD, truncated [ 723.180225][T13899] netlink: 'syz.8.16107': attribute type 1 has an invalid length. [ 723.190700][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.211504][T13903] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 723.383630][T13923] IPv6: Can't replace route, no match found [ 723.391774][T13918] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 723.462391][ T4822] bond0: (slave syz_tun): Releasing backup interface [ 723.555722][ T3291] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.589932][T13948] netlink: 'syz.4.16123': attribute type 1 has an invalid length. [ 723.652947][T13955] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 723.690462][ T3291] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.775654][ T3291] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.840094][T13937] lo speed is unknown, defaulting to 1000 [ 723.856546][ T3291] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.857424][T13989] loop8: detected capacity change from 0 to 1024 [ 723.880296][T13989] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 723.970840][ T3291] bridge_slave_1: left allmulticast mode [ 723.976583][ T3291] bridge_slave_1: left promiscuous mode [ 723.982211][ T3291] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.008724][ T3291] bridge_slave_0: left allmulticast mode [ 724.015872][ T3291] bridge_slave_0: left promiscuous mode [ 724.021534][ T3291] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.158231][ T3291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.181001][ T3291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.191584][T14014] loop4: detected capacity change from 0 to 1024 [ 724.216085][ T3291] bond0 (unregistering): Released all slaves [ 724.231587][ T3291] bond1 (unregistering): Released all slaves [ 724.243361][T14014] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 724.251509][ T3291] bond2 (unregistering): Released all slaves [ 724.282554][ T3291] bond3 (unregistering): Released all slaves [ 724.306585][ T3291] bond4 (unregistering): Released all slaves [ 724.315042][T14032] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 724.328816][ T3291] bond5 (unregistering): Released all slaves [ 724.342197][ T3291] bond6 (unregistering): Released all slaves [ 724.351606][ T3291] bond7 (unregistering): Released all slaves [ 724.366766][ T3291] bond8 (unregistering): Released all slaves [ 724.376277][ T3291] bond9 (unregistering): Released all slaves [ 724.403860][ T3291] bond10 (unregistering): Released all slaves [ 724.420137][ T3291] bond11 (unregistering): Released all slaves [ 724.429378][ T3291] bond12 (unregistering): Released all slaves [ 724.444547][ T3291] bond13 (unregistering): Released all slaves [ 724.456165][ T3291] bond14 (unregistering): Released all slaves [ 724.465928][ T3291] bond15 (unregistering): Released all slaves [ 724.476179][ T3291] bond16 (unregistering): Released all slaves [ 724.485347][ T3291] bond17 (unregistering): Released all slaves [ 724.494152][ T3291] bond18 (unregistering): Released all slaves [ 724.510488][ T3291] bond19 (unregistering): Released all slaves [ 724.512940][T14038] loop4: detected capacity change from 0 to 8192 [ 724.521510][ T3291] bond20 (unregistering): Released all slaves [ 724.536479][ T3291] bond21 (unregistering): Released all slaves [ 724.538005][T14045] loop7: detected capacity change from 0 to 1024 [ 724.546392][ T3291] bond22 (unregistering): Released all slaves [ 724.558021][ T3291] bond23 (unregistering): Released all slaves [ 724.560803][T14038] loop4: p2 p3 p4 [ 724.567172][ T3291] bond24 (unregistering): Released all slaves [ 724.568422][T14038] loop4: p2 start 32769 is beyond EOD, truncated [ 724.580776][T14038] loop4: p3 start 458496 is beyond EOD, truncated [ 724.587039][ T3291] bond25 (unregistering): Released all slaves [ 724.587318][T14038] loop4: p4 start 198639616 is beyond EOD, truncated [ 724.608629][ T3291] bond26 (unregistering): Released all slaves [ 724.624407][ T3291] bond27 (unregistering): Released all slaves [ 724.631841][T14045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.644531][T14045] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.663622][ T3291] bond28 (unregistering): Released all slaves [ 724.678389][T14045] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 724.692076][T14045] EXT4-fs (loop7): This should not happen!! Data will be lost [ 724.692076][T14045] [ 724.693759][ T3291] bond29 (unregistering): Released all slaves [ 724.703101][T14045] EXT4-fs (loop7): Total free blocks count 0 [ 724.711749][ T3291] bond30 (unregistering): Released all slaves [ 724.716632][T14045] EXT4-fs (loop7): Free/Dirty block details [ 724.724013][ T3291] bond31 (unregistering): Released all slaves [ 724.728531][T14045] EXT4-fs (loop7): free_blocks=0 [ 724.738934][ T3291] bond32 (unregistering): Released all slaves [ 724.741926][ T3291] bond33 (unregistering): Released all slaves [ 724.746985][T14045] EXT4-fs (loop7): dirty_blocks=0 [ 724.754923][ T3291] bond34 (unregistering): Released all slaves [ 724.758088][T14045] EXT4-fs (loop7): Block reservation details [ 724.766208][ T3291] bond35 (unregistering): Released all slaves [ 724.769158][T14045] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 724.796808][ T3291] bond36 (unregistering): Released all slaves [ 724.807167][ T3291] bond37 (unregistering): Released all slaves [ 724.807324][ T6168] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.818039][ T3291] bond38 (unregistering): Released all slaves [ 724.831957][ T3291] bond39 (unregistering): Released all slaves [ 724.859094][ T3291] bond40 (unregistering): Released all slaves [ 724.869450][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 724.872601][ T3291] bond41 (unregistering): Released all slaves [ 724.898471][ T3291] bond42 (unregistering): Released all slaves [ 724.922301][T13937] lo speed is unknown, defaulting to 1000 [ 724.948861][T14004] IPv6: Can't replace route, no match found [ 724.952343][T14055] netlink: 'syz.4.16158': attribute type 1 has an invalid length. [ 724.969046][T14039] lo speed is unknown, defaulting to 1000 [ 725.098273][T14039] lo speed is unknown, defaulting to 1000 [ 725.232313][T14088] loop7: detected capacity change from 0 to 512 [ 725.242032][T14088] EXT4-fs: Ignoring removed mblk_io_submit option [ 725.268997][T14088] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 725.280706][ T3291] hsr_slave_0: left promiscuous mode [ 725.292734][ T3291] hsr_slave_1: left promiscuous mode [ 725.300363][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.309522][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.322432][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.326258][T14088] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.16168: corrupted in-inode xattr: e_value out of bounds [ 725.330140][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.351628][T14088] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.16168: couldn't read orphan inode 15 (err -117) [ 725.370413][T14088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.384362][ T3291] veth1_macvtap: left promiscuous mode [ 725.389897][ T3291] veth0_macvtap: left promiscuous mode [ 725.395436][ T3291] veth1_vlan: left promiscuous mode [ 725.400758][ T3291] veth0_vlan: left promiscuous mode [ 725.407361][ T6168] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.558541][T13937] chnl_net:caif_netlink_parms(): no params data found [ 725.651552][T14110] loop7: detected capacity change from 0 to 8192 [ 725.694824][T14110] loop7: p2 p3 p4 [ 725.698684][T14110] loop7: p2 start 32769 is beyond EOD, truncated [ 725.705210][T14110] loop7: p3 start 458496 is beyond EOD, truncated [ 725.711851][T14110] loop7: p4 start 198639616 is beyond EOD, truncated [ 725.731831][T13937] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.738978][T13937] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.746228][T13937] bridge_slave_0: entered allmulticast mode [ 725.753156][T13937] bridge_slave_0: entered promiscuous mode [ 725.789111][T13937] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.796417][T13937] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.809158][T13937] bridge_slave_1: entered allmulticast mode [ 725.821947][T13937] bridge_slave_1: entered promiscuous mode [ 725.926249][T13937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.939715][T13937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.967275][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 725.967292][ T29] audit: type=1326 audit(1735768521.030:60115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14130 comm="syz.7.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 725.997282][ T29] audit: type=1326 audit(1735768521.030:60116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14130 comm="syz.7.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 726.021103][ T29] audit: type=1326 audit(1735768521.030:60117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14130 comm="syz.7.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 726.046081][ T29] audit: type=1326 audit(1735768521.030:60118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14130 comm="syz.7.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 726.069925][ T29] audit: type=1326 audit(1735768521.030:60119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14130 comm="syz.7.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 726.093747][ T29] audit: type=1326 audit(1735768521.030:60120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14130 comm="syz.7.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 726.118540][ T29] audit: type=1326 audit(1735768521.030:60121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14130 comm="syz.7.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 726.142287][ T29] audit: type=1326 audit(1735768521.030:60122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14130 comm="syz.7.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1750e65d29 code=0x7ffc0000 [ 726.167689][ T29] audit: type=1326 audit(1735768521.170:60123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.8.16182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2004755d29 code=0x7ffc0000 [ 726.191408][ T29] audit: type=1326 audit(1735768521.170:60124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.8.16182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2004755d29 code=0x7ffc0000 [ 726.276918][T14144] loop4: detected capacity change from 0 to 1024 [ 726.291828][T13937] team0: Port device team_slave_0 added [ 726.323929][T14144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.328920][T13937] team0: Port device team_slave_1 added [ 726.351484][T14144] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 726.419691][T13937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.428110][T13937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.455501][T13937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.472089][ T9735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.482411][T13937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.489592][T13937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.515599][T13937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.564084][T13937] hsr_slave_0: entered promiscuous mode [ 726.587945][T13937] hsr_slave_1: entered promiscuous mode [ 726.604261][T13937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.629712][T13937] Cannot create hsr debugfs directory [ 726.681050][T14169] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 726.728929][T14161] loop4: detected capacity change from 0 to 8192 [ 726.779675][T14181] IPv6: Can't replace route, no match found [ 726.795055][T14161] loop4: p2 p3 p4 [ 726.798957][T14161] loop4: p2 start 32769 is beyond EOD, truncated [ 726.805420][T14161] loop4: p3 start 458496 is beyond EOD, truncated [ 726.811983][T14161] loop4: p4 start 198639616 is beyond EOD, truncated [ 726.879229][ T3000] loop4: p2 p3 p4 [ 726.883179][ T3000] loop4: p2 start 32769 is beyond EOD, truncated [ 726.890979][ T3000] loop4: p3 start 458496 is beyond EOD, truncated [ 726.898801][ T3000] loop4: p4 start 198639616 is beyond EOD, truncated [ 726.990120][T14186] loop8: detected capacity change from 0 to 512 [ 727.050921][T14186] EXT4-fs: Ignoring removed mblk_io_submit option [ 727.082162][T14186] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 727.223375][T14186] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.16200: corrupted in-inode xattr: e_value out of bounds [ 727.276214][T14186] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.16200: couldn't read orphan inode 15 (err -117) [ 727.338988][T13937] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 727.353561][T14186] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.376892][T13937] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 727.449113][T13937] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 727.511824][T13937] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 727.692005][T13937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.743365][T14234] loop4: detected capacity change from 0 to 8192 [ 727.748932][T13937] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.779653][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.786796][ T3301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.819462][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.826581][ T3301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.867981][T14234] loop4: p2 p3 p4 [ 727.872613][T14234] loop4: p2 start 32769 is beyond EOD, truncated [ 727.879031][T14234] loop4: p3 start 458496 is beyond EOD, truncated [ 727.885545][T14234] loop4: p4 start 198639616 is beyond EOD, truncated [ 727.900301][ T3000] loop4: p2 p3 p4 [ 727.904190][ T3000] loop4: p2 start 32769 is beyond EOD, truncated [ 727.910584][ T3000] loop4: p3 start 458496 is beyond EOD, truncated [ 727.917099][ T3000] loop4: p4 start 198639616 is beyond EOD, truncated [ 727.935920][T14243] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 728.032752][T13937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.058238][ T4505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.153884][T14266] validate_nla: 4 callbacks suppressed [ 728.153901][T14266] netlink: 'syz.4.16223': attribute type 1 has an invalid length. [ 728.239537][T14276] loop8: detected capacity change from 0 to 1024 [ 728.275362][T14276] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.299127][T14278] loop7: detected capacity change from 0 to 1024 [ 728.317835][T14276] ext4 filesystem being mounted at /620/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.336919][T14278] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 728.366785][ T4505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.376990][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 728.383203][T13937] veth0_vlan: entered promiscuous mode [ 728.398515][T13937] veth1_vlan: entered promiscuous mode [ 728.437368][T13937] veth0_macvtap: entered promiscuous mode [ 728.444030][T14292] IPv6: Can't replace route, no match found [ 728.452530][T13937] veth1_macvtap: entered promiscuous mode [ 728.500926][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.511453][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.521362][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.531899][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.541786][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.552459][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.562523][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.562625][ T2989] ================================================================== [ 728.572978][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.581016][ T2989] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 728.581053][ T2989] [ 728.590882][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.597829][ T2989] write to 0xffffffff8669e5f0 of 8 bytes by task 13937 on cpu 1: [ 728.597848][ T2989] prb_reserve+0x740/0xb60 [ 728.597873][ T2989] vprintk_store+0x558/0x870 [ 728.600189][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.610577][ T2989] vprintk_emit+0x15e/0x680 [ 728.610609][ T2989] vprintk_default+0x26/0x30 [ 728.610640][ T2989] vprintk+0x75/0x80 [ 728.610659][ T2989] _printk+0x7a/0xa0 [ 728.610681][ T2989] batadv_check_known_mac_addr+0x147/0x180 [ 728.610719][ T2989] batadv_hard_if_event+0x4b9/0xfb0 [ 728.610752][ T2989] raw_notifier_call_chain+0x6f/0x1d0 [ 728.610791][ T2989] call_netdevice_notifiers_info+0xae/0x100 [ 728.618591][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.622892][ T2989] dev_set_mac_address+0x1ff/0x260 [ 728.627506][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.637334][ T2989] dev_set_mac_address_user+0x31/0x50 [ 728.641839][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.646419][ T2989] do_setlink+0x3ec/0x22c0 [ 728.650337][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.654213][ T2989] rtnl_newlink+0xde9/0x1250 [ 728.654241][ T2989] rtnetlink_rcv_msg+0x651/0x710 [ 728.654268][ T2989] netlink_rcv_skb+0x12c/0x230 [ 728.654296][ T2989] rtnetlink_rcv+0x1c/0x30 [ 728.660111][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.665267][ T2989] netlink_unicast+0x599/0x670 [ 728.670633][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.676507][ T2989] netlink_sendmsg+0x5cc/0x6e0 [ 728.686932][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.692002][ T2989] __sock_sendmsg+0x140/0x180 [ 728.701884][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.707227][ T2989] __sys_sendto+0x1a8/0x230 [ 728.707253][ T2989] __x64_sys_sendto+0x78/0x90 [ 728.707276][ T2989] x64_sys_call+0x29fa/0x2dc0 [ 728.717697][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.722067][ T2989] do_syscall_64+0xc9/0x1c0 [ 728.731859][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.736422][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.741366][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.746104][ T2989] [ 728.746112][ T2989] read to 0xffffffff8669e5f0 of 8 bytes by task 2989 on cpu 0: [ 728.750518][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.761080][ T2989] _prb_read_valid+0x3bb/0xba0 [ 728.761111][ T2989] prb_read_valid+0x3d/0x60 [ 728.761134][ T2989] syslog_print+0x157/0x760 [ 728.761163][ T2989] do_syslog+0x3a1/0x7f0 [ 728.765923][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.775682][ T2989] __x64_sys_syslog+0x43/0x50 [ 728.780439][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.790926][ T2989] x64_sys_call+0x29be/0x2dc0 [ 728.795623][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.805378][ T2989] do_syscall_64+0xc9/0x1c0 [ 728.805404][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.805442][ T2989] [ 728.805447][ T2989] value changed: 0x00000000000021e2 -> 0x00000000000041e2 [ 728.805460][ T2989] [ 728.805464][ T2989] Reported by Kernel Concurrency Sanitizer on: [ 728.805474][ T2989] CPU: 0 UID: 0 PID: 2989 Comm: klogd Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 728.805503][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 728.805519][ T2989] ================================================================== [ 728.996365][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.006203][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.016691][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.026527][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.031348][T14293] loop8: detected capacity change from 0 to 512 [ 729.036962][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.037021][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.037041][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.051558][T13937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.093150][T14293] EXT4-fs: Ignoring removed mblk_io_submit option [ 729.131968][T14293] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 729.134728][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.152771][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.162659][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.173107][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.182939][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.193390][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.203250][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.213786][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.223621][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.234118][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.243963][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.254596][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.264491][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.274955][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.284840][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.295315][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.305224][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.315690][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.325530][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.336017][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.345885][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.356362][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.366238][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.376780][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.386638][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.397089][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.407020][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.417489][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.427336][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.437784][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.448040][T13937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.458627][T13937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.473264][T14293] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.16230: corrupted in-inode xattr: e_value out of bounds [ 729.489817][T13937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.500827][T14293] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.16230: couldn't read orphan inode 15 (err -117) [ 729.516156][T13937] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.516201][T13937] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.516240][T13937] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.516303][T13937] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.553400][T14298] loop4: detected capacity change from 0 to 8192 [ 729.574083][T14293] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.626809][T14298] loop4: p2 p3 p4 [ 729.630773][T14298] loop4: p2 start 32769 is beyond EOD, truncated [ 729.638530][T14298] loop4: p3 start 458496 is beyond EOD, truncated [ 729.645368][T14298] loop4: p4 start 198639616 is beyond EOD, truncated [ 729.972171][ T4505] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.