last executing test programs: 7.369297028s ago: executing program 3 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b002797"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r6, &(0x7f00000000c0)=[{0x2}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000810528bd7000fcdbdf250000000059a366d6b37c51fda4b585c0c0", @ANYRES32=0x0, @ANYBLOB="14d00400080802001c00128009000100626f6e64000000000c00028008001f0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000280)=[0x6]) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r10 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r10, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, @local}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x408, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 6.231913995s ago: executing program 3 (id=133): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x34400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = dup3(r6, r5, 0x0) recvmmsg(r7, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@deltclass={0x34, 0x29, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0x1fff8, 0xfff2}, {0x10, 0xa}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') r9 = socket$netlink(0x10, 0x3, 0x0) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lseek(r11, 0x8000000000000001, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff08000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES32=r3], 0x40}}, 0x24040800) preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000001480)=""/4112, 0x1010}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000240)=""/240, 0xf0}], 0x4, 0xb88, 0x0) 5.775178612s ago: executing program 3 (id=136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0000200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0x0) syz_emit_ethernet(0x308, &(0x7f0000001100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, 'vNq', 0x2d2, 0x2f, 0xff, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xf2, 0x2, [0xe05], "3c5a154c3bbb7e23cc19ca1bc7d356528f684463ace39b6216af03181bd1d8d81a875c84bc24330a11121c534fd849be4bfc52fd6907080b1feb7707460db6fc1a7e3d5918603d108305447a84245798627dee50115578c459a118b8b9f626d81acf04fde51e074c120a220d6307f09f6eb25471edf475f913772fe1dd1cd53b0bb8d7b0e0e8cd12163c0793a814f2848b229fc9772b89cedf63b180f8940c0b0251242f5309c08af3cb7ee609a1240fde97a43167fae0cadf2fc4c5c66faeec2d02adad2273c58da853ed08bc87ef1752a0c69b48a6ad3439a6b7ed1eb05f1701d4e3e5ed9eae5be0b3a513692047679af4"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x8, 0x2, 0x400], "32d45c9e07e54f161d9cc1ed6e5082389a2da125963db745"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x1, 0x1000], "63f77e9b0811a7ae308ae0687086c63d7f6c7af947a58996748f0bb19317161786f67f492538d624001606ed2df540fc0badabba7f7c2c7e055f606c5397696426b5dce8ed761992231481bcb8cb008665f2dbf8d4b3d54c183cfec7531cb1cc461daf5b62d4582452e9e815e9eb048fb9fc5119d7e7b7eee6fc74bb2aab9ff7244f83350f2e01e37ebea379acc7b59c713657aed68d428c7fa2"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x5, 0x1}, 0x1, {0x55b}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x0, 0x3, 0x0, 0x2, 0x5, 0x4}, 0x2, {0xb, 0xa, 0x2, 0x8, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "cee15d0a2e112822417dce89bb57a9fdb8e883358a254bd7749aa51f6140341a4206d756a2a719c6373def571fc770ca48e6084d1171dd17800d13d8a561edb45847f35f7165f30a234cf2f52e27afa68bc5dc2ce7fa74a39d08c8753330075ae5ef16cef595fbaa0d55dca820fc59f7774eb9cb5b5f0656cb7933fc701bd769083e089cf6f03453cfccda29876f70ded2a8e72c679001a3ba2da56630cacdba41d4e87ba749a552a05032774ced1ec4bb40de2f3e906eccf6611b525ce8bc3a91d259bef85d2442f818cbcfbbe2163f117bf654f948b95f6314748e"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180600000000000016d159d9addfe946f47111dae6024567272dd7161bf77ed48dd3f1e81ce0387091d2064c371cdd5698e9da13d38a00000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000104000000260000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300", @ANYRES32=r10], 0x40}, 0x1, 0xd, 0x0, 0x8004070}, 0x0) 5.730149352s ago: executing program 4 (id=137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, r0, 0x4, r2}, 0x10) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000440)={0x6, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYRES64=r8, @ANYRESHEX=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="14000000040000000800000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) bind$packet(r10, &(0x7f0000000000)={0x11, 0x3, r11, 0x1, 0x0, 0x6, @local}, 0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) getsockopt$inet6_mreq(r2, 0x29, 0x9, &(0x7f0000000840)={@mcast1, 0x0}, &(0x7f0000000880)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf250a0000003800018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="1400d0bd76657468305f746f5f6272696467650008000100efffcd82e3e8d87943fa69cdbe2bf5c7511c631175eae779b4c76e55a032c9f9da45f6a60280", @ANYRES32=r13, @ANYBLOB="0800030002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000180)=0x14) getpgrp(0x0) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) 5.602114715s ago: executing program 4 (id=139): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='spmi_write_begin\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x0, 0x3, 0x6, 0x4}}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) unshare(0x42000000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0x1}], 0x1, 0xe7b, 0x0, 0x11) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x49, 0x0, &(0x7f0000cab000)) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_out(r2, 0x57f4c973c2576fb1, &(0x7f0000000080)) write$selinux_context(r6, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000140)='./bus\x00', 0x20041e, &(0x7f0000000340)={[{@init_itable}, {@nogrpid}, {@quota}], [{@dont_measure}]}, 0x1, 0x50b, &(0x7f0000000ac0)="$eJzs3c9vI1cdAPCvJ3HiZNMmLT0AgnZpCwtarZN426jqAcoJIVQJ0SNI25B4oyh2HMVOacIe0jNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerP2Jtr8cIg/H2k0783z+vt9sea99UvsF8DIuhkR+xExEREfRsRsfr2QH/Fe50gf9+jgwcrhwYOVQrTbH/yjkLWn16Ln36Ru5M9ZiogffCfix4Wn4zZ39zaWa7Xqdl6fb9W35pu7e3fW68tr1bXqZqWytLi08M7dtyvn1tfX6hN56csPf7//jZ+mac3kV3r7cZ46XS8exUmNR8T3LiLYEIzl/ZkYdiI8lyQiXo6I17P7fzbGslcTALjO2u3ZaM/21gGA6y7J1sAKSTlfC5iJJCmXO2t4r8R0Ums0W7fvN3Y2VztrZXNRTO6v16oL+VrhXBQLaX0xKz+uV47V70bESxHx88mprF5eadRWh/kfHwAYYTeOzf//nuzM/wDANVcadgIAwKUz/wPA6DH/A8DoMf8DwOjpzP9Tw04DALhE3v8DwOgx/wPASPn++++nR/sw//7r1Y92dzYaH91ZrTY3yvWdlfJKY3urvNZorGXf2VM/6flqjcbW4lux8/HcN7earfnm7t69emNns3Uv+17ve9Vi9qj9S+gZADDIS6999qdCOiO/O5Ud0bOXQ3GomQEXLRl2AsDQjA07AWBo7PYFo+sM7/EtD8A10WeL3ieU+n1AqN1uty8uJeCC3fqC9X8YVT3r//4KGEaM9X8YXdb/YXS124XT7vkfp30gAHC1WeMHBvz+/+X8/Jv8lwM/Wj3+iE8vMisAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42rr7/5bzvcBnIknK5YgXImIuioX767XqQkS8GBF/nCxOpvXFIecMAJxV8tdCvv/Xrdk3Z55oevXGUXEiIn7yyw9+8fFyq7X9h4iJwj8nu9dbn+bXK5efPQBwsu48nZ173sg/Oniw0j0uM5+/fTsiSp34hwcTcXgUfzzGs3MpihEx/a9CXu8o9KxdnMX+JxHx+X79L8RMtgbS2fn0ePw09guXGj95In6StXXO6c/ic88T+xzyh/9nn6Xjz3v97r8kbmbn/vd/KRuhzi4f/9KnWjnMxsDH8bvj39iA8e/maWO89bvvdkpTT7d9EvHF8Yhu7MOe8acbvzAg/punjP/nL736+qC29q8ibkX/+L2x5lv1rfnm7t6d9fryWnWtulmpLC0uLbxz9+3KfLZGPT94Nvj7u7dfHNSW9n866R+/dEL/v3rK/v/6vx/+8CvPiP/1N/rFT+KVZ8RP58SvnTL+8vRvS4Pa0virA37+J73+t08Z/+Ff9p7aNhwAGJ7m7t7Gcq1W3Va4ToXp/OW9KvmcVyHt0xVIo2/hW5cVayL6N/3sjc6Lfqyp3X6uWINGjPNYdQOugqObPiL+M+xkAAAAAAAAAAAAAACAvi7mg0rdzwh1rgy5iwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxj/wsAAP//OvbIyw==") ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000100)) 5.503815896s ago: executing program 1 (id=141): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000240001052abd7000fedbdf250900000006000300000000", @ANYBLOB="329a091e2aa0d03382379cfa86e94561c5b0f208c6369e317d02acf9826af552b04c6587aa702efde1f78fae0ed63d7bf8395edec1ffd324762daf60130d301a"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004011000040000000a000000000000a8", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="01000000000000000500"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_clone(0x44066000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2, 0x0, 0x1}, 0x18) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6c00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000019c0)={'ip6gre0\x00', &(0x7f0000002640)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3e, 0x5, 0x5121e59afcdff86d, @empty, @mcast2, 0x7800, 0x96602ec4e0b44a1e}}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x8000000000000c, &(0x7f0000000480)="e8f1f40902", 0x5) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xd5, 0x0, 0x1}]}}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)="a876dd276217d7533218606461858bdd9012e91008483494cd3d7a998e84cddea246f9587430eb65ee0410bdc37ad6494542322aedcfa9e74ac09bf4e6672b2164a803034ae9d4b2b8d59788b14a0890b906fe721936f30b957b0cd3b78fb81a8b0acd054d2bfa226b2778be384d28a76c6abc4e0c5d9ac34b7f149b4a9ac4864695eb1489b11cc254b278c9dec82cc82591d2", 0x93}, {&(0x7f0000000280)="19c9535138492c6913eb60ee0f70dd7fe2b7e3b3e13a1406a85c8672f6e5a4cdb24b335d34c5e72ae8f367d958e6c2a28899c95b6694c174a936d67495a13bc141857138eb82e2b623ad704db92e291be9c45119f6f0fff48ad99978e6b80817f0ea2a4d679ea34eae94ccf0b8ec508cbfb4c164720b2f7c59da3b3c17e4d4ea3aecbe12b96730ea24cac82bb3dd8219833a61773f6a5ccba56eb92bdeb04e98932e10f6b804a27dcbe26e61a2297ba7b473169ad23234dd0b5f00163e2502852769", 0xc2}, {&(0x7f0000000380)="71ab0a61fe0dc4d37f45932c66976d0dec1610120a2bfd7d4010cb24abef03eeaf7407f122ca5d044b1769554983d97a3000bdab5580fb70e5118ed3b1b3dff31e558ef05ba914a4953bf04ad9a14018360cf16a73fb1381f2a61d7d3673d150cf48f1a34528b5cc783c63f7ee0fddd92e867e667f641ee64fdad2c09ea556dfd2c7", 0x82}], 0x3}}], 0x2, 0x44008004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000000ff07000000000000a12910000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 4.823146016s ago: executing program 0 (id=146): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1200000000000000290000003b0000000000000000008e94bc9f0800000000000000a838245d0000280000000000000029000100050004000000020100000000"], 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095", @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000a03000000000000000000010000000900010073797a0000000000004000001b000900020073797a3200000000090001d800000800054000000004440000001e0a05020000006f797a32000000001898038014000080100001800400028008000180000000000000140000001000010000000000000000000000000a00"/154], 0xc8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'ip6gretap0\x00', 0x4000}) close(0xffffffffffffffff) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004780)=@newtaction={0x2aa8, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x2a94, 0x1, [@m_pedit={0x2a90, 0x1a, 0x0, 0x0, {{0xa}, {0x2a64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x6, 0x7fffffff, 0x4, 0x71c8, 0x3}, 0xd, 0x5}, [{0x0, 0x3, 0x7, 0x7, 0x6, 0x800}, {0x4, 0x4, 0xff, 0x7fff, 0x7ff, 0x7f}, {0x2919, 0xfffffffa, 0x8, 0x10, 0x1d4e, 0x800}, {0x1000, 0x4, 0x2, 0x0, 0x2, 0x5}, {0x1b72, 0x5, 0x1, 0x2, 0x6, 0x8}, {0xfb, 0x0, 0x740, 0x1000, 0x6}, {0x6, 0xfffffffd, 0xffffff81, 0xfffffffd, 0x1, 0x3}, {0x4, 0x7, 0x1, 0x7fffffff, 0x8, 0x5}, {0xfffffffc, 0x5, 0x7, 0x0, 0x3b0, 0x2}, {0x8, 0x0, 0x6, 0x1, 0x2, 0xd9}, {0xfffffffb, 0x4, 0x2779ef89, 0x10001, 0x3ff, 0x4}, {0x7588cffd, 0x5, 0x3, 0xfffffffa, 0x2, 0x80000000}, {0x2, 0x7fffffff, 0x8, 0x1000, 0x8, 0xffffffff}, {0x8, 0xdf, 0x3, 0x2, 0x40, 0x401}, {0x8, 0x5, 0x5, 0x6, 0x8, 0x3}, {0x2, 0x75d, 0x7, 0x4, 0x3, 0x1}, {0x4, 0x2, 0x6, 0x7f, 0x1, 0x7}, {0x3, 0x3, 0x6, 0x2, 0x80, 0xc2e}, {0x1, 0x4a, 0x1, 0x7fffffff, 0xe, 0x7}, {0x1, 0x3ff, 0x6, 0xf, 0x3, 0x8001}, {0x7, 0xa, 0x7fffffff, 0x9, 0x6, 0x6}, {0x6, 0x401, 0x400, 0x0, 0x796b, 0x8}, {0x6, 0x10, 0x8, 0x4, 0x7, 0x5}, {0xfff, 0x2, 0x10, 0x2, 0x331d, 0xfffffff8}, {0x8, 0x0, 0x2, 0x4, 0x80000000, 0x1}, {0x1000, 0x8, 0x7fffffff, 0x8, 0xb, 0x8000}, {0x3, 0x7, 0x4a2, 0x4, 0x9}, {0xfffffffc, 0x7, 0x2, 0x5, 0x4, 0x4}, {0x157a7268, 0x1, 0xf, 0x2, 0xc01, 0x7fff}, {0xd, 0x4993, 0x5b, 0x9, 0x5927, 0x3}, {0x8001, 0x6a6435e0, 0x10000, 0x3, 0x7, 0x3}, {0x76, 0x19f, 0x9, 0xfffffffd, 0x8000, 0x3}, {0x2, 0xfb, 0x20, 0x9, 0x8, 0x7}, {0x3, 0x60a8, 0x40, 0x5e, 0x2343, 0xf}, {0x6, 0x1, 0x5, 0x7fffffff, 0x8, 0x80}, {0x80, 0x10001, 0x0, 0xd, 0xa81c, 0x9}, {0x80000000, 0x0, 0x6, 0x4, 0x5605, 0x4}, {0xfffffffc, 0x1ff, 0x101, 0x5, 0x466}, {0x4, 0xd, 0x6, 0x2, 0x6, 0x3ff}, {0xf, 0x360, 0xb, 0x2, 0x0, 0x5497}, {0x8, 0x131, 0x6, 0x8, 0xfffffff7, 0x40}, {0x942, 0x2, 0x2, 0x0, 0x0, 0x80000000}, {0x3, 0x100, 0x1, 0x3, 0x2, 0x7ff}, {0x3, 0x3, 0x5, 0x5, 0x5, 0x47c7}, {0x8, 0x3, 0x5, 0x2, 0x9, 0x4}, {0x5, 0x101, 0x1, 0x200, 0x6, 0x10000}, {0x3, 0x80, 0x0, 0x4, 0x5, 0x48}, {0x8, 0x9, 0xf, 0xf583, 0x2, 0x1}, {0x200, 0x6, 0x7, 0xf, 0x279, 0x10001}, {0x8, 0x40, 0x5e2, 0x7fff, 0x1, 0x2}, {0x4, 0xffff, 0x3, 0x80000001, 0x3, 0xfffff801}, {0x2, 0x10, 0x7, 0x7f, 0x2, 0x6}, {0x7905c000, 0xfffffffb, 0xfffffffc, 0x4, 0x1f, 0x8753}, {0x6, 0x8, 0x3, 0x0, 0x9, 0x6}, {0x81, 0x6, 0x1, 0xfffffffb, 0x80000000, 0x101}, {0x8, 0x400, 0x5, 0x1, 0x9, 0x5}, {0x9, 0xb041, 0x80000000, 0x9, 0x3, 0x3}, {0xbb5, 0x7, 0x10000000, 0xffff, 0xb, 0x3c2c}, {0x0, 0x81, 0x2, 0xfff, 0x7, 0xa50c}, {0x7, 0x2, 0x4, 0x8, 0x0, 0x573}, {0x6, 0x200, 0xfffffffd, 0x7, 0xf0, 0x8}, {0x7, 0x3, 0x2, 0x1, 0x571, 0x8}, {0x5, 0x0, 0x2, 0x8, 0x5, 0x9}, {0x9899, 0x7, 0xffff, 0x80000001, 0xffffffff, 0x6}, {0x5, 0x8, 0x2, 0x3, 0x7, 0x8}, {0x5, 0x86ed, 0x200, 0x200, 0x2}, {0xfffffd42, 0xd9, 0x83, 0x0, 0x3ff, 0x2}, {0x400, 0x8e1, 0x8001, 0x37, 0x903}, {0x126c00, 0xb, 0x5, 0x7, 0x1c, 0x8001}, {0x6, 0x561a, 0x6, 0x0, 0x0, 0xf}, {0x800, 0x80, 0x6, 0x811b, 0x2, 0x40}, {0x7, 0xfff, 0x1, 0x9, 0x9, 0x8}, {0x3ed, 0x2, 0x8, 0x5, 0x1, 0x3}, {0x2d1e, 0x101, 0x1, 0x7ff, 0x101, 0x8000}, {0x7, 0xfffffffb, 0x2, 0xffffffff, 0x9, 0x6}, {0x3, 0x9a1, 0xc0000000, 0xda5, 0x8, 0x9}, {0x1000, 0xa526, 0x7, 0xb, 0x6, 0x3ff}, {0xc, 0x8, 0x9, 0x66, 0x69, 0x1}, {0xf2, 0x61, 0xaf, 0x6, 0x80000001, 0x52}, {0x1, 0x8, 0x5, 0x4, 0x7f, 0x100}, {0xcfe, 0xa, 0x4a, 0x4, 0x5, 0x7}, {0x5, 0x6, 0x139, 0x10000, 0x20000000}, {0x5, 0x838, 0x56ac2610, 0xfffffffc, 0xf22, 0x200}, {0x5, 0x3ba, 0x1, 0x0, 0xa, 0x1}, {0x1, 0x80000000, 0x8, 0x20ceb4b1, 0x5, 0xfe48}, {0xccf, 0x10000000, 0x10, 0x7f, 0x6e69, 0x40}, {0x3, 0x4, 0xff, 0xf, 0xba, 0x1}, {0x4a, 0x6, 0x2, 0x6, 0x6, 0x4}, {0xffffffff, 0x8, 0x40, 0xc, 0x2, 0x6}, {0xd, 0x5, 0x81, 0xdb, 0x7, 0x3}, {0x3, 0xfffffff2, 0x5, 0x2, 0x4, 0x1}, {0x4, 0x5cf, 0x22, 0x4, 0xffffffff, 0x9}, {0x3, 0x1, 0x4, 0x8, 0x3, 0x18000}, {0x3, 0x2, 0xfffff000, 0x5, 0x8}, {0x4, 0x8, 0x6, 0xffffffff, 0x0, 0xf}, {0x4, 0xb6, 0x9, 0x6, 0xfffffff9, 0xffffffff}, {0x3, 0x1ff, 0x1000, 0x9, 0x400}, {0x8, 0xf, 0x6, 0x8, 0x0, 0xebe}, {0x8, 0x6, 0x2, 0x7, 0xa51, 0x10000}, {0xff, 0xe23, 0x6d20e9ab, 0x3, 0x0, 0x5}, {0x6, 0x54a, 0xffff89c7, 0x6, 0x4, 0xfffffffa}, {0x4495b638, 0x7, 0x8, 0x800, 0x401, 0x3}, {0x8000, 0x0, 0x43, 0x10, 0xe93, 0x8}, {0x8, 0x96e7, 0x8455, 0x8001, 0x2, 0x3}, {0x80, 0x8, 0x4, 0x4, 0x10000, 0x8001}, {0x2, 0xb, 0x3, 0x6, 0xffff8001, 0x4}, {0xfffffff7, 0x4f7, 0xf31a, 0x5, 0x1, 0xe4f8}, {0x100, 0x1, 0x7, 0x2, 0x100, 0x59d}, {0x20000, 0x6f, 0x7, 0x2, 0x1, 0xfffffffb}, {0x7ff, 0x2, 0x0, 0x4, 0x0, 0x6}, {0x3ff, 0x10001, 0x5, 0x4d67, 0x9, 0x7}, {0x3, 0x5eff, 0x8, 0x0, 0xf30, 0x1}, {0x120000, 0x9, 0x9, 0x3ff, 0x6, 0x4}, {0x9, 0x7361, 0x6, 0x8, 0x200, 0xe7f1}, {0xa, 0xd87, 0x3, 0x4, 0x6, 0x1}, {0x7b8d, 0x2, 0x7, 0x7, 0x1, 0x9}, {0x7, 0x6, 0xa07, 0xff, 0x4, 0x7}, {0xfffffffb, 0x9, 0x1000, 0xffff, 0x1, 0x5}, {0x9, 0xafa0, 0x4, 0x5, 0x1}, {0x4, 0x0, 0xfffffffb, 0xcac, 0xffff8001, 0x2e8e}, {0x7, 0x5, 0x1, 0x4, 0x9, 0x1}, {0xfffffffa, 0x1, 0x8, 0x4, 0x3e, 0x3}, {0x7, 0x9a20, 0x7fff, 0x80, 0x401, 0x800}, {0x4, 0x53, 0x3, 0x94, 0x8, 0x80000001}, {0x1, 0xb6e, 0x2, 0x0, 0x10000, 0xfff}, {0x9, 0x45, 0xb614, 0xffffff01, 0xf, 0x5}, {0x4, 0xda2, 0x2, 0x41, 0xdee, 0x9}, {0x0, 0x8, 0x6, 0x4, 0x3, 0x4}], [{0x2}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x2}, {0x93810d2c94579b80, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x2}, {0x1}, {0x5}, {0x1}, {0x4}, {0x3, 0x1}, {0x13fd6e1f16bc3ed9}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {}, {0x5}, {0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x2}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0xe835e2dde1e62f38}, {0x1}, {0x3}, {0x5, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3, 0xa96a51d6134e0325}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x3}, {0x3, 0x1}, {0x4}, {0x4, 0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x6, 0xd, 0x0, 0x7, 0xda2}, 0x6, 0xd}, [{0xfffffff9, 0x10000, 0x5, 0x81, 0x7fffffff, 0x4}, {0x1, 0xfffffffa, 0x2, 0x5, 0x2, 0x3}, {0x7ff, 0x9, 0xfff, 0x0, 0xe, 0x78}, {0x0, 0x2, 0xfffffe00, 0xf1f, 0x9, 0x2}, {0xfffffff8, 0x20, 0xa6, 0x401, 0x700000}, {0x0, 0x0, 0x6, 0xcc, 0x2, 0x2}, {0xffffff80, 0x3, 0x11, 0x6, 0x614d, 0x3}, {0xf5, 0x3, 0x10, 0x5, 0x3, 0x7}, {0x6, 0x5, 0x6, 0x0, 0xff, 0x6}, {0x5a, 0x9, 0xfffffffa, 0x0, 0x4, 0xb6}, {0x7, 0x4, 0x1, 0xffffffc0, 0x4, 0x7}, {0x0, 0x10001, 0x891c, 0x7fffffff, 0x5, 0x9}, {0x7, 0x2, 0x8, 0x6, 0x7, 0x3}, {0xf, 0x6, 0x0, 0x554, 0x5, 0x80}, {0x4, 0xf, 0xfffff800, 0xfffffffe, 0x4, 0x5}, {0x7, 0x0, 0xfffffff1, 0xffffffff, 0x10001, 0x3}, {0x5, 0x9, 0x96, 0xffff, 0x0, 0x43}, {0x7f, 0x81, 0x5, 0x5, 0x101, 0x101}, {0x7, 0x6, 0x5, 0x0, 0x9, 0x8001}, {0x200, 0x8, 0x5, 0x5, 0x6, 0x401}, {0xffff0000, 0x1, 0x8000, 0x6, 0x100}, {0x1, 0xbc93, 0x0, 0x5, 0x0, 0xc7}, {0x1000, 0x4, 0xffffffff, 0x9, 0xfffff000, 0x4}, {0x6, 0x100, 0x7f, 0xffff, 0xfffffffb}, {0x9, 0x7f, 0x800, 0x4, 0xf1e6, 0x4}, {0x1e3, 0x5, 0x885, 0x7, 0x42e, 0x960}, {0x200, 0x7, 0x0, 0x7fff, 0x7, 0x400}, {0x3, 0xffffffff, 0x3d, 0x9, 0xfff, 0xffff}, {0x6343b689, 0x3, 0x8, 0x5, 0x3, 0xf909}, {0x0, 0xe353, 0x3, 0x6, 0x7, 0x2}, {0x9, 0x10, 0x5abab887, 0xc6f9, 0x1, 0x7}, {0x2, 0xc, 0x9, 0xd, 0x8, 0x10001}, {0x9, 0x378e7bfa, 0xffffffff, 0x8, 0x8001, 0x5}, {0x6, 0x1, 0x6d9e, 0x7, 0x10000, 0x4}, {0x3ff, 0xe0, 0x2, 0x23, 0x4245, 0x1}, {0x99, 0x200, 0x8, 0x9, 0xafd, 0x7}, {0xb06f, 0x101, 0x8, 0x3, 0x6, 0x2}, {0xf1f5, 0xcb95, 0x5, 0x9, 0xc, 0x8}, {0x1, 0x7, 0x21, 0x7ff, 0x0, 0x1}, {0x6c4a6dc7, 0x7, 0x8, 0x6e, 0x0, 0x40}, {0x9, 0x3, 0x0, 0x9, 0x8, 0x80}, {0x76, 0x0, 0x2, 0x2, 0x6, 0x6}, {0x5, 0x7, 0xffffffff, 0x0, 0x86b, 0x4}, {0xd4b, 0x3, 0x1, 0x3ff, 0x28000000, 0x9}, {0xf, 0x6, 0x3, 0x9, 0xc, 0x5}, {0xfffffffb, 0x0, 0x1, 0x3d7, 0x3, 0x100}, {0xffff29d3, 0x401, 0x2b6, 0x22, 0x5, 0x1}, {0x0, 0xf893, 0xe, 0x400, 0x8, 0x9}, {0xb13e, 0xb0, 0x5, 0xa, 0x8, 0x78}, {0x8001, 0x1, 0x8, 0x0, 0x2691, 0x4}, {0x2, 0x98, 0x2, 0x4, 0x0, 0x10001}, {0x40, 0x3, 0x0, 0x9, 0x2, 0x986}, {0x6, 0xff, 0x8, 0xfffffffc, 0x80000001, 0x5}, {0x5, 0x0, 0x4, 0x1, 0x1, 0x2}, {0xfffffffa, 0x3ff, 0x9, 0x3, 0xc, 0x10001}, {0x4, 0xe159, 0x9, 0xf, 0x3, 0x1}, {0x1000, 0x8, 0xa7, 0xb, 0x5, 0x4}, {0xfff, 0x6, 0x0, 0x7fff, 0xffffffff, 0x2}, {0xa, 0x0, 0x4, 0x95a00, 0x2, 0x4}, {0x101, 0x1, 0x7, 0x3, 0x2, 0x6}, {0x0, 0x2af, 0x1, 0xa000, 0x4, 0x4}, {0x5, 0x7, 0x0, 0x1, 0x1, 0x5f8}, {0x81, 0x70, 0xfffffff4, 0x1, 0x9, 0xf}, {0xf, 0x86, 0x0, 0x9, 0x2, 0x1}, {0x9, 0x6, 0x7, 0xf79, 0xb, 0x6}, {0xfffffff7, 0x7fff, 0x4, 0xc, 0x9, 0x9}, {0x1, 0x4e, 0x8442, 0xf, 0x0, 0x5}, {0x5, 0xfffffff3, 0x4, 0x0, 0x4, 0xb4}, {0x0, 0x8, 0x40, 0x6, 0x0, 0x5}, {0x7, 0x32, 0x4f7e, 0x1, 0xa030, 0xb8}, {0xb, 0x3, 0x6, 0x0, 0x52fb, 0x7}, {0x7, 0x0, 0xc, 0x0, 0x9, 0x7fffffff}, {0x8, 0x5, 0x24, 0x6, 0x17bf, 0x10000}, {0x7, 0x2585, 0x10000, 0x6a, 0x5, 0xffff7fff}, {0x40, 0xd5, 0x5, 0x2, 0x8, 0xb}, {0x6, 0x10001, 0x3, 0xa999, 0x187, 0x5}, {0xffffffcd, 0x1ff, 0x6, 0xa, 0x101, 0x8001}, {0x1, 0xe, 0x3, 0x36, 0x0, 0xd5e9}, {0xd, 0xfffffff7, 0x8, 0x200, 0x7f, 0x4}, {0x70f, 0x3, 0x6, 0x29e, 0xfffffff9, 0x53}, {0x7, 0x6, 0xf, 0x89a, 0xffffffff, 0x7}, {0x6, 0xd, 0x1, 0x3, 0x7fff, 0xc4}, {0x8, 0xc, 0x0, 0x5, 0x7, 0x9}, {0x0, 0x0, 0x1, 0x0, 0x5, 0x10}, {0x7, 0x9, 0x0, 0x5c21093a, 0x20, 0xa}, {0x23e, 0x5cd01a63, 0x2, 0x3, 0xffff, 0x9}, {0x0, 0x6, 0x7f, 0x8, 0x6, 0x2f}, {0x8, 0x8001, 0x8, 0xd, 0x74}, {0xdea, 0x100, 0xa, 0x81, 0x1, 0x7}, {0x9, 0x9, 0x4, 0x3, 0x2, 0x2a9a550c}, {0x1, 0x0, 0x8, 0x4, 0x8, 0x4}, {0x4, 0x10, 0x4, 0x4, 0x1ff, 0x9}, {0x35, 0x7fffffff, 0x0, 0x46d7, 0x7fff, 0x3}, {0x10001, 0x8, 0x892, 0xc, 0xffffff01}, {0x4, 0x5, 0xf, 0x2, 0x1fcc, 0x6}, {0x5, 0x3, 0x5, 0x8, 0x80000000, 0x4}, {0x3, 0x9, 0x0, 0x1000, 0x147, 0x40}, {0x1, 0x0, 0xf, 0x0, 0x0, 0x7}, {0xffff, 0x1c, 0x0, 0x4, 0xf, 0x1000}, {0x2, 0x7, 0x7, 0x41ae, 0x9, 0x3}, {0xffffff81, 0x2, 0x7, 0x2, 0x2800, 0x8}, {0x0, 0x3, 0x7, 0x2, 0x7, 0x7}, {0x1, 0x6, 0x1, 0xc, 0xc2}, {0x3, 0x4, 0xa06e, 0x4, 0x7fff, 0x9}, {0x0, 0x4e, 0x123, 0x2495, 0x4, 0x1}, {0xaee, 0x7, 0x4, 0x7fffffff, 0x0, 0x3}, {0xf, 0x2, 0x6, 0x558, 0x8cd0, 0x10001}, {0x2, 0x8, 0x35c8, 0x5, 0x4, 0x1}, {0x279ab9a7, 0x2, 0x7, 0x0, 0x5, 0x2}, {0x3, 0x6, 0x3, 0x7, 0xd, 0x7f}, {0xfffffffd, 0xe63f, 0xb, 0x3, 0x94, 0xf}, {0xfff, 0x6, 0x8000, 0xb6d1, 0x7, 0x7}, {0x5, 0x9, 0x0, 0x6, 0x9, 0x7}, {0x8, 0x1, 0x8, 0x3ff, 0x98b, 0x7}, {0x1, 0x5, 0x4, 0x93c3, 0x4, 0x3}, {0xffffffe7, 0x3, 0x81, 0x1000, 0x1, 0x1}, {0x0, 0xc, 0xfffff5cb, 0x80000000, 0x4, 0x6}, {0x7246eefe, 0x7, 0xe2, 0x1, 0x1, 0x800}, {0x7ff, 0x5, 0x9, 0x9, 0x2, 0x1}, {0x1da, 0x7, 0x6d, 0x80000000, 0x2, 0x2eaf}, {0x6, 0x7fffffff, 0x85a, 0xfffffff4, 0x3, 0xa}, {0x10, 0x1, 0x1f65fece, 0x1, 0x1, 0x8bbd}, {0x9, 0xc, 0x200, 0x6, 0x0, 0xffff}, {0x84, 0x3, 0x400, 0x8001, 0x7, 0x1}, {0x2, 0x7, 0x800, 0x4, 0x93, 0x7}, {0x6, 0xffff0001, 0xfffffffd, 0x8, 0xfffffffb, 0x8}, {0x100, 0x8, 0xc82, 0x7, 0x21, 0x1}, {0xcc, 0x401, 0x3, 0x0, 0xf8bc, 0x6ef}], [{0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x2, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x51ec641540684689}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1, 0x643e2998d3ea2f95}, {0x4}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x839a91d8ae26bb9d}, {0x4}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x2}, {0x1, 0x1}, {}, {0x7}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x6}, {0x0, 0x1}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x9, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xd7, 0x7, 0x4, 0x2, 0xc}, 0x8, 0x5}, [{0x4, 0xa, 0x8, 0xa16, 0xd62, 0x5}, {0x2, 0x4, 0x5, 0x6, 0x0, 0x80000000}, {0x5, 0x3, 0x8, 0x8, 0x4, 0x5}, {0x7fffffff, 0xba, 0x400, 0x80000000, 0x80000000, 0x384bd454}, {0x0, 0x7, 0x8, 0x8c1, 0x0, 0x821}, {0xf4, 0x0, 0x226, 0x3, 0x401, 0xb3}, {0x5, 0x6, 0x2, 0x5, 0x7, 0x6}, {0x3, 0x8, 0xde, 0x3, 0x397bcf02, 0x800}, {0xc000, 0x0, 0x9, 0x401, 0x100, 0x9}, {0x8, 0xc, 0x8, 0x5, 0xf35c, 0x8da}, {0x7fff, 0x9, 0x1, 0x7, 0x1, 0x200}, {0xfff, 0x9, 0x0, 0x2, 0xd, 0x9}, {0xfffffff4, 0xb, 0x80000001, 0x3, 0x5, 0x5}, {0xf3, 0xe, 0x6, 0x4f000, 0x6, 0xfffffffc}, {0x8, 0x4, 0x0, 0xa, 0x34, 0x3}, {0x3, 0x8, 0xfffffffa, 0xa1d, 0x100, 0x4}, {0x3618, 0x7f, 0x2, 0x0, 0x3, 0x7}, {0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, {0x1, 0x73b8, 0x1, 0x3, 0x3, 0x6}, {0x2, 0x5, 0xfff, 0x426abae8, 0x0, 0x101}, {0x7, 0xc, 0x16a5, 0x1000, 0x0, 0x4}, {0x4, 0x1, 0x9, 0x4, 0x80000001, 0x800}, {0x2, 0x8000, 0xffff, 0x953, 0x349e}, {0x7, 0x468f, 0xa, 0x200, 0x7ff, 0x1}, {0x3e, 0x81a1, 0x59f, 0x0, 0x8, 0x118}, {0x6, 0x4, 0x8, 0x0, 0x10001, 0x3}, {0x505, 0xff200000, 0x10001, 0x0, 0x3, 0x33f3d531}, {0x2, 0x8, 0x49de, 0x4, 0x4, 0x9}, {0x40, 0xe, 0x0, 0x5, 0x3, 0xe}, {0x3, 0x200, 0x364, 0x8, 0x8001}, {0x0, 0xa, 0x7fff, 0xfffffff3, 0xb, 0x1}, {0x4, 0x5, 0x9, 0x0, 0x6}, {0xfffffff8, 0x4, 0x5, 0x7, 0x6, 0x9}, {0x516, 0xeac, 0x10001, 0x7fff, 0x1000, 0x2}, {0x8, 0xffffe000, 0x1, 0x5, 0x4, 0x7ff}, {0x7f, 0x138e, 0x0, 0x9, 0x620, 0x3ff}, {0x6, 0x2, 0x3, 0x879, 0x1, 0x4}, {0x3, 0x85, 0x8, 0x7, 0x0, 0x1}, {0x10000, 0x80000001, 0x10001, 0x7, 0x3, 0x5}, {0x5, 0x800, 0x5, 0x1, 0x10000, 0x8}, {0x72, 0x4, 0x0, 0x3, 0x7, 0xa05}, {0x0, 0x80000000, 0x6, 0x6a, 0xfffffffa, 0xfffff11d}, {0x709587d4, 0x6, 0xfffffffd, 0x24b, 0x4000000, 0x7}, {0x8, 0x5, 0x1, 0x4, 0x800, 0x8}, {0x6, 0xd, 0x1, 0x9, 0x6, 0x25f}, {0x1, 0xfffffffa, 0x4, 0x0, 0xa6a}, {0x8, 0x3, 0x7, 0x7ff, 0x9a, 0x4}, {0x3, 0xdfbc, 0x8f4a, 0x0, 0x8, 0x8f}, {0x2, 0x4f, 0x2, 0x1, 0x7, 0x6}, {0x9, 0xf255, 0x5, 0x5, 0x0, 0x100}, {0x6, 0x9, 0x3, 0x3, 0x1, 0xfff}, {0x0, 0xd, 0xfffffff9, 0x1, 0x1, 0x401}, {0x81, 0x200, 0x7fff, 0x1, 0x7, 0x4}, {0x8dff, 0x1, 0x9446, 0x6, 0xfffffffb, 0x7}, {0xd0, 0x800, 0xc1, 0x6, 0xe62, 0x4}, {0x101, 0x39cd, 0x2cba, 0x3, 0x400, 0xcd99}, {0x8000, 0x3, 0x2, 0x8, 0x6, 0x2}, {0xc, 0x8, 0x100, 0x60, 0x7, 0x2}, {0xb72, 0x28, 0x3, 0x3, 0x8, 0x800}, {0x100, 0x33, 0x6, 0x6, 0x40, 0x2}, {0x8, 0x8, 0x8, 0x72, 0x7fff, 0xffff}, {0x6, 0x1, 0x6, 0x9, 0xcf9, 0x1}, {0xfffffffd, 0x7fffffff, 0x3, 0x4, 0x80, 0x8001}, {0x8, 0x80000001, 0x575b, 0x0, 0xe9, 0x7fff}, {0x9af0, 0x1, 0x0, 0x6, 0x1000, 0x6eb}, {0x10001, 0x10000, 0x5, 0x3, 0xc, 0x1}, {0x4c, 0x4, 0x4, 0x0, 0x0, 0xb436}, {0xcf0, 0x7fffffff, 0x9, 0x4, 0xfffffffe, 0x8}, {0x7f, 0x9, 0xc8, 0x5, 0x200, 0x101}, {0x1, 0x1, 0x80ad, 0x7f, 0x1, 0xe7fe}, {0x2, 0x7bf, 0xfffffffb, 0x3, 0x261, 0x7}, {0x8, 0xfffffffa, 0x0, 0x7, 0xf, 0x101}, {0x2, 0x1, 0x8, 0x400, 0x1, 0x8}, {0x9, 0x1, 0x6, 0x5, 0x2, 0x7}, {0x3, 0x3ff, 0x403f, 0x7fd, 0x0, 0x2b041069}, {0x253, 0x3, 0xf, 0x7, 0x5, 0x7}, {0x1fcd, 0x3, 0x81, 0x4, 0x4, 0xae35}, {0x7, 0x14, 0x10000, 0x3, 0x7, 0x800000}, {0x91b4, 0x74, 0x7, 0x7, 0x7, 0x80000001}, {0x8, 0x9, 0xff, 0x7f, 0xffffd0ef, 0x7}, {0xfffffffe, 0xfffffffd, 0xca, 0x80, 0x100, 0x8}, {0x10000, 0x2, 0x1, 0xf1b, 0xffffffff, 0x80}, {0xb, 0x8, 0xbad, 0x9, 0x9, 0x5}, {0x1, 0x401, 0x6, 0x1, 0x2, 0x1}, {0x3ff, 0x0, 0x80000001, 0x80000000, 0x6, 0x1}, {0x80000001, 0xff, 0x10, 0x5b0, 0x6, 0x8000}, {0xb8, 0x3c98, 0x1000, 0x5, 0xf, 0x3c3}, {0x6, 0x9, 0x5, 0x9, 0x190, 0xfffffffb}, {0x4, 0x6, 0x0, 0x2, 0x7, 0xff}, {0xd, 0x1, 0xfffffff2, 0x10, 0x7, 0x6}, {0xfffffff9, 0x1, 0x6473, 0x0, 0x2, 0x29cd}, {0x9, 0x5, 0x31b, 0xffff, 0x7, 0x5d6f}, {0x5, 0xcc77, 0x20000, 0xf3, 0x8, 0x8000}, {0x8, 0x2, 0x2, 0x5, 0xd9c, 0x8}, {0x4, 0x6, 0x5, 0x8, 0xffffffff, 0xb1}, {0x400, 0xffff5a5b, 0xa1, 0xffff, 0xfffff801, 0x4}, {0x4, 0x7, 0xfffff001, 0x4040, 0xf02f, 0x100}, {0x6, 0x8, 0x0, 0xe, 0x1, 0x24a6}, {0x3, 0x800, 0x8, 0x0, 0x3893, 0x6}, {0x8, 0x7, 0x9, 0xfffffff2, 0x3, 0xffffff00}, {0x7, 0x10001, 0x7, 0x6, 0xf43e, 0x10}, {0x200, 0x5, 0x4d228d22, 0xfffffffd, 0x80000001, 0x1}, {0xffffffff, 0x80000000, 0x2, 0x3, 0x101, 0x5}, {0xd, 0x2, 0x6, 0x4, 0x4ec, 0x3}, {0x7, 0x80000001, 0x5, 0x4, 0x10, 0x8}, {0x1, 0x3, 0x10000, 0x5, 0x1, 0x3}, {0x5, 0x5, 0xa217, 0x9, 0x7, 0x7fff}, {0x1, 0x9, 0x1, 0x5000, 0x1, 0x9}, {0x7, 0x2, 0x232, 0x1, 0x3, 0x6}, {0xfff, 0x8000, 0x5, 0x8001, 0x3, 0x633}, {0x6, 0x4, 0xfffffffc, 0x7, 0x2680, 0x200}, {0x1, 0x6, 0x800, 0x0, 0x7ff, 0x4}, {0x0, 0x1, 0x101, 0x1, 0xcc000000, 0x4}, {0x4, 0x0, 0x2, 0x8, 0x2, 0x5}, {0xb, 0x11, 0x6, 0xd, 0x100, 0x8}, {0x80000000, 0x6, 0x7, 0x80000001, 0x2, 0x6}, {0x9, 0x9, 0x4, 0xffffffff, 0x7, 0x6}, {0xc02, 0xfffffffb, 0x0, 0x8, 0xb697, 0x1}, {0xfffffffb, 0x80, 0x9, 0x1000, 0x400, 0x8ec6}, {0x9, 0x3, 0x5, 0x2, 0x2, 0x3}, {0x9, 0x0, 0x5, 0x3, 0x5, 0x1}, {0x6619, 0x80000000, 0x8, 0x9, 0x6}, {0x6b9, 0x461c, 0x8, 0x4000000, 0x9, 0x4e}, {0x9, 0xffffffff, 0xd76, 0x4d72, 0x6e24, 0x6}, {0x8, 0x1, 0x0, 0xfffffffb, 0x0, 0x213}, {0x8, 0x10, 0x6, 0x61, 0x0, 0x2}, {0x3, 0x1, 0x4, 0xb44, 0x1, 0x49a3}, {0x0, 0x3ff, 0x7, 0x8, 0x9, 0x3d}], [{}, {0x4, 0x1}, {0x3}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0xca2cdfa52a4ce26f, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x25afef66a4afd417}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x9203bd9361a1c9f2}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x3}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4}, {0x1}, {0x4, 0xf84e270b888a995f}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x4}, {0x4}, {0x4}, {0x4}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x2}, {0x5}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x959c5473d87cb363}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2aa8}, 0x1, 0x0, 0x0, 0x6400c804}, 0x4091) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4.169164307s ago: executing program 1 (id=147): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="f9ffffff00000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r2, 0x0, 0x1}, 0xffffffffffffff86) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) ptrace(0x10, r0) r3 = socket(0x2, 0x80805, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000007239f886002020000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) getgid() bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000280)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYRES16=r3], 0x58}, 0x1, 0x7}, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r9) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) ptrace(0x8, r0) waitid(0x1, r0, 0x0, 0x8, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e20, 0x8693, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) syz_io_uring_setup(0x8072ec, &(0x7f0000000000)={0x0, 0xb7b3, 0x80, 0x0, 0x19c}, &(0x7f0000000080), &(0x7f0000000140)) 4.091800568s ago: executing program 3 (id=148): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000"], 0x34}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r8, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='syzkaller\x00', &(0x7f00000000c0)="6769f4f8c91f697778c771673747ab24c03b671409b6f690da59ccf4b4ce0a977691431dc20cb0d415a26a15d3bb837dae78ae6de8ab66530096c2abd09d6d77e03029908f3fa3107dadfd66d8031e4121166c48339036dfa9e1710cfdc342787790f3d110151549c0b4c68ac69b3d4575dfecfd55d1175b6e1d88a6b78ebec64dc8e52686662f8a2c72dd99c4efed2e1866a78400640c6a39983ea5c07fc0f536c1452e29847dfb5efd34928b7e7f81494a123526036894fae58120bcce0c2672c3234e4f0a01666d64a37b321132", 0xcf) r11 = getpgrp(0x0) kcmp(r1, r11, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x3ff, 0x20000008, 0x6, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r15 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r15, r15, 0x0, 0xb) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=@base={0x16, 0x0, 0x0, 0x2000, 0xc00, 0xffffffffffffffff, 0x0, '\x00', r14, r15, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 4.038272178s ago: executing program 2 (id=149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x55, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) socket(0x2a, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020705000200000029bd70faffdbdf"], 0x10}}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000600)=ANY=[@ANYRES16=r2], &(0x7f0000000680)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='jbd2_checkpoint\x00', r4}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000004000000000000000000010000000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='xen_mmu_set_p4d\x00', r8, 0x0, 0x1fffffffffffffff}, 0x58) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000b40)={'\x00', 0xf, 0x5, 0xc, 0xfffffffffffffffd, 0x10000}) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x400200, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r6, r4, 0x4, r10}, 0x10) setsockopt$inet_group_source_req(r10, 0x0, 0x2b, &(0x7f0000000440)={0x6, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) r11 = openat(r10, &(0x7f0000000040)='./file2\x00', 0x208040, 0x0) pwritev2(r11, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) getsockopt$inet_mreqsrc(r11, 0x0, 0x28, &(0x7f0000000200)={@broadcast, @private, @remote}, &(0x7f0000000240)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6, 0x5, {0x80, 0x1}}]}, 0x40}}, 0xfa95d6e954c2bd4c) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) bind$packet(r13, &(0x7f0000000000)={0x11, 0x3, r14, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 3.802363562s ago: executing program 0 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x9, 0x0, 0x0, 0x0, 0x8, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x4c58, 0x8000000, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x57d260781ced7755, &(0x7f00000001c0)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000018090000", @ANYRESHEX=r1, @ANYRES64=r2], 0x0, 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r4, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = eventfd2(0x0, 0x0) read$eventfd(r7, &(0x7f0000000040), 0x8) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=r3, @ANYRES8=r8], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) fcntl$setstatus(r8, 0x4, 0x800) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840) write$P9_RVERSION(r9, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESHEX=0x0], 0x15) pipe2$9p(&(0x7f00000002c0), 0x0) 3.724617033s ago: executing program 3 (id=151): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000db4dbabe3cd8d14ab34afaf13ac59f9b4cb45c6e76a86e00a017dba8b2f6372894a5747c88dd05b003366f51d27f40cde074278ed4e571bf779bf27caa81d71973a5964e29b5af15f3c3b52739ad22241569e4acb332aee441f3fe9a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002d00)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES64=r1], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x20, 0xc, &(0x7f0000001b00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r2}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0xc0ed0040, &(0x7f0000001a40)={[{@jqfmt_vfsv1}, {@nodioread_nolock}, {@data_ordered}, {@noload}, {@resgid}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000e00)=ANY=[@ANYBLOB="7f454c46080505fe080000000000000002000600080000008f0000000000000040000000000000002b0300000000000004000000ff0f3800020007007f00fcff00000000000000000300000000000000ffffffffffffff7f0400000000000000ff010000000000000000000000000000ee0f00000000000051e57464060000001910000000000000000000007000000007000000000000000700000000000000b90600000000000002000000000000000e61000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/2226], 0x8b2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000017c0)='kfree\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x20, 0xb, &(0x7f0000002d00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r5 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000ff5f030006000000d95af0ffffffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000861000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x4, 0x3}, 0x10, r7, r4, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) linkat(r5, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1400) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000030000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) set_mempolicy(0x8006, 0x0, 0x5) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x85, 0x1000004f}, 0x2c) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440), 0x1, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x2, &(0x7f0000000740)={0x0, 0x60}) 2.830243097s ago: executing program 0 (id=156): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = dup2(r0, r0) fdatasync(r1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9, 0x5, 0x3, 0xb3}, {0x1, 0x17, 0x6, 0x6}]}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x0, 0x2003) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x9, 0x3, [0x1, 0x1, 0x7]}, &(0x7f0000000140)=0xe) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r5, 0x936}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r6) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x110, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r7, &(0x7f0000000380)=@qipcrtr={0x2a, 0xffffffff, 0x7fff}, 0x80) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000400)={0x41, 0x0, 0x1}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r1, 0x20, &(0x7f0000000700)={&(0x7f00000005c0)=""/100, 0x64, 0x0, &(0x7f0000000640)=""/162, 0xa2}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1a, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x0, 0x0, 0x6, 0x1, 0xfffffffffffffff4, 0xf}, @call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f00000004c0)='GPL\x00', 0xffffff9e, 0x41, &(0x7f0000000500)=""/65, 0x0, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0xe, 0xf, 0x2}, 0x10, r9, r1, 0x5, &(0x7f0000000840), &(0x7f0000000880)=[{0x3, 0x4, 0x10, 0x6}, {0x1, 0x2, 0xf, 0x7}, {0x1, 0x4, 0x8, 0xb}, {0x1, 0x5, 0xd, 0xc}, {0x5, 0x1, 0x9, 0x2}], 0x10, 0x4, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'tunl0\x00', 0x0, 0x700, 0x1, 0x0, 0x97b8, {{0x11, 0x4, 0x0, 0x2c, 0x44, 0x67, 0x0, 0x22, 0x29, 0x0, @private=0xa010102, @empty, {[@end, @cipso={0x86, 0x2f, 0x0, [{0x2, 0x3, 'T'}, {0x7, 0xc, "37b59886d29da88b3bac"}, {0x0, 0xa, "46f24c815bc956fb"}, {0x5, 0xd, "efc29a40f4d9ee6fc746fa"}, {0x5, 0x3, ']'}]}]}}}}}) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r11, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x10, 0x3fb, 0x20, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8085}, 0x0) connect$inet6(r1, &(0x7f0000000c40)={0xa, 0x4e21, 0x3, @mcast1, 0x20}, 0x1c) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000c80)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='f2fs_gc_end\x00', r10, 0x0, 0x7}, 0x18) 2.622259711s ago: executing program 1 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14, 0x0) sendmmsg$sock(r2, &(0x7f0000000e00)=[{{&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2}, 0x0, 0x2, 0x1}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)="ccc6b89250a3950761c7ed889d4d3982f712c7", 0x13}, {&(0x7f00000009c0)="5203308c3622dd99262e2d7930f79aa89a30daa4f911ae4e675814b78991b55adf53c55f1e081958114aa8e0e61b634146abbe2ef3ddc2d40e0c43c944ca9f795f0c40caec42a72f4cdf329d80278e5cedb47290843493713f3e00c159a3a1baa0aa5356329b31497f6fdc01eb1919dd6af5d2014561f990f94ebb62ba6d8f08", 0x80}], 0x2, &(0x7f0000000ac0)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x8b2}}, @mark={{0x14, 0x1, 0x24, 0x7a79}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}, {{&(0x7f0000000b40)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="8e2c13f5b3049f4e55a12cd21399ad26d5c33e760e2a9e1bcd87073fc916f06e934b490dc63e4ad64051752c89af8a7e5af5b6ab36edd32f8a60aad69b044c0a8ff7c1db5f0e905e0555b8489b962b6b0b874da802dac6198f76b0f2051d6a667ebc1de7bb8f119271c320f950888263532eb2148d98", 0x76}], 0x1, &(0x7f0000000d40)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r6}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb9}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}, 0x0) io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000073113d00000000008510000002000000000000000000000e95000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) migrate_pages(r2, 0x7, &(0x7f0000000280)=0x3ff, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x1010b, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000000007010300000000000000000000000900010073797a300000000002fe24b462abd86c944d4b890d19087e5ea7491e6ebba4434be6deceaa134269929ea390fd6b44fd90b2bdcc2b35384a242c43bbc57bb3c1546c293586183c5bd3e6a972771ac1de4018f59b41ce3abab6e5aaf000be5f3b2e0d33b8d0282fa2f8d13611941d172f395199747919a8"], 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000030701"], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r6, 0x89f2, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7ff, 0x0, "5dee00ffffff004000"}) lchown(&(0x7f00000006c0)='./file0\x00', r1, 0xee01) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x46, 0x75}, {0x1, 0x4}], r1}, 0x18, 0x1) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000700)={0xfff, 0x8}) unshare(0x22020400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.852271662s ago: executing program 0 (id=159): socket$pppoe(0x18, 0x1, 0x0) mq_open(&(0x7f0000000080)=',\x00', 0x40, 0x20, &(0x7f0000000200)={0x4, 0x6, 0x8, 0x5}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000140)={[{@abort}, {@nodioread_nolock}, {@block_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}]}, 0x2, 0x564, &(0x7f0000000700)="$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") openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x38}, {0x0}], 0x2}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f00000006c0)=ANY=[], 0x841, 0x1) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xf8}}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200042, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x5}}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='smbus_result\x00', r8, 0x0, 0x10}, 0x18) getcwd(0x0, 0x0) 1.741975434s ago: executing program 3 (id=160): quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000180)=@nullb, 0x0, &(0x7f00000001c0)={0x2bd, 0x5, 0x3ff, 0x0, 0xf, 0x1, 0x4, 0x9, 0x25}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x600, 0xfffffffd, 0x25dfdbfd, {{@in=@multicast2, @in=@local, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {@in=@broadcast, 0xfffffffd, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0xfffffffffffffffd, 0x0, 0xbdf}, {0x7fffffff, 0x3, 0xb}, 0x70bd27, 0x3ffc, 0xa, 0x0, 0x0, 0x44}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000002ec0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3, 0x4000}, 0x80, 0x0}, 0x20000804) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x14) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) setitimer(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) recvfrom$l2tp6(r5, 0x0, 0x0, 0x40008063, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.472483098s ago: executing program 1 (id=161): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="540100001000130726bd7000000000007f000001000000000000000000000000fe8000000000000000000000000000aa4e22000000003fff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000000000003200000020010000000000000000000000000002000000000000020000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000fcffffff000000000a0004422f0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/268], 0x154}, 0x1, 0x0, 0x0, 0x4054}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0x70) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x8, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$cgroup(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0xa, &(0x7f0000000340)={[{@clone_children}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004884}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 1.227316691s ago: executing program 2 (id=162): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}], 0x18}}], 0x2, 0x20000050) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r2, 0x0, 0x80001}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r8, 0x0, 0x800}, 0x18) sendmsg$key(r4, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={0x0, 0x18}}, 0x40) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x3b, 0x9, 0xfe, 0x0, 0x0, 0xa, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000580), 0xa}, 0x1069b0, 0x1, 0x3, 0x5, 0x0, 0x57d8, 0xfffb, 0x0, 0x0, 0x0, 0x20000000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x2b7}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x2}, 0x1c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r12 = fcntl$dupfd(r6, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x60, 0x0, 0x20, 0x0, 0x7994}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x154, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@private1, {0x0, 0x3, 0x8, 0x9, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x61, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa8, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207"}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) listen(r1, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mlockall(0x5) 1.194641222s ago: executing program 0 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, 0x0, 0x0, 0x2, 0x1}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x79) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000510850000001700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f0000000800)="b80000050000000073c430f8a2e6", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r8}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast1}, 'team_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) getsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x100}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0x6, 0x6, 0x0, 0x9, 0x7ff, 0x3}}, {0xa, 0x2, [0x1, 0x676, 0x6]}}, {{0x1c, 0x1, {0x0, 0x2, 0x9, 0x5, 0x2, 0x7, 0xfff, 0x3}}, {0xa, 0x2, [0x0, 0xc, 0x6]}}, {{0x1c, 0x1, {0xa, 0x8, 0x5, 0x7, 0x1, 0x1}}, {0x4}}]}]}, 0xb8}}, 0x0) 984.807185ms ago: executing program 0 (id=165): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000480)={'veth0\x00', {0x2, 0x4e21, @local}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x1800, @private=0xfffffffc}}) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newae={0x48, 0x1e, 0x301, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, 0x4d4, 0x2, 0x2b}, @in6=@mcast2, 0x3, 0x3500}, [@etimer_thresh={0x8, 0xc, 0x10001}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r7}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f00000002c0)=""/19, 0x13, 0x0, &(0x7f0000000500)=""/231, 0xe7}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r1, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) ioctl$TCXONC(r10, 0x540a, 0x0) sendfile(r10, r11, 0x0, 0x20000023896) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306010100000000000000000100000005000100fa"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) socket(0x10, 0x80002, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x42440, 0x0) 957.847446ms ago: executing program 4 (id=166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0xffffffffffffffff, 0x4381) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a32894bd8c60900010073797a30"], 0xc0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf8100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) preadv2(r10, &(0x7f0000000340)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x10) 670.17754ms ago: executing program 4 (id=167): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x55c1, 0x800, 0x0, 0x354}) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x40d00, 0x20) sendfile(r3, r4, 0x0, 0x8000fffffffe) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x200, 0x6, 0x9f, 0xa59}, 0x10) listen(r5, 0x0) r6 = socket(0x1e, 0x805, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000bc0)=""/41) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r5, 0x0, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r9, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_vlan\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1b17, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x72}]}, &(0x7f0000000c00)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000001d40)=""/4096, 0x41000, 0x8, '\x00', r10, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x2a9c, 0x6}, 0x10, 0xffffffffffffffff, r4, 0x4, &(0x7f0000000400)=[r4], &(0x7f0000000440)=[{0x0, 0x4, 0x3, 0x8}, {0x2, 0x1, 0xd, 0xc}, {0x3, 0x2, 0x4, 0xb}, {0x1, 0x3, 0xe, 0x6}], 0x10, 0x3ff, @void, @value}, 0x94) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") syz_emit_ethernet(0x9e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60f81fcb00603a00c7aa72c2000000000000000000000000ff0200000000000000000000000000010400907800000000604aa1d300000000fc01000000000000000000000000000000000000000000000000ffff7f0000012b00000000000000000304010000000000000000000000000000ffffac1414bb00a10400"/158], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{}, &(0x7f0000000780), &(0x7f0000001cc0)}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 526.174452ms ago: executing program 1 (id=168): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', r2, 0xee01) setxattr$security_capability(0x0, 0x0, &(0x7f0000000200)=@v3={0x3000000, [{0x46, 0x75}, {0x1, 0x4}], r2}, 0x18, 0x1) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x538a, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000380), &(0x7f0000000200)=r4}, 0x20) ioprio_get$uid(0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 0s ago: executing program 2 (id=169): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 p4 [ 33.008081][ T3489] loop1: p4 size 8192 extends beyond EOD, truncated [ 33.071313][ T3498] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 33.365674][ T3490] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.476860][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.138634][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 34.162737][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 34.217223][ T3486] infiniband syz!: set active [ 34.221985][ T3486] infiniband syz!: added team_slave_0 [ 34.268557][ T3510] loop3: detected capacity change from 0 to 1024 [ 34.304010][ T3486] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 34.304275][ T3486] infiniband syz!: Couldn't open port 1 [ 34.323984][ T3510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.396649][ T3510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.417341][ T3486] RDS/IB: syz!: added [ 34.443088][ T3486] smc: adding ib device syz! with port count 1 [ 34.459078][ T3512] loop1: detected capacity change from 0 to 8192 [ 34.470343][ T3486] smc: ib device syz! port 1 has pnetid [ 34.488190][ T3512] ======================================================= [ 34.488190][ T3512] WARNING: The mand mount option has been deprecated and [ 34.488190][ T3512] and is ignored by this kernel. Remove the mand [ 34.488190][ T3512] option from the mount to silence this warning. [ 34.488190][ T3512] ======================================================= [ 34.682375][ T3510] syz.3.4 (3510) used greatest stack depth: 10752 bytes left [ 34.713620][ T3512] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.735445][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.751504][ T3498] syz.2.3 (3498) used greatest stack depth: 10112 bytes left [ 34.981561][ T3524] loop3: detected capacity change from 0 to 1024 [ 34.990643][ T3524] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 35.002298][ T3524] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 35.010753][ T3524] System zones: 0-1, 3-36 [ 35.020913][ T3524] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.031997][ T3525] vlan2: entered allmulticast mode [ 35.038830][ T3524] EXT4-fs (loop3): 1 orphan inode deleted [ 35.061415][ T3524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.185534][ T3521] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8'. [ 35.257907][ T3528] netlink: '+}[@': attribute type 4 has an invalid length. [ 35.289436][ T3521] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8'. [ 35.310697][ T3537] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 35.356533][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 35.375616][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 35.483579][ T3542] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 35.494465][ T3521] batadv1: entered allmulticast mode [ 35.521851][ T3541] netlink: 'syz.4.10': attribute type 1 has an invalid length. [ 35.529595][ T3541] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10'. [ 36.450113][ T3567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'. [ 36.482623][ T3556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 36.536599][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 36.716461][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.726278][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 36.894532][ T3578] loop1: detected capacity change from 0 to 512 [ 36.915575][ T3578] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.928904][ T3578] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.008980][ T3578] capability: warning: `syz.1.20' uses deprecated v2 capabilities in a way that may be insecure [ 37.009926][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.038772][ T3583] loop3: detected capacity change from 0 to 1024 [ 37.089845][ T3578] Cannot find del_set index 3 as target [ 37.090089][ T3368] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.111513][ T3587] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 37.120162][ T3583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.145580][ T3583] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.196056][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.238268][ T3596] sch_fq: defrate 4294967295 ignored. [ 37.261749][ T3597] loop2: detected capacity change from 0 to 1024 [ 37.269963][ T3597] EXT4-fs: Ignoring removed bh option [ 37.284321][ T3597] EXT4-fs: inline encryption not supported [ 37.292440][ T3597] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.303932][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.306788][ T3597] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 37.322322][ T3599] Zero length message leads to an empty skb [ 37.345907][ T3597] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.26: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.365552][ T3606] loop3: detected capacity change from 0 to 512 [ 37.374319][ T3606] netlink: 'syz.3.28': attribute type 4 has an invalid length. [ 37.376266][ T3597] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.26: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.422184][ T3597] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.26: Failed to acquire dquot type 0 [ 37.433935][ T3597] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 37.445003][ T3597] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.26: mark_inode_dirty error [ 37.457227][ T3609] netlink: 'syz.3.28': attribute type 4 has an invalid length. [ 37.471273][ T3597] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 37.484525][ T3597] EXT4-fs (loop2): 1 orphan inode deleted [ 37.490781][ T3597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.506487][ T51] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.566390][ T51] __quota_error: 378 callbacks suppressed [ 37.566410][ T51] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 37.580729][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 37.658764][ T3611] syz_tun: entered allmulticast mode [ 37.818044][ T29] audit: type=1400 audit(1749180613.446:467): avc: denied { mount } for pid=3607 comm="syz.4.29" name="/" dev="rpc_pipefs" ino=4693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 37.984190][ T29] audit: type=1326 audit(1749180613.624:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 38.011161][ T29] audit: type=1326 audit(1749180613.652:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 38.034833][ T29] audit: type=1326 audit(1749180613.652:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 38.038609][ T3614] loop0: detected capacity change from 0 to 2048 [ 38.058203][ T29] audit: type=1326 audit(1749180613.652:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 38.092441][ T29] audit: type=1326 audit(1749180613.652:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 38.115905][ T29] audit: type=1326 audit(1749180613.652:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 38.125687][ T3595] syz_tun: left allmulticast mode [ 38.139303][ T29] audit: type=1326 audit(1749180613.652:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 38.168783][ T29] audit: type=1326 audit(1749180613.652:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 38.252105][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.270177][ T3319] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 38.283423][ T3617] loop1: detected capacity change from 0 to 8192 [ 38.291578][ T3319] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 38.301199][ T3319] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 38.433601][ T3617] loop1: p1 p3 p4 [ 38.453927][ T3617] loop1: p1 size 8390912 extends beyond EOD, truncated [ 38.480399][ T3617] loop1: p3 size 589824 extends beyond EOD, truncated [ 38.544949][ T3635] __nla_validate_parse: 2 callbacks suppressed [ 38.544970][ T3635] netlink: 9 bytes leftover after parsing attributes in process `syz.2.32'. [ 38.578944][ T3635] gretap0: entered promiscuous mode [ 38.598924][ T3635] netlink: 5 bytes leftover after parsing attributes in process `syz.2.32'. [ 38.629597][ T3635] 0猉功D: renamed from gretap0 [ 38.658640][ T3620] loop3: detected capacity change from 0 to 512 [ 38.678201][ T3620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 38.691455][ T3620] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.707782][ T3635] 0猉功D: left promiscuous mode [ 38.712867][ T3635] 0猉功D: entered allmulticast mode [ 38.748877][ T3635] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 38.792121][ T3649] unsupported nla_type 52263 [ 38.816589][ T3635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 38.822734][ T3514] udevd[3514]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 38.835726][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.847467][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.881667][ T3649] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.900886][ T3649] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 38.934495][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.248784][ T3667] lo speed is unknown, defaulting to 1000 [ 39.254639][ T3667] lo speed is unknown, defaulting to 1000 [ 39.261006][ T3667] lo speed is unknown, defaulting to 1000 [ 39.268577][ T3667] infiniband s厇0: RDMA CMA: cma_listen_on_dev, error -98 [ 39.333470][ T3667] lo speed is unknown, defaulting to 1000 [ 39.340085][ T3667] lo speed is unknown, defaulting to 1000 [ 39.346485][ T3667] lo speed is unknown, defaulting to 1000 [ 39.353002][ T3667] lo speed is unknown, defaulting to 1000 [ 39.359611][ T3667] lo speed is unknown, defaulting to 1000 [ 39.814798][ T3674] netlink: 14 bytes leftover after parsing attributes in process `syz.2.41'. [ 39.824372][ T3674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.41'. [ 40.089466][ T3691] loop0: detected capacity change from 0 to 512 [ 40.114181][ T3692] netlink: 'syz.1.45': attribute type 21 has an invalid length. [ 40.122167][ T3692] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.169280][ T3695] loop2: detected capacity change from 0 to 2048 [ 40.179027][ T3691] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 40.179176][ T3695] EXT4-fs: Ignoring removed bh option [ 40.196050][ T3695] EXT4-fs: Mount option(s) incompatible with ext2 [ 40.227705][ T3691] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.44: iget: bad i_size value: 12154757448730 [ 40.241625][ T3691] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.44: couldn't read orphan inode 13 (err -117) [ 40.254514][ T3691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.279169][ T3686] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 40.292525][ T3686] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 40.345533][ T3700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 40.354328][ T3700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 40.363168][ T3700] netlink: 'syz.2.46': attribute type 15 has an invalid length. [ 40.382561][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.417223][ T3702] netlink: 256 bytes leftover after parsing attributes in process `syz.0.47'. [ 40.433333][ T3700] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.558922][ T3702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'. [ 40.567738][ T3702] netlink: 2 bytes leftover after parsing attributes in process `syz.0.47'. [ 40.584279][ T3702] loop0: detected capacity change from 0 to 1024 [ 40.606926][ T3702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.619431][ T3702] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.634123][ T3702] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 3: comm syz.0.47: lblock 3 mapped to illegal pblock 3 (length 1) [ 40.650815][ T3702] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 40.663185][ T3702] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.663185][ T3702] [ 40.684468][ T3702] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 4: comm syz.0.47: lblock 4 mapped to illegal pblock 4 (length 12) [ 40.699253][ T3702] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 12 with error 117 [ 40.711961][ T3702] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.711961][ T3702] [ 40.766257][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.826990][ T3724] SELinux: failed to load policy [ 40.831039][ T3727] loop0: detected capacity change from 0 to 512 [ 40.907354][ T3727] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.927033][ T3727] EXT4-fs (loop0): mount failed [ 41.178906][ T3737] loop0: detected capacity change from 0 to 512 [ 41.217641][ T3737] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.239722][ T3737] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.262797][ T3741] loop4: detected capacity change from 0 to 512 [ 41.271174][ T3741] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.300558][ T3737] EXT4-fs (loop0): 1 truncate cleaned up [ 41.306723][ T3737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.462186][ T3741] EXT4-fs (loop4): 1 truncate cleaned up [ 41.468721][ T3741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.496578][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.689796][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.722179][ T3766] SELinux: Context 烥m1Lh饠H变Si赦K\: is not valid (left unmapped). [ 42.724181][ T3767] mmap: syz.4.57 (3767) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.756314][ T3767] loop4: detected capacity change from 0 to 1024 [ 42.767013][ T3767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.790136][ T3767] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.802299][ T3767] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e02c, mo2=0000] [ 42.814344][ T3767] System zones: 0-1, 3-12 [ 42.820357][ T3767] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.57: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.837022][ T3767] EXT4-fs (loop4): Remounting filesystem read-only [ 42.844534][ T3767] EXT4-fs (loop4): 1 orphan inode deleted [ 42.852612][ T3767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.866624][ T3767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.914007][ T29] kauditd_printk_skb: 1521 callbacks suppressed [ 42.914026][ T29] audit: type=1326 audit(1749180618.236:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f75767ce929 code=0x7ffc0000 [ 42.950785][ T29] audit: type=1326 audit(1749180618.236:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ced2058e7 code=0x7ffc0000 [ 42.974144][ T29] audit: type=1326 audit(1749180618.236:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ced1aab19 code=0x7ffc0000 [ 43.001154][ T29] audit: type=1326 audit(1749180618.236:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f8ced20e929 code=0x7ffc0000 [ 43.024788][ T29] audit: type=1326 audit(1749180618.236:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff004b258e7 code=0x7ffc0000 [ 43.049821][ T29] audit: type=1326 audit(1749180618.236:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff004acab19 code=0x7ffc0000 [ 43.073801][ T29] audit: type=1326 audit(1749180618.236:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.0.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 43.098056][ T29] audit: type=1326 audit(1749180618.236:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ced2058e7 code=0x7ffc0000 [ 43.121434][ T29] audit: type=1326 audit(1749180618.236:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ced1aab19 code=0x7ffc0000 [ 43.145321][ T29] audit: type=1326 audit(1749180618.236:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f8ced20e929 code=0x7ffc0000 [ 43.222094][ T3776] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 43.234573][ T3776] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 43.255386][ T3776] loop0: detected capacity change from 0 to 512 [ 43.264452][ T3776] EXT4-fs: dax option not supported [ 43.845160][ T3789] loop1: detected capacity change from 0 to 1024 [ 43.862009][ T3789] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 43.989320][ T3790] lo speed is unknown, defaulting to 1000 [ 44.185712][ T3786] loop2: detected capacity change from 0 to 512 [ 44.386467][ T3786] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.423882][ T3786] EXT4-fs (loop2): mount failed [ 44.812824][ T3803] lo speed is unknown, defaulting to 1000 [ 45.113102][ T3808] loop2: detected capacity change from 0 to 1024 [ 45.131186][ T3808] EXT4-fs: test_dummy_encryption option not supported [ 45.159017][ T3808] SELinux: syz.2.68 (3808) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.211862][ T3808] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.329289][ T3817] Illegal XDP return value 4294967274 on prog (id 84) dev syz_tun, expect packet loss! [ 45.470419][ T3825] __nla_validate_parse: 4 callbacks suppressed [ 45.470436][ T3825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.74'. [ 45.495390][ T3815] loop4: detected capacity change from 0 to 512 [ 45.530355][ T3815] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.69: corrupted in-inode xattr: invalid ea_ino [ 45.550526][ T3830] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3830 comm=syz.3.75 [ 45.601658][ T3832] netlink: 'syz.2.76': attribute type 4 has an invalid length. [ 45.609416][ T3832] netlink: 17 bytes leftover after parsing attributes in process `syz.2.76'. [ 45.713972][ T3833] lo speed is unknown, defaulting to 1000 [ 45.874699][ T3815] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.69: couldn't read orphan inode 15 (err -117) [ 45.900540][ T3815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.925528][ T3830] $H: renamed from bond0 (while UP) [ 45.935054][ T3830] $H: entered promiscuous mode [ 45.940414][ T3830] bond_slave_0: entered promiscuous mode [ 45.946252][ T3830] bond_slave_1: entered promiscuous mode [ 45.991270][ T3832] netlink: 56 bytes leftover after parsing attributes in process `syz.2.76'. [ 46.009887][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 46.049219][ T3837] loop2: detected capacity change from 0 to 1024 [ 46.065720][ T3830] loop3: detected capacity change from 0 to 2048 [ 46.073861][ T3837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.086108][ T3837] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.090612][ T3830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.118405][ T3837] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 3: comm syz.2.77: lblock 3 mapped to illegal pblock 3 (length 13) [ 46.138906][ T3837] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 46.152710][ T3830] EXT4-fs: Ignoring removed orlov option [ 46.153293][ T3837] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.153293][ T3837] [ 46.172063][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.181160][ T3830] EXT4-fs (loop3): can't enable nombcache during remount [ 46.189691][ T3843] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.77: lblock 3 mapped to illegal pblock 3 (length 1) [ 46.210792][ T3844] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 46.220900][ T3843] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.77: lblock 3 mapped to illegal pblock 3 (length 1) [ 46.265369][ T3843] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.77: lblock 3 mapped to illegal pblock 3 (length 1) [ 46.306683][ T3843] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.77: lblock 3 mapped to illegal pblock 3 (length 1) [ 46.321096][ T3836] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.77: lblock 3 mapped to illegal pblock 3 (length 1) [ 46.339516][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.420752][ T3836] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.77: lblock 3 mapped to illegal pblock 3 (length 1) [ 46.450459][ T3849] syzkaller0: entered promiscuous mode [ 46.456218][ T3849] syzkaller0: entered allmulticast mode [ 46.484302][ T3843] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.77: lblock 3 mapped to illegal pblock 3 (length 1) [ 46.515596][ T3843] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.77: lblock 3 mapped to illegal pblock 3 (length 1) [ 46.534087][ T3843] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #15: block 3: comm syz.2.77: lblock 3 mapped to illegal pblock 3 (length 1) [ 46.557104][ T1042] Process accounting resumed [ 46.565242][ T3846] loop4: detected capacity change from 0 to 1024 [ 46.573733][ T3846] EXT4-fs: Ignoring removed bh option [ 46.579944][ T3846] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.592850][ T3846] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.602206][ T3846] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.608766][ T3846] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #3: comm syz.4.78: iget: bad i_size value: 1407392063428608 [ 46.625880][ T3846] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.78: Bad quota inode: 3, type: 0 [ 46.642471][ T3846] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 46.657577][ T3846] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 46.658065][ T3861] veth3: entered promiscuous mode [ 46.666422][ T3846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.669440][ T3861] veth3: entered allmulticast mode [ 46.772814][ T3865] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 46.815963][ T3861] 9pnet: p9_errstr2errno: server reported unknown error 滰﨤觳 O!蓦L [ 46.873778][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.898712][ T3871] loop4: detected capacity change from 0 to 512 [ 46.915280][ T3871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.934763][ T3861] openvswitch: netlink: Message has 6 unknown bytes. [ 46.938040][ T3871] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.994340][ T3871] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1768647778) [ 47.004790][ T3871] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 47.029195][ T3879] loop3: detected capacity change from 0 to 512 [ 47.036361][ T3876] lo speed is unknown, defaulting to 1000 [ 47.052732][ T3879] EXT4-fs (loop3): 1 orphan inode deleted [ 47.073158][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 47.106385][ T3879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.120016][ T3879] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.131602][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.154618][ T3879] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.88: iget: bad i_size value: 360287970189639690 [ 47.216399][ T3885] IPv6: Can't replace route, no match found [ 47.259192][ T3887] netlink: 'syz.3.88': attribute type 4 has an invalid length. [ 47.274203][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 47.296534][ T3879] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.88: iget: bad i_size value: 360287970189639690 [ 47.331434][ T3879] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.367686][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.877730][ T3900] pimreg3: entered allmulticast mode [ 47.891972][ T3900] syz.0.93 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.910495][ T3909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 47.914994][ T3900] syz.0.93 uses obsolete (PF_INET,SOCK_PACKET) [ 47.937152][ T3899] pimreg3: left allmulticast mode [ 47.949927][ T3909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.92'. [ 47.959188][ T3909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.92'. [ 48.001008][ T3908] loop1: detected capacity change from 0 to 2048 [ 48.057342][ T3908] Alternate GPT is invalid, using primary GPT. [ 48.063917][ T3908] loop1: p1 p2 p3 [ 48.183737][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 48.196826][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.215812][ T3945] loop1: detected capacity change from 0 to 256 [ 48.307742][ T29] kauditd_printk_skb: 905 callbacks suppressed [ 48.307757][ T29] audit: type=1400 audit(1749180623.278:2906): avc: denied { connect } for pid=3938 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.342298][ T29] audit: type=1326 audit(1749180623.306:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3943 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fd3adc5e929 code=0x7ffc0000 [ 48.365927][ T29] audit: type=1326 audit(1749180623.306:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff004b611e5 code=0x7ffc0000 [ 48.389330][ T29] audit: type=1326 audit(1749180623.306:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff004b611e5 code=0x7ffc0000 [ 48.412800][ T29] audit: type=1326 audit(1749180623.306:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff004b611e5 code=0x7ffc0000 [ 48.420962][ T3941] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 48.436591][ T29] audit: type=1326 audit(1749180623.306:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff004b611e5 code=0x7ffc0000 [ 48.469705][ T29] audit: type=1326 audit(1749180623.306:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff004b611e5 code=0x7ffc0000 [ 48.493718][ T29] audit: type=1326 audit(1749180623.306:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff004b611e5 code=0x7ffc0000 [ 48.560749][ T29] audit: type=1400 audit(1749180623.381:2914): avc: denied { setopt } for pid=3938 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.581073][ T29] audit: type=1326 audit(1749180623.484:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff004b611e5 code=0x7ffc0000 [ 48.788956][ T3968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 49.426348][ T3970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 49.487355][ T3968] syz.4.97 (3968) used greatest stack depth: 10056 bytes left [ 49.556536][ T3977] loop3: detected capacity change from 0 to 512 [ 49.616958][ T3977] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 49.642755][ T3977] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.682013][ T3977] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.764134][ T3977] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 49.793137][ T3977] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.101: bg 0: block 40: padding at end of block bitmap is not set [ 49.818821][ T3977] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 49.844810][ T3977] EXT4-fs (loop3): 1 truncate cleaned up [ 49.854656][ T4001] loop1: detected capacity change from 0 to 512 [ 49.871432][ T3977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.919261][ T3977] pimreg3: entered allmulticast mode [ 49.938005][ T3972] pimreg3: left allmulticast mode [ 50.012081][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.039607][ T4001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.054666][ T4001] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.192856][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.322442][ T4029] loop3: detected capacity change from 0 to 512 [ 50.333337][ T4032] netlink: 'syz.1.106': attribute type 27 has an invalid length. [ 50.345822][ T4029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.360220][ T4029] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.385057][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.392469][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.434626][ T4032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.437643][ T4032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.472424][ T4032] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.481536][ T4032] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.490497][ T4032] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.499511][ T4032] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.526488][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.534522][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.543905][ T4037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.569120][ T3368] syz1: Port: 1 Link DOWN [ 50.582760][ T4032] syzkaller1: entered promiscuous mode [ 50.588441][ T4032] syzkaller1: entered allmulticast mode [ 50.595323][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.909152][ T4049] process 'syz.0.109' launched '/dev/fd/8' with NULL argv: empty string added [ 51.048779][ T4051] wireguard0: entered promiscuous mode [ 51.066109][ T4054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=4054 comm=syz.2.110 [ 51.079179][ T4054] netlink: 'syz.2.110': attribute type 4 has an invalid length. [ 51.234766][ T4056] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 51.289871][ T4056] loop4: detected capacity change from 0 to 8192 [ 51.296628][ T4056] vfat: Unknown parameter '\\@[*#)' [ 51.454051][ T4065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.464029][ T4069] loop4: detected capacity change from 0 to 164 [ 51.465596][ T4065] __nla_validate_parse: 2 callbacks suppressed [ 51.465614][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 51.516082][ T4069] SELinux: failed to load policy [ 51.540154][ T4072] lo speed is unknown, defaulting to 1000 [ 51.546104][ T4072] lo speed is unknown, defaulting to 1000 [ 51.552904][ T4072] lo speed is unknown, defaulting to 1000 [ 51.559539][ T4072] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 51.569643][ T4072] lo speed is unknown, defaulting to 1000 [ 51.575921][ T4072] lo speed is unknown, defaulting to 1000 [ 51.582058][ T4072] lo speed is unknown, defaulting to 1000 [ 51.588062][ T4072] lo speed is unknown, defaulting to 1000 [ 51.594342][ T4072] lo speed is unknown, defaulting to 1000 [ 52.494657][ T4077] syz.3.117 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 52.509315][ T4077] CPU: 1 UID: 0 PID: 4077 Comm: syz.3.117 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 52.509343][ T4077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.509358][ T4077] Call Trace: [ 52.509363][ T4077] [ 52.509371][ T4077] __dump_stack+0x1d/0x30 [ 52.509393][ T4077] dump_stack_lvl+0xe8/0x140 [ 52.509419][ T4077] dump_stack+0x15/0x1b [ 52.509504][ T4077] dump_header+0x81/0x220 [ 52.509621][ T4077] oom_kill_process+0x334/0x3f0 [ 52.509713][ T4077] out_of_memory+0x979/0xb80 [ 52.509752][ T4077] try_charge_memcg+0x5e6/0x9e0 [ 52.509787][ T4077] obj_cgroup_charge_pages+0xa6/0x150 [ 52.509830][ T4077] __memcg_kmem_charge_page+0x9f/0x170 [ 52.509888][ T4077] __alloc_frozen_pages_noprof+0x188/0x360 [ 52.509938][ T4077] alloc_pages_mpol+0xb3/0x250 [ 52.509985][ T4077] alloc_pages_noprof+0x90/0x130 [ 52.510109][ T4077] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 52.510201][ T4077] __kvmalloc_node_noprof+0x30f/0x4e0 [ 52.510238][ T4077] ? ip_set_alloc+0x1f/0x30 [ 52.510333][ T4077] ? ip_set_alloc+0x1f/0x30 [ 52.510356][ T4077] ? __kmalloc_cache_noprof+0x189/0x320 [ 52.510390][ T4077] ip_set_alloc+0x1f/0x30 [ 52.510421][ T4077] hash_netiface_create+0x282/0x740 [ 52.510479][ T4077] ? __pfx_hash_netiface_create+0x10/0x10 [ 52.510510][ T4077] ip_set_create+0x3c9/0x960 [ 52.510557][ T4077] ? __nla_parse+0x40/0x60 [ 52.510587][ T4077] nfnetlink_rcv_msg+0x4c6/0x590 [ 52.510714][ T4077] ? selinux_capable+0x1f9/0x270 [ 52.510734][ T4077] netlink_rcv_skb+0x123/0x220 [ 52.510797][ T4077] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 52.510834][ T4077] nfnetlink_rcv+0x16b/0x1690 [ 52.510856][ T4077] ? __kfree_skb+0x109/0x150 [ 52.510887][ T4077] ? nlmon_xmit+0x4f/0x60 [ 52.510911][ T4077] ? consume_skb+0x49/0x150 [ 52.510957][ T4077] ? nlmon_xmit+0x4f/0x60 [ 52.511040][ T4077] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 52.511120][ T4077] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 52.511255][ T4077] ? __dev_queue_xmit+0x182/0x1fb0 [ 52.511294][ T4077] ? prepare_signal+0x596/0x670 [ 52.511338][ T4077] ? ref_tracker_free+0x37d/0x3e0 [ 52.511411][ T4077] ? __netlink_deliver_tap+0x4dc/0x500 [ 52.511517][ T4077] netlink_unicast+0x59e/0x670 [ 52.511556][ T4077] netlink_sendmsg+0x58b/0x6b0 [ 52.511612][ T4077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.511642][ T4077] __sock_sendmsg+0x145/0x180 [ 52.511666][ T4077] ____sys_sendmsg+0x31e/0x4e0 [ 52.511770][ T4077] ___sys_sendmsg+0x17b/0x1d0 [ 52.511832][ T4077] __x64_sys_sendmsg+0xd4/0x160 [ 52.511879][ T4077] x64_sys_call+0x2999/0x2fb0 [ 52.511907][ T4077] do_syscall_64+0xd2/0x200 [ 52.511946][ T4077] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.511994][ T4077] ? clear_bhb_loop+0x40/0x90 [ 52.512016][ T4077] ? clear_bhb_loop+0x40/0x90 [ 52.512037][ T4077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.512063][ T4077] RIP: 0033:0x7f8ced20e929 [ 52.512084][ T4077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.512163][ T4077] RSP: 002b:00007f8ceb877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.512181][ T4077] RAX: ffffffffffffffda RBX: 00007f8ced435fa0 RCX: 00007f8ced20e929 [ 52.512193][ T4077] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 52.512204][ T4077] RBP: 00007f8ced290b39 R08: 0000000000000000 R09: 0000000000000000 [ 52.512217][ T4077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.512233][ T4077] R13: 0000000000000000 R14: 00007f8ced435fa0 R15: 00007ffc3d756f08 [ 52.512259][ T4077] [ 52.868103][ T4087] lo speed is unknown, defaulting to 1000 [ 52.869249][ T4077] memory: usage 307200kB, limit 307200kB, failcnt 1018 [ 52.876053][ T4087] lo speed is unknown, defaulting to 1000 [ 52.882446][ T4077] memory+swap: usage 314124kB, limit 9007199254740988kB, failcnt 0 [ 52.896206][ T4077] kmem: usage 285820kB, limit 9007199254740988kB, failcnt 0 [ 52.903572][ T4077] Memory cgroup stats for /syz3: [ 52.905095][ T4090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 52.910366][ T4077] cache 192512 [ 52.923036][ T4077] rss 204800 [ 52.926471][ T4077] shmem 0 [ 52.929550][ T4077] mapped_file 192512 [ 52.933908][ T4077] dirty 12288 [ 52.937297][ T4077] writeback 0 [ 52.940729][ T4077] workingset_refault_anon 0 [ 52.945245][ T4077] workingset_refault_file 0 [ 52.949831][ T4077] swap 0 [ 52.952728][ T4077] swapcached 0 [ 52.956115][ T4077] nr_memmap_boot_pages 22458 [ 52.960874][ T4077] pgpgin 22360 [ 52.964256][ T4077] pglazyfree 14694 [ 52.968016][ T4077] pgfault 6 [ 52.971196][ T4077] a_other 204800 [ 52.974828][ T4077] inactive_anon 0 [ 52.978473][ T4077] active_anon 0 [ 52.981956][ T4077] inactive_file 196608 [ 52.986229][ T4077] active_file 0 [ 52.989695][ T4077] hierarchical_memory_limit 314572800 [ 52.995182][ T4077] hierarchical_memsw_limit 9223372036854771712 [ 53.001367][ T4077] total_cache 21676032 [ 53.005497][ T4077] total_rss 212992 [ 53.009414][ T4077] total_shmem 21446656 [ 53.013492][ T4077] total_mapped_file 11964416 [ 53.018159][ T4077] total_dirty 28672 [ 53.021990][ T4077] total_writeback 0 [ 53.025888][ T4077] total_workingset_refault_anon 0 [ 53.030966][ T4077] total_workingset_refault_file 0 [ 53.036801][ T4077] total_swap 7090176 [ 53.040830][ T4077] total_swapcached 0 [ 53.044746][ T4077] total_nr_memmap_boot_pages 29590 [ 53.049967][ T4077] total_pgpgin 24245 [ 53.053903][ T4077] total_pglazyfree 21025 [ 53.058203][ T4077] total_pgfault 7 [ 53.061858][ T4077] total_a_other 2772992 [ 53.066152][ T4077] total_inactive_anon 18886656 [ 53.070988][ T4077] total_active_anon 0 [ 53.075026][ T4077] total_inactive_file 233472 [ 53.079684][ T4077] total_active_file 0 [ 53.083774][ T4077] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3/syz1,task=syz.3.117,pid=4076,uid=0 [ 53.099461][ T4077] Memory cgroup out of memory: Killed process 4076 (syz.3.117) total-vm:100168kB, anon-rss:1044kB, file-rss:26404kB, shmem-rss:11264kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 53.101198][ T4080] syz.3.117 (4080) used greatest stack depth: 9824 bytes left [ 53.124820][ T4079] syz.3.117 (4079) used greatest stack depth: 9736 bytes left [ 53.159740][ T4076] syz.3.117 (4076) used greatest stack depth: 9544 bytes left [ 53.239901][ T4095] netlink: 20 bytes leftover after parsing attributes in process `syz.2.122'. [ 53.364480][ T4096] xt_connbytes: Forcing CT accounting to be enabled [ 53.398524][ T4096] set match dimension is over the limit! [ 53.403284][ T4077] syz.3.117 (4077) used greatest stack depth: 7288 bytes left [ 53.454490][ T4105] random: crng reseeded on system resumption [ 53.536215][ T4102] lo speed is unknown, defaulting to 1000 [ 53.553646][ T4102] lo speed is unknown, defaulting to 1000 [ 53.563406][ T4109] loop2: detected capacity change from 0 to 512 [ 53.593718][ T4109] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.126: bad orphan inode 11 [ 53.608414][ T4109] ext4_test_bit(bit=10, block=4) = 1 [ 53.613804][ T4109] is_bad_inode(inode)=0 [ 53.618030][ T4109] NEXT_ORPHAN(inode)=2080374784 [ 53.623093][ T4109] max_ino=32 [ 53.626375][ T4109] i_nlink=0 [ 53.684012][ T4109] EXT4-fs (loop2): 1 truncate cleaned up [ 53.690222][ T4109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.744908][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 53.744924][ T29] audit: type=1400 audit(1749180628.368:3217): avc: denied { name_connect } for pid=4104 comm="syz.2.126" dest=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 53.850964][ T4116] veth1_to_bond: entered allmulticast mode [ 53.857741][ T29] audit: type=1326 audit(1749180628.470:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ced20e929 code=0x7ffc0000 [ 53.944587][ T4118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.127'. [ 53.961248][ T29] audit: type=1326 audit(1749180628.470:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ced20e929 code=0x7ffc0000 [ 53.984762][ T29] audit: type=1326 audit(1749180628.470:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ced20e929 code=0x7ffc0000 [ 54.008420][ T29] audit: type=1326 audit(1749180628.470:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ced20e929 code=0x7ffc0000 [ 54.032589][ T29] audit: type=1326 audit(1749180628.470:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ced20e929 code=0x7ffc0000 [ 54.057134][ T29] audit: type=1326 audit(1749180628.470:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ced20e929 code=0x7ffc0000 [ 54.080722][ T29] audit: type=1326 audit(1749180628.470:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ced20e929 code=0x7ffc0000 [ 54.104908][ T29] audit: type=1326 audit(1749180628.470:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ced20e929 code=0x7ffc0000 [ 54.128443][ T29] audit: type=1326 audit(1749180628.470:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.3.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ced20e929 code=0x7ffc0000 [ 54.287954][ T4092] Set syz1 is full, maxelem 65536 reached [ 54.349275][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.479729][ T4131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 54.488695][ T4131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 54.702198][ T4115] veth1_to_bond: left allmulticast mode [ 54.827740][ T4144] netlink: 64 bytes leftover after parsing attributes in process `syz.4.132'. [ 54.851988][ T4133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 54.948716][ T4144] bond1: entered promiscuous mode [ 54.953862][ T4144] bond1: entered allmulticast mode [ 54.964422][ T4144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.025993][ T4147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 55.187893][ T4150] ALSA: seq fatal error: cannot create timer (-19) [ 55.261494][ T4154] loop3: detected capacity change from 0 to 512 [ 55.268629][ T4154] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.301345][ T4154] EXT4-fs (loop3): 1 truncate cleaned up [ 55.309587][ T4154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.327596][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 55.506206][ T4163] wireguard0: entered promiscuous mode [ 55.545311][ T4174] siw: device registration error -23 [ 55.822358][ T4179] netlink: 'syz.0.142': attribute type 4 has an invalid length. [ 55.841431][ T1042] lo speed is unknown, defaulting to 1000 [ 55.847296][ T1042] s厇0: Port: 1 Link DOWN [ 55.872838][ T4172] lo speed is unknown, defaulting to 1000 [ 55.912425][ T4172] lo speed is unknown, defaulting to 1000 [ 56.078700][ T4175] lo speed is unknown, defaulting to 1000 [ 56.114136][ T4185] hsr_slave_0: left promiscuous mode [ 56.121698][ T4185] hsr_slave_1: left promiscuous mode [ 56.141861][ T4175] lo speed is unknown, defaulting to 1000 [ 56.217788][ T4192] loop2: detected capacity change from 0 to 1024 [ 56.383324][ T4192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.416091][ T4192] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.145: Allocating blocks 385-513 which overlap fs metadata [ 56.590358][ T4192] EXT4-fs (loop2): pa ffff888106a11000: logic 16, phys. 129, len 24 [ 56.598548][ T4192] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 56.839842][ T4154] syz.3.136 (4154) used greatest stack depth: 6952 bytes left [ 56.894581][ T4199] lo speed is unknown, defaulting to 1000 [ 56.901189][ T4199] lo speed is unknown, defaulting to 1000 [ 56.982587][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.004956][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.097069][ T4210] __nla_validate_parse: 3 callbacks suppressed [ 57.097090][ T4210] netlink: 32 bytes leftover after parsing attributes in process `syz.3.148'. [ 57.118779][ T4206] loop4: detected capacity change from 0 to 8192 [ 57.296917][ T4241] netlink: 56 bytes leftover after parsing attributes in process `syz.0.150'. [ 57.566152][ T4244] loop3: detected capacity change from 0 to 512 [ 57.618172][ T4244] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 58.063755][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 58.072771][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 58.081680][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 58.090688][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 58.103404][ T4315] bridge0: port 3(30猉功D) entered blocking state [ 58.110118][ T4315] bridge0: port 3(30猉功D) entered disabled state [ 58.119426][ T4315] 0猉功D: entered promiscuous mode [ 58.125605][ T4315] bridge0: port 3(30猉功D) entered blocking state [ 58.132276][ T4315] bridge0: port 3(30猉功D) entered forwarding state [ 58.235869][ T4244] loop3: detected capacity change from 0 to 1024 [ 58.345534][ T4244] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.357380][ T4244] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.381866][ T4244] JBD2: no valid journal superblock found [ 58.388135][ T4244] EXT4-fs (loop3): Could not load journal inode [ 58.480555][ T3424] IPVS: starting estimator thread 0... [ 58.496587][ T4339] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 58.504352][ T4339] netlink: 224 bytes leftover after parsing attributes in process `syz.3.151'. [ 58.535234][ T4339] loop3: detected capacity change from 0 to 512 [ 58.572648][ T4338] IPVS: using max 2448 ests per chain, 122400 per kthread [ 58.644057][ T4339] SELinux: security_context_str_to_sid (-歑軜7.H\ %簎) failed with errno=-22 [ 58.655046][ T4334] Cannot find del_set index 2 as target [ 58.669289][ T4334] SELinux: security_context_str_to_sid () failed with errno=-22 [ 58.739165][ T4349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 58.863450][ T4337] loop4: detected capacity change from 0 to 1024 [ 59.328184][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 59.328271][ T29] audit: type=1400 audit(1749180633.588:3502): avc: denied { write } for pid=4357 comm="syz.0.159" path="socket:[6013]" dev="sockfs" ino=6013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.577156][ T29] audit: type=1326 audit(1749180633.765:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 59.600767][ T29] audit: type=1326 audit(1749180633.765:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 59.624310][ T29] audit: type=1326 audit(1749180633.765:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 59.647751][ T29] audit: type=1326 audit(1749180633.784:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 59.671467][ T29] audit: type=1326 audit(1749180633.784:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 59.695609][ T29] audit: type=1326 audit(1749180633.784:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 59.719385][ T29] audit: type=1326 audit(1749180633.784:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 59.742754][ T29] audit: type=1326 audit(1749180633.784:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 59.766228][ T29] audit: type=1326 audit(1749180633.784:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff004b2e929 code=0x7ffc0000 [ 59.806850][ T4362] loop3: detected capacity change from 0 to 2048 [ 59.832228][ T4362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.846144][ T4362] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.942287][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 59.952488][ T4367] netlink: 830 bytes leftover after parsing attributes in process `syz.1.161'. [ 60.071485][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 60.225819][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 60.533596][ T4413] loop4: detected capacity change from 0 to 2048 [ 60.729024][ T4426] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.160: bg 0: block 345: padding at end of block bitmap is not set [ 61.041490][ T4362] ================================================================== [ 61.050421][ T4362] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 61.059217][ T4362] [ 61.061639][ T4362] write to 0xffffea00051c0d58 of 8 bytes by task 4212 on cpu 0: [ 61.069415][ T4362] __filemap_remove_folio+0x1a5/0x2a0 [ 61.074858][ T4362] filemap_remove_folio+0x6d/0x1d0 [ 61.080067][ T4362] truncate_inode_folio+0x42/0x50 [ 61.086061][ T4362] shmem_undo_range+0x244/0xa80 [ 61.091015][ T4362] shmem_evict_inode+0x134/0x520 [ 61.095972][ T4362] evict+0x2e3/0x550 [ 61.099974][ T4362] iput+0x447/0x5b0 [ 61.103792][ T4362] dentry_unlink_inode+0x24f/0x260 [ 61.108944][ T4362] __dentry_kill+0x18d/0x4b0 [ 61.113560][ T4362] dput+0x5e/0xd0 [ 61.117210][ T4362] __fput+0x444/0x650 [ 61.121233][ T4362] ____fput+0x1c/0x30 [ 61.125246][ T4362] task_work_run+0x12e/0x1a0 [ 61.129852][ T4362] do_exit+0x47f/0x1590 [ 61.134037][ T4362] do_group_exit+0xff/0x140 [ 61.138739][ T4362] get_signal+0xe59/0xf70 [ 61.143158][ T4362] arch_do_signal_or_restart+0x96/0x480 [ 61.148902][ T4362] irqentry_exit_to_user_mode+0x5e/0xa0 [ 61.154746][ T4362] irqentry_exit+0x12/0x50 [ 61.159705][ T4362] asm_exc_page_fault+0x26/0x30 [ 61.164598][ T4362] [ 61.166957][ T4362] read to 0xffffea00051c0d58 of 8 bytes by task 4362 on cpu 1: [ 61.175682][ T4362] folio_mapping+0xa1/0x120 [ 61.180705][ T4362] evict_folios+0xdb9/0x33d0 [ 61.185507][ T4362] try_to_shrink_lruvec+0x45a/0x7e0 [ 61.190816][ T4362] shrink_lruvec+0x22e/0x1b40 [ 61.195510][ T4362] shrink_node+0x686/0x2120 [ 61.200205][ T4362] do_try_to_free_pages+0x3f6/0xcd0 [ 61.205430][ T4362] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 61.211348][ T4362] try_charge_memcg+0x358/0x9e0 [ 61.216207][ T4362] obj_cgroup_charge_pages+0xa6/0x150 [ 61.221605][ T4362] __memcg_kmem_charge_page+0x9f/0x170 [ 61.227181][ T4362] __alloc_frozen_pages_noprof+0x188/0x360 [ 61.233112][ T4362] alloc_pages_mpol+0xb3/0x250 [ 61.237902][ T4362] alloc_pages_noprof+0x90/0x130 [ 61.242963][ T4362] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 61.248879][ T4362] __kvmalloc_node_noprof+0x30f/0x4e0 [ 61.254282][ T4362] ip_set_alloc+0x1f/0x30 [ 61.258624][ T4362] hash_netiface_create+0x282/0x740 [ 61.264009][ T4362] ip_set_create+0x3c9/0x960 [ 61.268788][ T4362] nfnetlink_rcv_msg+0x4c6/0x590 [ 61.273739][ T4362] netlink_rcv_skb+0x123/0x220 [ 61.278949][ T4362] nfnetlink_rcv+0x16b/0x1690 [ 61.283635][ T4362] netlink_unicast+0x59e/0x670 [ 61.288441][ T4362] netlink_sendmsg+0x58b/0x6b0 [ 61.293258][ T4362] __sock_sendmsg+0x145/0x180 [ 61.297941][ T4362] ____sys_sendmsg+0x31e/0x4e0 [ 61.303321][ T4362] ___sys_sendmsg+0x17b/0x1d0 [ 61.308026][ T4362] __x64_sys_sendmsg+0xd4/0x160 [ 61.312893][ T4362] x64_sys_call+0x2999/0x2fb0 [ 61.317572][ T4362] do_syscall_64+0xd2/0x200 [ 61.322097][ T4362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.329494][ T4362] [ 61.331917][ T4362] value changed: 0xffff888119b8aaa0 -> 0x0000000000000000 [ 61.339044][ T4362] [ 61.341386][ T4362] Reported by Kernel Concurrency Sanitizer on: [ 61.347539][ T4362] CPU: 1 UID: 0 PID: 4362 Comm: syz.3.160 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 61.359531][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.369744][ T4362] ================================================================== [ 61.423713][ T4429] sd 0:0:1:0: device reset [ 61.699442][ T4362] syz.3.160 (4362) used greatest stack depth: 5880 bytes left [ 61.707630][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.