last executing test programs:

1m40.004580221s ago: executing program 2 (id=2508):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000072489927b91cc8d7c84026f9a07abb6356928860d77e00f1a0140fc5bef3bae0d62b98543249629a5dcc2d525c5d267d65503d9f5d840d24682f84165629ae1b7f6e96a1496d4496b6cc324dfd08ec5897cecbe567b4d4d7278016664f4e948cd7a8114cb92ec379a3b3a353f48d0b8445f9e31ec94ed822dfd9feb6aa5934641a6ef4a1d741ff6c44b47fda4980af5f43dd7c75f4a2ea829b9d9aea2257b9527d1da98940506a2995b73ec44bb27c6e43e65e044485c11d78343c80"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
fsopen(0x0, 0x0)
fchdir(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40000)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="05002f"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

1m39.968642982s ago: executing program 2 (id=2509):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600))
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc93, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d01040a0000000040000000000000030017"], 0x50}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='kfree\x00', r6}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)

1m39.883790633s ago: executing program 2 (id=2510):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x5, 0x0, "ff00f7000000000000000000af88008300"})
r2 = syz_open_pts(r1, 0x141601)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
close_range(r1, 0xffffffffffffffff, 0x0)

1m39.817420774s ago: executing program 2 (id=2511):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2'}, 0x31)

1m39.799444675s ago: executing program 2 (id=2512):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=<r0=>0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0], 0x48)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8})
fstat(r4, 0x0)
getpeername$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xb9e, 0x1, 0x80000000, 0x14000, r1, 0x400005, '\x00', r5, r4, 0x2, 0x4, 0x3, 0x20000c, @void, @value, @value=r4}, 0x50)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r6, 0x58, &(0x7f00000000c0)}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

1m39.754477935s ago: executing program 2 (id=2514):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0})
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/protocols\x00')
read$ptp(r0, &(0x7f0000000080)=""/51, 0x33)
lseek(r0, 0x9, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000002c0)={0x6, &(0x7f00000001c0)=[{0xff, 0x10, 0x3, 0xbadf}, {0x4, 0x10, 0x80}, {0x8, 0xa, 0x7, 0x6}, {0x791a, 0x0, 0x9, 0x81}, {0x2e3f, 0xb, 0x4, 0x7}, {0x5, 0x1, 0x10, 0x5}]}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000440)=""/106)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x3, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2)
syz_usbip_server_init(0x3)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000540)=[{0x48, 0x0, 0x38, 0x8}, {0x6, 0xfc}]})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={<r2=>0x0}, &(0x7f0000000580)=0xc)
getpgid(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a"], 0x1c8}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtaction={0x2aa8, 0x30, 0x1, 0x70bd29, 0x25dfdbff, {}, [{0x2a94, 0x1, [@m_pedit={0x2a90, 0x1a, 0x0, 0x0, {{0xa}, {0x2a64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5f7, 0x8b60, 0x5, 0x101, 0x88}, 0x65, 0x6}, [{0xfff, 0x6, 0x3, 0x7, 0x800005, 0xa92}, {0x65a, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x8, 0x8001, 0x2, 0x1, 0x9}, {0x10, 0x7, 0xfffff000, 0x6f30, 0xf}, {0x7, 0x9, 0x4, 0x1caece98, 0xf, 0xefcf}, {0x48a0, 0xb, 0x200, 0x9, 0x7f, 0x7}, {0x1, 0x7, 0x81, 0x800, 0x4, 0x3}, {0x6, 0x9e, 0x4, 0x400, 0x8}, {0x4, 0x8, 0x3, 0xa, 0x5, 0xa99c}, {0x4, 0xfc, 0x8, 0x7, 0x5}, {0x5, 0x2, 0x7, 0xffffc8e1, 0x35a59efd, 0x400}, {0x6, 0x5, 0x4, 0xfffffff7, 0x1739, 0xffffff00}, {0x6, 0x9, 0x4, 0x7ff, 0x2, 0x7}, {0x7ff, 0xfffffffb, 0x0, 0x8, 0x22e8, 0x80}, {0x1, 0x9, 0xf, 0x7f2b, 0x5, 0x2}, {0x1, 0x6, 0x3, 0xfff, 0xf19, 0x4}, {0x9, 0x80000001, 0x3, 0xa124, 0xb6, 0x2}, {0x401, 0x1, 0x5, 0x8, 0x485, 0x4}, {0x8001, 0x5, 0x0, 0xfffffc00, 0x1, 0x9}, {0x12fb, 0x9, 0x8, 0x10f, 0x0, 0x3}, {0xfffffff8, 0x1, 0x1, 0x2, 0x1, 0x6}, {0x5, 0x8, 0x8, 0x0, 0xfffffffb, 0x9}, {0x0, 0x8, 0x9, 0x6, 0x3, 0x97}, {0x813, 0x5d8, 0x8, 0x8, 0x9, 0x1}, {0x4, 0x9, 0x8, 0x4, 0x2, 0x1}, {0x1, 0x0, 0x7fff, 0xfffffff8, 0x4, 0xfffffff0}, {0xe79, 0x7, 0x7ff, 0x5, 0x0, 0x5}, {0xc2d7, 0x400, 0x6, 0x5, 0x0, 0x2}, {0xfffffffd, 0x2, 0x5, 0xfc, 0xfffffff5, 0xfffffc00}, {0x5, 0xfff, 0x1524, 0x0, 0x7, 0xfff}, {0x6, 0x0, 0x155c, 0x7, 0x7}, {0x2, 0x1, 0xfffffff7, 0x5, 0xfffffff7, 0x7fff}, {0x2, 0x6d48, 0x1, 0x8, 0xf, 0x7}, {0x1, 0x4, 0x7341, 0xd, 0x8936}, {0x1, 0x5, 0x1, 0x3, 0xa0, 0xb285}, {0x7fffffff, 0x0, 0x4, 0xbb, 0x8, 0xfffffff8}, {0x2, 0x5, 0x6, 0x1, 0x9}, {0x8, 0x4, 0x30, 0x200, 0x2, 0x7}, {0x3, 0x3ff, 0xe, 0x0, 0xafbe, 0x3c0a}, {0x80000000, 0x3, 0x1, 0x1, 0x891f, 0x4}, {0x9, 0x80000000, 0x74, 0x9, 0x1, 0x99}, {0x9, 0x1, 0x0, 0x10001, 0x3ff, 0x7fff}, {0x9, 0xffff, 0x5ef7, 0x5, 0x3, 0x6}, {0x5, 0x19, 0x0, 0x0, 0x401, 0x500000}, {0x2, 0x1, 0x9, 0x489a, 0x2, 0xb}, {0x80000000, 0x0, 0x4, 0x4, 0x5, 0x1}, {0x0, 0x4, 0x2, 0x5, 0x3, 0x8f}, {0xffffffff, 0x45, 0xffff, 0x7, 0x5, 0x9}, {0x1, 0x0, 0x401, 0x4, 0xa32, 0x401c}, {0x5, 0x1000, 0xfffffff9, 0x1b00000, 0x0, 0xd7}, {0xbfb1, 0x2, 0x2, 0xcb3, 0x6f8, 0x7}, {0x3, 0xe70, 0xd1d, 0x4, 0x4, 0x5}, {0xc7, 0x5, 0x5, 0x9, 0x3, 0x7}, {0x34, 0x88, 0x1e97d19c, 0x2, 0x8, 0x40}, {0x11a5, 0x1, 0x10000, 0x3, 0x3, 0x1ff}, {0x8, 0x6, 0x5, 0x3, 0x1e3e4ead, 0x80000001}, {0x401, 0x6, 0x1, 0x4, 0x2, 0x4}, {0x9, 0x71cfabe7, 0x5, 0x4, 0x8, 0x9}, {0xa, 0xffff, 0x4, 0xf, 0x80, 0x9}, {0xa17, 0x1, 0x5, 0x7, 0x300000, 0xb9}, {0x5, 0x1, 0x0, 0x3, 0x9, 0x6}, {0x1, 0x2, 0xead, 0x4, 0x4, 0x3}, {0x6, 0xffffffff, 0x9, 0x7, 0xe8, 0xb76}, {0x7, 0xe, 0x2, 0xac, 0x10001, 0x5a4}, {0x1, 0x0, 0x9, 0x3, 0x7ff, 0x100}, {0x9, 0x1, 0xfffffe01, 0x8, 0x8, 0x6}, {0x10000, 0x2, 0x8, 0x0, 0x9, 0x940}, {0x21db, 0x4, 0x40000000, 0xa1, 0x96, 0x7}, {0x581ba20a, 0x9, 0x0, 0x83, 0x4, 0x4}, {0xd, 0xe3, 0x0, 0x19c3, 0x6, 0xffffffff}, {0x7ff, 0xe00000, 0x2, 0x6, 0x5d, 0x6}, {0xfff, 0x0, 0x4, 0xfffffbff, 0x3, 0x2}, {0x9f, 0x5, 0x10, 0x280000, 0x800, 0x4}, {0xf, 0x80000001, 0xffffffb2, 0x2b, 0x5, 0x2}, {0x6, 0x8, 0x7, 0x6e6, 0xe9}, {0x10000, 0xfffffff8, 0xb78, 0x4, 0x4, 0x6}, {0x1, 0xfffffffb, 0x3ff, 0x1, 0xade, 0x7ff}, {0x6, 0x2, 0xfffffff7, 0x7, 0x2, 0x7f}, {0x6, 0xf590, 0x80, 0x1, 0x8001, 0x4}, {0x6, 0xffffffff, 0x480, 0x79, 0x9, 0x6}, {0x1, 0x3d40, 0x7, 0x46d, 0x8, 0xd}, {0x7, 0x2, 0x1, 0x9, 0x84c4, 0x9}, {0x2756, 0x400, 0x4, 0x2, 0x0, 0x1}, {0xffffffff, 0xe, 0x1, 0xa8, 0x2, 0x7fffffff}, {0x2, 0x1, 0x3, 0x3, 0x4, 0x9}, {0x3b7, 0x3, 0x2, 0x7, 0x2, 0x8}, {0x5, 0x8001, 0x81, 0x56, 0x9, 0x7}, {0x1, 0x0, 0x7ff, 0x3, 0x8, 0x3}, {0x2e73, 0x1f, 0xdb72, 0x7c365bee, 0x8, 0x3}, {0x8001, 0x5, 0x6, 0x7, 0x1, 0x9}, {0xffff2508, 0x2, 0x101, 0x100, 0x0, 0x6}, {0x38f5, 0xffff8000, 0x81, 0x9, 0x7, 0x8}, {0x7, 0x9, 0x9, 0x80000001, 0x3ff, 0x101}, {0x0, 0x1, 0xb65c, 0x7, 0x81, 0x4}, {0xa, 0x95, 0x101, 0x4, 0x0, 0x5}, {0x1ff, 0x20, 0x8, 0x5592, 0x9, 0x100}, {0x4, 0x9, 0x81, 0xfffffff8, 0x7, 0xe86}, {0x3, 0x6, 0xd, 0x1, 0x4, 0x3}, {0xe, 0x9958, 0x40, 0xfffffff0, 0x1, 0x5}, {0x0, 0x7, 0xfffff07c, 0x845, 0xfff}, {0x0, 0xfffffff9, 0x6, 0x8, 0x5, 0x5}, {0x4, 0x7, 0x9, 0x330a, 0x4, 0x8}, {0x30f0a026, 0x8, 0x4, 0x7, 0x6, 0xff}, {0x7, 0x0, 0x3800000, 0x8, 0x4cc0c7e8, 0x3}, {0xb1, 0x2, 0x98, 0x8001, 0x80000001, 0x1}, {0x200, 0x9, 0xfffffffb, 0x7, 0x800, 0x8}, {0x6, 0xe, 0x23, 0xf, 0xd9, 0x5}, {0x400, 0x9, 0x100, 0x8, 0x100}, {0x0, 0x0, 0xe, 0x0, 0x4, 0x7b}, {0x92e, 0x400, 0xffffff01, 0x2d, 0xc07, 0x400}, {0x4, 0x4, 0xc76, 0x7, 0x8, 0x558b}, {0x4, 0x9, 0x2bc, 0xa0, 0x3ff, 0x2}, {0x6, 0x1, 0x5, 0x2, 0x7, 0x7f}, {0x3, 0x49a, 0x2, 0x2, 0x4, 0x10}, {0x2, 0x7, 0x9, 0x5, 0x6}, {0x63f024bb, 0xa0, 0x5, 0x3, 0x8, 0x7b}, {0x1, 0x10001, 0x81, 0x9, 0x5, 0x7}, {0x5, 0x1ff, 0x1, 0x7, 0x8000, 0xa457}, {0xc, 0x9, 0xffffff00, 0x605, 0x0, 0x774}, {0x4, 0x5, 0x8, 0x400, 0x5d85, 0x9}, {0x4, 0x2, 0x10001, 0x7, 0x0, 0x10000}, {0x9, 0x2, 0x9, 0x9, 0x1, 0x79f}, {0x6, 0x8, 0x1, 0x2, 0x0, 0xffff8001}, {0x100, 0x9, 0x4, 0x8, 0x7, 0xd2f}, {0xfffffeff, 0x4, 0x30, 0x2a, 0x6, 0x2}, {0x5, 0x3, 0x0, 0x35, 0x9, 0x9e}, {0x9, 0x5, 0xe2, 0x5, 0x0, 0x1}, {0x4, 0xa, 0x0, 0x3, 0x8}], [{0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0xbd8a62aa819b833a}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x6, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x60acfaa94dc96dc1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x6}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0xa}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x9293fc9a996600a2, 0x1}, {0x3}, {0x4}, {0x5}, {0x4}, {0x2}, {0x5}, {0x7}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x7}, {}, {0x7}, {0x5}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1ff, 0x100, 0x10000000, 0x55, 0x8000}, 0x9, 0x7}, [{0xdd, 0xffff9bcb, 0x0, 0x8, 0x40}, {0x10, 0x400, 0x1, 0x89, 0xe, 0xf}, {0x9, 0xbc, 0x15, 0x3, 0x23b0, 0x4}, {0x3, 0x3, 0x6, 0x80000001, 0x4, 0x236}, {0x4, 0x1, 0xb3, 0x4, 0x2, 0x101}, {0x5, 0x6, 0xfe2a, 0x2, 0x4d8, 0x6}, {0x6, 0x3, 0x2, 0x9, 0x6, 0x8}, {0xfff, 0x9, 0x9, 0x5, 0x3, 0x8001}, {0x0, 0x7, 0xfff, 0x8b9, 0x6, 0x7}, {0x80000001, 0x6, 0xfffff75c, 0x2262, 0x80, 0x4}, {0xfffffffa, 0xa, 0x7f, 0x8, 0x7, 0x2}, {0x8, 0x2, 0x80000001, 0x1, 0x1, 0x1}, {0xffff, 0x9, 0x1, 0xb, 0x2, 0xff}, {0xffffffff, 0x6, 0x3, 0xffffffff, 0x200}, {0x101, 0x5, 0x6, 0x4, 0xfffffffa, 0x7}, {0x0, 0x80, 0x71d3, 0x459, 0x6, 0xfffffffc}, {0x81, 0x3d7, 0x2, 0x9, 0x4, 0x5}, {0xfffffffc, 0x0, 0x6, 0x1000, 0x4, 0x1000}, {0x1, 0xdf7, 0x0, 0x3, 0x80, 0x3}, {0x5, 0xb, 0x47, 0x3, 0x7, 0x9}, {0xb2ac, 0xebe, 0x7df, 0xfffff001, 0x80, 0x539e}, {0x3, 0x10000, 0x7ff, 0xc4, 0x9, 0x7b1a}, {0x6, 0x9, 0x5cb, 0xfffffff9, 0x33c3, 0xfff}, {0x5, 0xffff9448, 0x8001, 0x7, 0x0, 0x471f83e2}, {0x7f7, 0xcba, 0x100, 0x3, 0xd, 0x5}, {0x6, 0x0, 0xffff, 0x3, 0x40, 0x946}, {0xf535, 0x10000, 0x2, 0x7, 0x6, 0x8000}, {0xffffff7b, 0x8, 0x2, 0x90000000, 0xfa, 0x2}, {0x6, 0x3, 0xc, 0x3, 0x5}, {0x2, 0x2, 0x548fb84d, 0xfffffffb, 0x9, 0x2}, {0x4, 0x0, 0x6, 0xe5, 0x80000000, 0x4}, {0xc2, 0x7ff, 0xb, 0x0, 0x4, 0x66}, {0x7, 0x30b, 0xfffffffe, 0x21, 0x5, 0x1}, {0x3f, 0x9, 0xffff, 0xffff, 0x3, 0x1}, {0x0, 0x0, 0xffff, 0x5, 0x5, 0x9ed9}, {0xffffffff, 0x8, 0x9, 0x6, 0x1, 0x2}, {0x8, 0x4, 0x17b3, 0x3, 0x4, 0x2e}, {0x3, 0x6, 0xfa, 0x2, 0x2, 0x6}, {0x2, 0x5, 0x3, 0x9, 0x63c9, 0xf5c}, {0x3, 0xffff, 0xae2c, 0xfffffffc, 0x9, 0x5}, {0x4, 0x3, 0x6, 0x4, 0xd4c, 0x9a}, {0x1, 0x4f, 0x10001, 0x3, 0x9, 0x6}, {0x6, 0x75, 0x8, 0x2, 0x101, 0x7}, {0x0, 0x4f, 0xff, 0x3, 0xc4a6, 0x2}, {0x6, 0x32000000, 0xff, 0x1000, 0x2, 0xffffffff}, {0x0, 0x6, 0x7, 0x6, 0x5, 0x1}, {0x6, 0x9, 0xffff, 0x6, 0x1, 0xb4}, {0x6, 0x1, 0xfbd1, 0x8, 0x5, 0x3}, {0x0, 0x200000, 0x7ff, 0x6, 0x6, 0xfffffffe}, {0x3, 0x8, 0x3, 0x3, 0x8, 0x5}, {0xfffffffb, 0xfff, 0xf, 0x2, 0x1, 0x4}, {0x6, 0x7f, 0x4, 0x4, 0x5, 0x10001}, {0x7, 0x6, 0xffffffff, 0x80000001, 0x400, 0x10001}, {0x100, 0x401, 0x9, 0xfffffffd, 0x4, 0x3}, {0x2, 0xfad, 0xa, 0x2, 0x7f, 0xa}, {0xa, 0x1, 0x7, 0x0, 0x21f, 0x2}, {0x1d2, 0x6, 0xd, 0x6, 0x9, 0x9}, {0x0, 0xfffffffb, 0x1, 0x7ff, 0xb52, 0x3}, {0x80000001, 0x101, 0x5, 0x7, 0x1000, 0xbc78}, {0x6, 0x8, 0x6, 0x3, 0x2, 0x3}, {0x7, 0xd, 0x0, 0xfffffffc, 0x7fff, 0xffff}, {0xca9, 0x7f, 0x5, 0x3, 0x9, 0xffffffff}, {0x4, 0x2, 0x101, 0x8, 0x6, 0xe6}, {0x9, 0xfffffac5, 0x0, 0x7, 0x8, 0x8000}, {0x1, 0x7, 0x1, 0x0, 0xcc, 0xff}, {0x400, 0xc, 0x7, 0x3, 0x100, 0x8}, {0x8001, 0x2e, 0x4, 0x400, 0x3, 0x800}, {0x5, 0x2, 0xe9, 0x7, 0xc}, {0x7ff, 0x5, 0x0, 0x5, 0x800, 0x1ff}, {0x1, 0x3, 0x9, 0x3ff, 0x4026944d, 0x9}, {0x8, 0x1, 0x4, 0x0, 0x8, 0x3}, {0x9, 0x4, 0x10000, 0x1, 0x3, 0x2}, {0x4, 0x7, 0x10000, 0x6, 0x297, 0xff}, {0x0, 0x1000, 0x4, 0x7, 0x10001}, {0x5, 0xbde, 0x5, 0x2cd78ace, 0x3, 0x8}, {0x1, 0xc6, 0x800, 0x5, 0x6, 0x40}, {0x1d47, 0x0, 0x1, 0x5, 0xffffffff, 0x11c}, {0x1, 0x162, 0xc86, 0x4, 0x2, 0x3}, {0x98f, 0x6, 0xecfd, 0x40, 0xf28, 0x7ff}, {0x5, 0x6, 0x5, 0x8, 0x2, 0x401}, {0x6, 0x40, 0x40, 0x9, 0xfffff503, 0x5f0a8000}, {0xf50c, 0x2655, 0x7f, 0x1c, 0x3, 0x9}, {0x0, 0x80, 0x4, 0x6, 0x1e7072c6, 0x1cf000}, {0xfffffff7, 0x5, 0x3ff, 0x9, 0x30}, {0xbbe5, 0x3ff, 0x7, 0x0, 0x400, 0x100}, {0x2, 0x9, 0x4, 0xec, 0x8, 0x80000001}, {0x1, 0x2, 0xd40b8fe7, 0xfb29, 0x2, 0x1d65b554}, {0x3b1b2cfe, 0x4, 0xa6, 0xc0000000, 0x401, 0xfffffff1}, {0x0, 0x7ff, 0x0, 0xffffffc0, 0x7fff800, 0x7}, {0xd, 0x5, 0x6, 0x5, 0x0, 0x10000}, {0x0, 0x6, 0x1, 0x4, 0x4, 0x4}, {0x4, 0xf0, 0x9, 0xfffffffe, 0x5}, {0x8001, 0x2ded, 0x6, 0x6, 0x7, 0x2}, {0x179, 0x2, 0xfffffffe, 0x200, 0x10000, 0x5}, {0x1, 0x1, 0x2, 0xf1e, 0x4, 0xfb6d}, {0x1, 0x6102, 0xd02, 0x5, 0xf5b, 0xf}, {0xf58, 0x3, 0x6, 0xe, 0x9, 0xffff}, {0x0, 0x9, 0x8, 0x0, 0x9}, {0x10, 0x3, 0x4, 0xa, 0xfffffff9, 0x9}, {0x6, 0x62, 0x3f3, 0x80000001, 0x5, 0x4}, {0x4, 0x81, 0x23, 0x2, 0x6, 0xff}, {0xc, 0x10, 0x7, 0x8, 0x4, 0x10001}, {0x4, 0x559ed72d, 0xcac, 0x0, 0x2, 0xffff}, {0x6, 0xe1, 0x100, 0x401, 0x200, 0x9}, {0x3a6f6741, 0xe6a4, 0x9, 0x5, 0x1, 0x4}, {0x8000, 0x6, 0x19, 0x400, 0x2, 0x8}, {0x6469c0e4, 0x0, 0x10000, 0x7, 0x2000000, 0x5}, {0x0, 0x9, 0x0, 0xfffffeff, 0x0, 0x3}, {0x200, 0x80, 0xa, 0x4, 0x7ca}, {0x5f, 0x3ff, 0x3ff, 0x489733aa, 0xcc, 0x10000}, {0x5, 0xba, 0x6, 0x1, 0x6, 0x10}, {0x1, 0xc, 0x7, 0x1ff, 0x53, 0x3}, {0x6, 0x2, 0xc, 0x2, 0x7f, 0x9}, {0xf0, 0x81, 0xfffffff7, 0x3, 0x3, 0x80000001}, {0xf5b, 0x7e, 0xb, 0x4, 0x9, 0x4}, {0x2f, 0x1, 0xffff491c, 0x9, 0xfffff8ec, 0x6bca}, {0x8001, 0x8, 0x3, 0x6, 0x8, 0xf}, {0x1, 0x7, 0x9, 0x2, 0xfffffffd, 0xffffffff}, {0xffff, 0x400, 0xb, 0x5, 0x8, 0xa}, {0x8001, 0x8, 0xbe, 0x6, 0x9, 0xffff7fff}, {0x5c, 0x0, 0x3b, 0x2, 0x6, 0xff}, {0x0, 0x6, 0x100, 0x1ff, 0x7fffffff, 0x8}, {0x8, 0x0, 0x8, 0xfffffff7, 0x10001, 0x722c}, {0x3f, 0x8, 0x4, 0x1, 0x7f, 0x1000}, {0x7, 0x2, 0x7, 0x8248, 0x64, 0xc}, {0x2, 0x1, 0x4, 0x0, 0x100, 0xc46a}, {0x1b0, 0x4, 0x8bdb, 0x7, 0x5, 0x1}, {0x0, 0x8981864, 0x90000, 0x3, 0x6, 0x2}], [{0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x5, 0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x3}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x4a04d0d0d040c9a}, {0x1, 0x1}, {0x3}, {}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x1}, {0x4}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {}, {0x7}, {0x2}, {}, {0x4, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x3, 0x7f}, 0x1, 0x2}, [{0x1, 0x5, 0x4, 0x2, 0x9, 0x3e341d61}, {0x42, 0xfffffffd, 0x8, 0x0, 0xea, 0x68000000}, {0xa8, 0x1d2, 0xe8a, 0x7d, 0x17eb, 0xb0}, {0x2, 0x100, 0x4, 0x7, 0x5}, {0x9103, 0x4, 0x5, 0x0, 0xfffff728, 0xc}, {0x3, 0x401, 0x8c, 0x6, 0x4, 0x369}, {0x4c92, 0x9, 0x2, 0x7, 0xfe07, 0x5}, {0x8f31, 0x6, 0x2, 0x101, 0x0, 0x20000}, {0xffffffff, 0x0, 0x7f, 0xf18, 0x9, 0x7}, {0x4, 0x3, 0x2e, 0x7fffffff, 0x3, 0x7}, {0x0, 0x0, 0xfffffffd, 0xfffff6ff, 0x6, 0x38000}, {0xc6a, 0x0, 0xffffff83, 0xe6ca, 0x9, 0xc}, {0xc, 0x7, 0x2, 0xfffffdfe, 0x8001, 0x8001}, {0x3f8, 0x5d0, 0x40, 0x0, 0x8, 0x7e04}, {0x3ff, 0xfffffffe, 0x8, 0x643, 0x7, 0x4a}, {0x81, 0x6, 0x6, 0x1ff, 0x100, 0x20000000}, {0x3ff, 0x3, 0x200, 0xf33d, 0x9, 0x5}, {0x81, 0x1, 0x7ff, 0xefc8, 0x0, 0x5}, {0x7fffffff, 0x6, 0x2, 0xba4, 0x6, 0x1}, {0x2, 0x38, 0x1, 0x80000001, 0x7fff, 0x1}, {0x7, 0x6, 0x101, 0x4, 0x6, 0xe57}, {0x6, 0x2, 0x401, 0x6, 0x5, 0x1}, {0x7, 0x9, 0x9, 0x2, 0xfffffff9}, {0xf21, 0x7fffffff, 0xfffffffb, 0xc, 0x2, 0x1}, {0x5, 0x1, 0x6, 0x8, 0xffff8000, 0x3}, {0x3, 0x4, 0x7, 0x3, 0x5, 0x8}, {0xffffff01, 0x7, 0x3, 0x7, 0xfff, 0x6}, {0x81, 0x6, 0x3, 0x2, 0x9, 0x3}, {0x2, 0x8, 0xda, 0x6, 0x7, 0x3}, {0x6, 0x8, 0xf86, 0x10, 0x3f, 0x7}, {0x7fffffff, 0x0, 0x81, 0x200, 0x1, 0x604}, {0x7fff, 0x0, 0x80000001, 0x68f7e38f, 0x2, 0x6}, {0xf46, 0xe, 0x6, 0x0, 0xae, 0xff}, {0xfffffffb, 0x80, 0x3, 0x9c, 0x6, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x9, 0xffffffff}, {0xc, 0x4dd0, 0x8001, 0x3, 0x0, 0x5}, {0x1, 0xffffffff, 0x2, 0xe, 0xac, 0x2}, {0x3a5b, 0x5, 0x5, 0x5, 0x7f, 0x7}, {0x1, 0x9, 0x7fffffff, 0x0, 0x2, 0x7}, {0x8, 0x7ff, 0x1, 0x7ff, 0x7dbd, 0x4ec0}, {0x7, 0x1, 0xffffffff, 0x0, 0x40, 0x5}, {0x1, 0x0, 0x6094, 0x0, 0x3}, {0xfff, 0x5, 0x80, 0x8, 0x7, 0x1}, {0x6, 0x8001, 0x1, 0x100, 0xf8ab, 0x6}, {0x4a, 0x5, 0x0, 0x8d7e, 0x1, 0x400}, {0xf, 0x7f, 0x1, 0x7fffffff, 0xc, 0x101}, {0xff, 0x81, 0x7, 0x4, 0x917, 0x6}, {0x6, 0x1fe00000, 0x3, 0x4, 0x3, 0xa0000000}, {0xa77d, 0xfffffff9, 0x8}, {0x403, 0x5, 0x1, 0x2, 0x8, 0x10001}, {0xd, 0x401, 0xf, 0x7f, 0x15e4, 0x9}, {0xfffffffc, 0x5, 0x5, 0xfffffca9, 0x90, 0x3}, {0xf4, 0x2, 0x4, 0x4, 0x2, 0x8a4a}, {0x3, 0x6, 0x4, 0x8, 0x7, 0x1}, {0x1ff, 0x6, 0x7fffffff, 0x60, 0x3, 0xe}, {0x7, 0x993b, 0x400, 0x10000, 0x3, 0x10000e}, {0x7, 0x6, 0x1, 0xfff, 0xffffffff, 0x3ffc}, {0x7, 0x10000, 0x2, 0x80000000, 0x0, 0xffff}, {0xffffffff, 0xf, 0x5, 0x4, 0xd5, 0x9}, {0x7ff, 0xae96, 0x3, 0x6, 0x3, 0x1}, {0x4, 0x2, 0x8, 0x5, 0xf424, 0x5}, {0x9, 0x5, 0xade7, 0x9, 0x2, 0x5}, {0x6, 0x4, 0x1, 0xb1e, 0x0, 0x2}, {0x6, 0xd, 0x1, 0x80, 0x5, 0xc75}, {0xf, 0x9, 0x1, 0x3e989c97, 0xfffffffe, 0x5}, {0x200, 0xdc, 0x5, 0x8000, 0x1000, 0x5}, {0x2, 0x200, 0x7, 0x8, 0x1ff, 0x3}, {0xc0, 0x1, 0x5, 0x52, 0x7, 0xfffffff8}, {0xff, 0x2, 0x10001, 0x0, 0x2, 0xffffff00}, {0x4, 0xed, 0xfffffff9, 0x1307, 0x2, 0x1}, {0x0, 0x0, 0xb, 0x6, 0x6, 0x80000000}, {0xb623, 0x10000, 0x1, 0x8, 0x6, 0x8}, {0x4, 0x9, 0xe7, 0x2, 0x40, 0x401}, {0x4, 0x8001, 0x5, 0x97c, 0xfffffffe, 0x7}, {0x0, 0x2, 0x4, 0x7, 0x80000001, 0xfffffff7}, {0x1, 0x8, 0x4, 0x865, 0x2, 0x7}, {0x6, 0x3, 0x5d, 0x8e816326, 0xc, 0x6}, {0x5, 0xee6c, 0x2, 0x5, 0x40, 0x101}, {0x2, 0xfffffff9, 0xd, 0x66, 0x5, 0x9}, {0x4, 0xfffffff8, 0x3, 0x6, 0x4, 0x5}, {0x1, 0xdd, 0x6, 0x9, 0x80000001, 0x8818518a}, {0x7, 0x1, 0xff, 0x7fff, 0x8, 0x6}, {0x9, 0x9d, 0x2, 0x9, 0x7b7fb9f0, 0x9}, {0x30, 0x7, 0x3, 0x100000, 0x8, 0xfffffe01}, {0xfffffffe, 0x6, 0x40, 0x0, 0xfffff5a2, 0x401}, {0x1, 0x100, 0x5, 0x3, 0x7, 0x7}, {0x1, 0x800, 0x3, 0x40, 0x5, 0xc}, {0x3, 0x3ff, 0x4, 0x7, 0x9, 0xd}, {0x1, 0x401, 0x9, 0x2, 0x7, 0x6}, {0x3, 0x7, 0x3, 0x1, 0x10001, 0x9}, {0x2, 0x7fff, 0x9, 0x9, 0xb}, {0x7, 0x7, 0x2, 0x0, 0x5, 0x1}, {0x9, 0x8, 0x7, 0x6, 0x7, 0x5}, {0x9, 0x7, 0x1, 0x2, 0x1, 0x80}, {0x9, 0x7f, 0x5, 0x5, 0xeb, 0x5}, {0x3, 0x1, 0x8000, 0x5, 0x8, 0x3}, {0x1, 0x5a1c, 0x8001, 0x7ebe, 0x4cf72505, 0xcd}, {0x0, 0x6, 0x6, 0x5, 0x1ff0, 0x10001}, {0xe, 0x1, 0x3, 0x2, 0x9, 0x100}, {0x5, 0x7ff, 0x3, 0x80, 0x200, 0x4}, {0x4, 0x6, 0x1ff, 0x3ff, 0x20000000, 0x8}, {0x31b, 0x8001, 0xe, 0x1, 0x3, 0x8}, {0x6, 0x2, 0x5, 0xb, 0x1, 0x8}, {0xf, 0x6, 0x98a, 0x3, 0x1, 0x3}, {0x5276, 0x366, 0x5, 0x44, 0x0, 0x5cd0}, {0x80000001, 0x8, 0x2, 0x24c, 0x7, 0x1000}, {0x1, 0x2, 0x6, 0x2, 0x5}, {0x5, 0x5, 0x80, 0x1, 0x5, 0x401}, {0x1, 0x5cf, 0xa, 0x2, 0x3, 0x8}, {0x800, 0x4, 0x2, 0x1, 0xc0, 0xfffffffa}, {0x7, 0x3ff, 0x200, 0x0, 0x2, 0x5}, {0xffffffff, 0x7, 0xf, 0x0, 0x8, 0x3}, {0x3, 0xb2b2, 0x194f9bf4, 0x87a4, 0xaab7, 0x7}, {0x7, 0x9, 0xa8e, 0x7, 0x60670000, 0x7}, {0x40, 0x10000, 0x4, 0x2, 0x0, 0x1}, {0x5, 0x9, 0xffffff7f, 0x7, 0x3}, {0x8e5, 0x1, 0xa, 0x28, 0x9, 0x80000001}, {0x3, 0x80000001, 0xe225, 0xd, 0x8, 0x9}, {0x29d, 0x401, 0xffffffff, 0xfff, 0xfded, 0x8}, {0xfffffbff, 0xe, 0x0, 0xffffff81, 0x8, 0xfffffffe}, {0xed6, 0x3, 0x5, 0x259c, 0x9, 0x3}, {0xfffffbff, 0x7f, 0x400, 0xfffffff9, 0x0, 0x1}, {0x0, 0x7ff, 0x40, 0xcd, 0x6, 0x8}, {0x6, 0x6, 0x1, 0x9, 0x61, 0xffffffff}, {0x6, 0x8, 0x0, 0x4, 0x5, 0x6}, {0x8000, 0xff, 0x516, 0x0, 0x2371, 0xffff}, {0x8, 0x1, 0x6, 0x9, 0x101, 0x86}, {0x5, 0x8, 0x186, 0x1, 0x101, 0x80000000}], [{0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0xd171415e8ad05f3d}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x3}, {0x6}, {0x4}, {0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2aa8}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000640)={r8, 0x7925, 0x1}, &(0x7f0000000680)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)

1m24.688204024s ago: executing program 32 (id=2514):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0})
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/protocols\x00')
read$ptp(r0, &(0x7f0000000080)=""/51, 0x33)
lseek(r0, 0x9, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000002c0)={0x6, &(0x7f00000001c0)=[{0xff, 0x10, 0x3, 0xbadf}, {0x4, 0x10, 0x80}, {0x8, 0xa, 0x7, 0x6}, {0x791a, 0x0, 0x9, 0x81}, {0x2e3f, 0xb, 0x4, 0x7}, {0x5, 0x1, 0x10, 0x5}]}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000440)=""/106)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x3, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2)
syz_usbip_server_init(0x3)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000540)=[{0x48, 0x0, 0x38, 0x8}, {0x6, 0xfc}]})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={<r2=>0x0}, &(0x7f0000000580)=0xc)
getpgid(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a"], 0x1c8}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtaction={0x2aa8, 0x30, 0x1, 0x70bd29, 0x25dfdbff, {}, [{0x2a94, 0x1, [@m_pedit={0x2a90, 0x1a, 0x0, 0x0, {{0xa}, {0x2a64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5f7, 0x8b60, 0x5, 0x101, 0x88}, 0x65, 0x6}, [{0xfff, 0x6, 0x3, 0x7, 0x800005, 0xa92}, {0x65a, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x8, 0x8001, 0x2, 0x1, 0x9}, {0x10, 0x7, 0xfffff000, 0x6f30, 0xf}, {0x7, 0x9, 0x4, 0x1caece98, 0xf, 0xefcf}, {0x48a0, 0xb, 0x200, 0x9, 0x7f, 0x7}, {0x1, 0x7, 0x81, 0x800, 0x4, 0x3}, {0x6, 0x9e, 0x4, 0x400, 0x8}, {0x4, 0x8, 0x3, 0xa, 0x5, 0xa99c}, {0x4, 0xfc, 0x8, 0x7, 0x5}, {0x5, 0x2, 0x7, 0xffffc8e1, 0x35a59efd, 0x400}, {0x6, 0x5, 0x4, 0xfffffff7, 0x1739, 0xffffff00}, {0x6, 0x9, 0x4, 0x7ff, 0x2, 0x7}, {0x7ff, 0xfffffffb, 0x0, 0x8, 0x22e8, 0x80}, {0x1, 0x9, 0xf, 0x7f2b, 0x5, 0x2}, {0x1, 0x6, 0x3, 0xfff, 0xf19, 0x4}, {0x9, 0x80000001, 0x3, 0xa124, 0xb6, 0x2}, {0x401, 0x1, 0x5, 0x8, 0x485, 0x4}, {0x8001, 0x5, 0x0, 0xfffffc00, 0x1, 0x9}, {0x12fb, 0x9, 0x8, 0x10f, 0x0, 0x3}, {0xfffffff8, 0x1, 0x1, 0x2, 0x1, 0x6}, {0x5, 0x8, 0x8, 0x0, 0xfffffffb, 0x9}, {0x0, 0x8, 0x9, 0x6, 0x3, 0x97}, {0x813, 0x5d8, 0x8, 0x8, 0x9, 0x1}, {0x4, 0x9, 0x8, 0x4, 0x2, 0x1}, {0x1, 0x0, 0x7fff, 0xfffffff8, 0x4, 0xfffffff0}, {0xe79, 0x7, 0x7ff, 0x5, 0x0, 0x5}, {0xc2d7, 0x400, 0x6, 0x5, 0x0, 0x2}, {0xfffffffd, 0x2, 0x5, 0xfc, 0xfffffff5, 0xfffffc00}, {0x5, 0xfff, 0x1524, 0x0, 0x7, 0xfff}, {0x6, 0x0, 0x155c, 0x7, 0x7}, {0x2, 0x1, 0xfffffff7, 0x5, 0xfffffff7, 0x7fff}, {0x2, 0x6d48, 0x1, 0x8, 0xf, 0x7}, {0x1, 0x4, 0x7341, 0xd, 0x8936}, {0x1, 0x5, 0x1, 0x3, 0xa0, 0xb285}, {0x7fffffff, 0x0, 0x4, 0xbb, 0x8, 0xfffffff8}, {0x2, 0x5, 0x6, 0x1, 0x9}, {0x8, 0x4, 0x30, 0x200, 0x2, 0x7}, {0x3, 0x3ff, 0xe, 0x0, 0xafbe, 0x3c0a}, {0x80000000, 0x3, 0x1, 0x1, 0x891f, 0x4}, {0x9, 0x80000000, 0x74, 0x9, 0x1, 0x99}, {0x9, 0x1, 0x0, 0x10001, 0x3ff, 0x7fff}, {0x9, 0xffff, 0x5ef7, 0x5, 0x3, 0x6}, {0x5, 0x19, 0x0, 0x0, 0x401, 0x500000}, {0x2, 0x1, 0x9, 0x489a, 0x2, 0xb}, {0x80000000, 0x0, 0x4, 0x4, 0x5, 0x1}, {0x0, 0x4, 0x2, 0x5, 0x3, 0x8f}, {0xffffffff, 0x45, 0xffff, 0x7, 0x5, 0x9}, {0x1, 0x0, 0x401, 0x4, 0xa32, 0x401c}, {0x5, 0x1000, 0xfffffff9, 0x1b00000, 0x0, 0xd7}, {0xbfb1, 0x2, 0x2, 0xcb3, 0x6f8, 0x7}, {0x3, 0xe70, 0xd1d, 0x4, 0x4, 0x5}, {0xc7, 0x5, 0x5, 0x9, 0x3, 0x7}, {0x34, 0x88, 0x1e97d19c, 0x2, 0x8, 0x40}, {0x11a5, 0x1, 0x10000, 0x3, 0x3, 0x1ff}, {0x8, 0x6, 0x5, 0x3, 0x1e3e4ead, 0x80000001}, {0x401, 0x6, 0x1, 0x4, 0x2, 0x4}, {0x9, 0x71cfabe7, 0x5, 0x4, 0x8, 0x9}, {0xa, 0xffff, 0x4, 0xf, 0x80, 0x9}, {0xa17, 0x1, 0x5, 0x7, 0x300000, 0xb9}, {0x5, 0x1, 0x0, 0x3, 0x9, 0x6}, {0x1, 0x2, 0xead, 0x4, 0x4, 0x3}, {0x6, 0xffffffff, 0x9, 0x7, 0xe8, 0xb76}, {0x7, 0xe, 0x2, 0xac, 0x10001, 0x5a4}, {0x1, 0x0, 0x9, 0x3, 0x7ff, 0x100}, {0x9, 0x1, 0xfffffe01, 0x8, 0x8, 0x6}, {0x10000, 0x2, 0x8, 0x0, 0x9, 0x940}, {0x21db, 0x4, 0x40000000, 0xa1, 0x96, 0x7}, {0x581ba20a, 0x9, 0x0, 0x83, 0x4, 0x4}, {0xd, 0xe3, 0x0, 0x19c3, 0x6, 0xffffffff}, {0x7ff, 0xe00000, 0x2, 0x6, 0x5d, 0x6}, {0xfff, 0x0, 0x4, 0xfffffbff, 0x3, 0x2}, {0x9f, 0x5, 0x10, 0x280000, 0x800, 0x4}, {0xf, 0x80000001, 0xffffffb2, 0x2b, 0x5, 0x2}, {0x6, 0x8, 0x7, 0x6e6, 0xe9}, {0x10000, 0xfffffff8, 0xb78, 0x4, 0x4, 0x6}, {0x1, 0xfffffffb, 0x3ff, 0x1, 0xade, 0x7ff}, {0x6, 0x2, 0xfffffff7, 0x7, 0x2, 0x7f}, {0x6, 0xf590, 0x80, 0x1, 0x8001, 0x4}, {0x6, 0xffffffff, 0x480, 0x79, 0x9, 0x6}, {0x1, 0x3d40, 0x7, 0x46d, 0x8, 0xd}, {0x7, 0x2, 0x1, 0x9, 0x84c4, 0x9}, {0x2756, 0x400, 0x4, 0x2, 0x0, 0x1}, {0xffffffff, 0xe, 0x1, 0xa8, 0x2, 0x7fffffff}, {0x2, 0x1, 0x3, 0x3, 0x4, 0x9}, {0x3b7, 0x3, 0x2, 0x7, 0x2, 0x8}, {0x5, 0x8001, 0x81, 0x56, 0x9, 0x7}, {0x1, 0x0, 0x7ff, 0x3, 0x8, 0x3}, {0x2e73, 0x1f, 0xdb72, 0x7c365bee, 0x8, 0x3}, {0x8001, 0x5, 0x6, 0x7, 0x1, 0x9}, {0xffff2508, 0x2, 0x101, 0x100, 0x0, 0x6}, {0x38f5, 0xffff8000, 0x81, 0x9, 0x7, 0x8}, {0x7, 0x9, 0x9, 0x80000001, 0x3ff, 0x101}, {0x0, 0x1, 0xb65c, 0x7, 0x81, 0x4}, {0xa, 0x95, 0x101, 0x4, 0x0, 0x5}, {0x1ff, 0x20, 0x8, 0x5592, 0x9, 0x100}, {0x4, 0x9, 0x81, 0xfffffff8, 0x7, 0xe86}, {0x3, 0x6, 0xd, 0x1, 0x4, 0x3}, {0xe, 0x9958, 0x40, 0xfffffff0, 0x1, 0x5}, {0x0, 0x7, 0xfffff07c, 0x845, 0xfff}, {0x0, 0xfffffff9, 0x6, 0x8, 0x5, 0x5}, {0x4, 0x7, 0x9, 0x330a, 0x4, 0x8}, {0x30f0a026, 0x8, 0x4, 0x7, 0x6, 0xff}, {0x7, 0x0, 0x3800000, 0x8, 0x4cc0c7e8, 0x3}, {0xb1, 0x2, 0x98, 0x8001, 0x80000001, 0x1}, {0x200, 0x9, 0xfffffffb, 0x7, 0x800, 0x8}, {0x6, 0xe, 0x23, 0xf, 0xd9, 0x5}, {0x400, 0x9, 0x100, 0x8, 0x100}, {0x0, 0x0, 0xe, 0x0, 0x4, 0x7b}, {0x92e, 0x400, 0xffffff01, 0x2d, 0xc07, 0x400}, {0x4, 0x4, 0xc76, 0x7, 0x8, 0x558b}, {0x4, 0x9, 0x2bc, 0xa0, 0x3ff, 0x2}, {0x6, 0x1, 0x5, 0x2, 0x7, 0x7f}, {0x3, 0x49a, 0x2, 0x2, 0x4, 0x10}, {0x2, 0x7, 0x9, 0x5, 0x6}, {0x63f024bb, 0xa0, 0x5, 0x3, 0x8, 0x7b}, {0x1, 0x10001, 0x81, 0x9, 0x5, 0x7}, {0x5, 0x1ff, 0x1, 0x7, 0x8000, 0xa457}, {0xc, 0x9, 0xffffff00, 0x605, 0x0, 0x774}, {0x4, 0x5, 0x8, 0x400, 0x5d85, 0x9}, {0x4, 0x2, 0x10001, 0x7, 0x0, 0x10000}, {0x9, 0x2, 0x9, 0x9, 0x1, 0x79f}, {0x6, 0x8, 0x1, 0x2, 0x0, 0xffff8001}, {0x100, 0x9, 0x4, 0x8, 0x7, 0xd2f}, {0xfffffeff, 0x4, 0x30, 0x2a, 0x6, 0x2}, {0x5, 0x3, 0x0, 0x35, 0x9, 0x9e}, {0x9, 0x5, 0xe2, 0x5, 0x0, 0x1}, {0x4, 0xa, 0x0, 0x3, 0x8}], [{0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0xbd8a62aa819b833a}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x6, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x60acfaa94dc96dc1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x6}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0xa}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x9293fc9a996600a2, 0x1}, {0x3}, {0x4}, {0x5}, {0x4}, {0x2}, {0x5}, {0x7}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x7}, {}, {0x7}, {0x5}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1ff, 0x100, 0x10000000, 0x55, 0x8000}, 0x9, 0x7}, [{0xdd, 0xffff9bcb, 0x0, 0x8, 0x40}, {0x10, 0x400, 0x1, 0x89, 0xe, 0xf}, {0x9, 0xbc, 0x15, 0x3, 0x23b0, 0x4}, {0x3, 0x3, 0x6, 0x80000001, 0x4, 0x236}, {0x4, 0x1, 0xb3, 0x4, 0x2, 0x101}, {0x5, 0x6, 0xfe2a, 0x2, 0x4d8, 0x6}, {0x6, 0x3, 0x2, 0x9, 0x6, 0x8}, {0xfff, 0x9, 0x9, 0x5, 0x3, 0x8001}, {0x0, 0x7, 0xfff, 0x8b9, 0x6, 0x7}, {0x80000001, 0x6, 0xfffff75c, 0x2262, 0x80, 0x4}, {0xfffffffa, 0xa, 0x7f, 0x8, 0x7, 0x2}, {0x8, 0x2, 0x80000001, 0x1, 0x1, 0x1}, {0xffff, 0x9, 0x1, 0xb, 0x2, 0xff}, {0xffffffff, 0x6, 0x3, 0xffffffff, 0x200}, {0x101, 0x5, 0x6, 0x4, 0xfffffffa, 0x7}, {0x0, 0x80, 0x71d3, 0x459, 0x6, 0xfffffffc}, {0x81, 0x3d7, 0x2, 0x9, 0x4, 0x5}, {0xfffffffc, 0x0, 0x6, 0x1000, 0x4, 0x1000}, {0x1, 0xdf7, 0x0, 0x3, 0x80, 0x3}, {0x5, 0xb, 0x47, 0x3, 0x7, 0x9}, {0xb2ac, 0xebe, 0x7df, 0xfffff001, 0x80, 0x539e}, {0x3, 0x10000, 0x7ff, 0xc4, 0x9, 0x7b1a}, {0x6, 0x9, 0x5cb, 0xfffffff9, 0x33c3, 0xfff}, {0x5, 0xffff9448, 0x8001, 0x7, 0x0, 0x471f83e2}, {0x7f7, 0xcba, 0x100, 0x3, 0xd, 0x5}, {0x6, 0x0, 0xffff, 0x3, 0x40, 0x946}, {0xf535, 0x10000, 0x2, 0x7, 0x6, 0x8000}, {0xffffff7b, 0x8, 0x2, 0x90000000, 0xfa, 0x2}, {0x6, 0x3, 0xc, 0x3, 0x5}, {0x2, 0x2, 0x548fb84d, 0xfffffffb, 0x9, 0x2}, {0x4, 0x0, 0x6, 0xe5, 0x80000000, 0x4}, {0xc2, 0x7ff, 0xb, 0x0, 0x4, 0x66}, {0x7, 0x30b, 0xfffffffe, 0x21, 0x5, 0x1}, {0x3f, 0x9, 0xffff, 0xffff, 0x3, 0x1}, {0x0, 0x0, 0xffff, 0x5, 0x5, 0x9ed9}, {0xffffffff, 0x8, 0x9, 0x6, 0x1, 0x2}, {0x8, 0x4, 0x17b3, 0x3, 0x4, 0x2e}, {0x3, 0x6, 0xfa, 0x2, 0x2, 0x6}, {0x2, 0x5, 0x3, 0x9, 0x63c9, 0xf5c}, {0x3, 0xffff, 0xae2c, 0xfffffffc, 0x9, 0x5}, {0x4, 0x3, 0x6, 0x4, 0xd4c, 0x9a}, {0x1, 0x4f, 0x10001, 0x3, 0x9, 0x6}, {0x6, 0x75, 0x8, 0x2, 0x101, 0x7}, {0x0, 0x4f, 0xff, 0x3, 0xc4a6, 0x2}, {0x6, 0x32000000, 0xff, 0x1000, 0x2, 0xffffffff}, {0x0, 0x6, 0x7, 0x6, 0x5, 0x1}, {0x6, 0x9, 0xffff, 0x6, 0x1, 0xb4}, {0x6, 0x1, 0xfbd1, 0x8, 0x5, 0x3}, {0x0, 0x200000, 0x7ff, 0x6, 0x6, 0xfffffffe}, {0x3, 0x8, 0x3, 0x3, 0x8, 0x5}, {0xfffffffb, 0xfff, 0xf, 0x2, 0x1, 0x4}, {0x6, 0x7f, 0x4, 0x4, 0x5, 0x10001}, {0x7, 0x6, 0xffffffff, 0x80000001, 0x400, 0x10001}, {0x100, 0x401, 0x9, 0xfffffffd, 0x4, 0x3}, {0x2, 0xfad, 0xa, 0x2, 0x7f, 0xa}, {0xa, 0x1, 0x7, 0x0, 0x21f, 0x2}, {0x1d2, 0x6, 0xd, 0x6, 0x9, 0x9}, {0x0, 0xfffffffb, 0x1, 0x7ff, 0xb52, 0x3}, {0x80000001, 0x101, 0x5, 0x7, 0x1000, 0xbc78}, {0x6, 0x8, 0x6, 0x3, 0x2, 0x3}, {0x7, 0xd, 0x0, 0xfffffffc, 0x7fff, 0xffff}, {0xca9, 0x7f, 0x5, 0x3, 0x9, 0xffffffff}, {0x4, 0x2, 0x101, 0x8, 0x6, 0xe6}, {0x9, 0xfffffac5, 0x0, 0x7, 0x8, 0x8000}, {0x1, 0x7, 0x1, 0x0, 0xcc, 0xff}, {0x400, 0xc, 0x7, 0x3, 0x100, 0x8}, {0x8001, 0x2e, 0x4, 0x400, 0x3, 0x800}, {0x5, 0x2, 0xe9, 0x7, 0xc}, {0x7ff, 0x5, 0x0, 0x5, 0x800, 0x1ff}, {0x1, 0x3, 0x9, 0x3ff, 0x4026944d, 0x9}, {0x8, 0x1, 0x4, 0x0, 0x8, 0x3}, {0x9, 0x4, 0x10000, 0x1, 0x3, 0x2}, {0x4, 0x7, 0x10000, 0x6, 0x297, 0xff}, {0x0, 0x1000, 0x4, 0x7, 0x10001}, {0x5, 0xbde, 0x5, 0x2cd78ace, 0x3, 0x8}, {0x1, 0xc6, 0x800, 0x5, 0x6, 0x40}, {0x1d47, 0x0, 0x1, 0x5, 0xffffffff, 0x11c}, {0x1, 0x162, 0xc86, 0x4, 0x2, 0x3}, {0x98f, 0x6, 0xecfd, 0x40, 0xf28, 0x7ff}, {0x5, 0x6, 0x5, 0x8, 0x2, 0x401}, {0x6, 0x40, 0x40, 0x9, 0xfffff503, 0x5f0a8000}, {0xf50c, 0x2655, 0x7f, 0x1c, 0x3, 0x9}, {0x0, 0x80, 0x4, 0x6, 0x1e7072c6, 0x1cf000}, {0xfffffff7, 0x5, 0x3ff, 0x9, 0x30}, {0xbbe5, 0x3ff, 0x7, 0x0, 0x400, 0x100}, {0x2, 0x9, 0x4, 0xec, 0x8, 0x80000001}, {0x1, 0x2, 0xd40b8fe7, 0xfb29, 0x2, 0x1d65b554}, {0x3b1b2cfe, 0x4, 0xa6, 0xc0000000, 0x401, 0xfffffff1}, {0x0, 0x7ff, 0x0, 0xffffffc0, 0x7fff800, 0x7}, {0xd, 0x5, 0x6, 0x5, 0x0, 0x10000}, {0x0, 0x6, 0x1, 0x4, 0x4, 0x4}, {0x4, 0xf0, 0x9, 0xfffffffe, 0x5}, {0x8001, 0x2ded, 0x6, 0x6, 0x7, 0x2}, {0x179, 0x2, 0xfffffffe, 0x200, 0x10000, 0x5}, {0x1, 0x1, 0x2, 0xf1e, 0x4, 0xfb6d}, {0x1, 0x6102, 0xd02, 0x5, 0xf5b, 0xf}, {0xf58, 0x3, 0x6, 0xe, 0x9, 0xffff}, {0x0, 0x9, 0x8, 0x0, 0x9}, {0x10, 0x3, 0x4, 0xa, 0xfffffff9, 0x9}, {0x6, 0x62, 0x3f3, 0x80000001, 0x5, 0x4}, {0x4, 0x81, 0x23, 0x2, 0x6, 0xff}, {0xc, 0x10, 0x7, 0x8, 0x4, 0x10001}, {0x4, 0x559ed72d, 0xcac, 0x0, 0x2, 0xffff}, {0x6, 0xe1, 0x100, 0x401, 0x200, 0x9}, {0x3a6f6741, 0xe6a4, 0x9, 0x5, 0x1, 0x4}, {0x8000, 0x6, 0x19, 0x400, 0x2, 0x8}, {0x6469c0e4, 0x0, 0x10000, 0x7, 0x2000000, 0x5}, {0x0, 0x9, 0x0, 0xfffffeff, 0x0, 0x3}, {0x200, 0x80, 0xa, 0x4, 0x7ca}, {0x5f, 0x3ff, 0x3ff, 0x489733aa, 0xcc, 0x10000}, {0x5, 0xba, 0x6, 0x1, 0x6, 0x10}, {0x1, 0xc, 0x7, 0x1ff, 0x53, 0x3}, {0x6, 0x2, 0xc, 0x2, 0x7f, 0x9}, {0xf0, 0x81, 0xfffffff7, 0x3, 0x3, 0x80000001}, {0xf5b, 0x7e, 0xb, 0x4, 0x9, 0x4}, {0x2f, 0x1, 0xffff491c, 0x9, 0xfffff8ec, 0x6bca}, {0x8001, 0x8, 0x3, 0x6, 0x8, 0xf}, {0x1, 0x7, 0x9, 0x2, 0xfffffffd, 0xffffffff}, {0xffff, 0x400, 0xb, 0x5, 0x8, 0xa}, {0x8001, 0x8, 0xbe, 0x6, 0x9, 0xffff7fff}, {0x5c, 0x0, 0x3b, 0x2, 0x6, 0xff}, {0x0, 0x6, 0x100, 0x1ff, 0x7fffffff, 0x8}, {0x8, 0x0, 0x8, 0xfffffff7, 0x10001, 0x722c}, {0x3f, 0x8, 0x4, 0x1, 0x7f, 0x1000}, {0x7, 0x2, 0x7, 0x8248, 0x64, 0xc}, {0x2, 0x1, 0x4, 0x0, 0x100, 0xc46a}, {0x1b0, 0x4, 0x8bdb, 0x7, 0x5, 0x1}, {0x0, 0x8981864, 0x90000, 0x3, 0x6, 0x2}], [{0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x5, 0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x3}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x4a04d0d0d040c9a}, {0x1, 0x1}, {0x3}, {}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x1}, {0x4}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {}, {0x7}, {0x2}, {}, {0x4, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x3, 0x7f}, 0x1, 0x2}, [{0x1, 0x5, 0x4, 0x2, 0x9, 0x3e341d61}, {0x42, 0xfffffffd, 0x8, 0x0, 0xea, 0x68000000}, {0xa8, 0x1d2, 0xe8a, 0x7d, 0x17eb, 0xb0}, {0x2, 0x100, 0x4, 0x7, 0x5}, {0x9103, 0x4, 0x5, 0x0, 0xfffff728, 0xc}, {0x3, 0x401, 0x8c, 0x6, 0x4, 0x369}, {0x4c92, 0x9, 0x2, 0x7, 0xfe07, 0x5}, {0x8f31, 0x6, 0x2, 0x101, 0x0, 0x20000}, {0xffffffff, 0x0, 0x7f, 0xf18, 0x9, 0x7}, {0x4, 0x3, 0x2e, 0x7fffffff, 0x3, 0x7}, {0x0, 0x0, 0xfffffffd, 0xfffff6ff, 0x6, 0x38000}, {0xc6a, 0x0, 0xffffff83, 0xe6ca, 0x9, 0xc}, {0xc, 0x7, 0x2, 0xfffffdfe, 0x8001, 0x8001}, {0x3f8, 0x5d0, 0x40, 0x0, 0x8, 0x7e04}, {0x3ff, 0xfffffffe, 0x8, 0x643, 0x7, 0x4a}, {0x81, 0x6, 0x6, 0x1ff, 0x100, 0x20000000}, {0x3ff, 0x3, 0x200, 0xf33d, 0x9, 0x5}, {0x81, 0x1, 0x7ff, 0xefc8, 0x0, 0x5}, {0x7fffffff, 0x6, 0x2, 0xba4, 0x6, 0x1}, {0x2, 0x38, 0x1, 0x80000001, 0x7fff, 0x1}, {0x7, 0x6, 0x101, 0x4, 0x6, 0xe57}, {0x6, 0x2, 0x401, 0x6, 0x5, 0x1}, {0x7, 0x9, 0x9, 0x2, 0xfffffff9}, {0xf21, 0x7fffffff, 0xfffffffb, 0xc, 0x2, 0x1}, {0x5, 0x1, 0x6, 0x8, 0xffff8000, 0x3}, {0x3, 0x4, 0x7, 0x3, 0x5, 0x8}, {0xffffff01, 0x7, 0x3, 0x7, 0xfff, 0x6}, {0x81, 0x6, 0x3, 0x2, 0x9, 0x3}, {0x2, 0x8, 0xda, 0x6, 0x7, 0x3}, {0x6, 0x8, 0xf86, 0x10, 0x3f, 0x7}, {0x7fffffff, 0x0, 0x81, 0x200, 0x1, 0x604}, {0x7fff, 0x0, 0x80000001, 0x68f7e38f, 0x2, 0x6}, {0xf46, 0xe, 0x6, 0x0, 0xae, 0xff}, {0xfffffffb, 0x80, 0x3, 0x9c, 0x6, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x9, 0xffffffff}, {0xc, 0x4dd0, 0x8001, 0x3, 0x0, 0x5}, {0x1, 0xffffffff, 0x2, 0xe, 0xac, 0x2}, {0x3a5b, 0x5, 0x5, 0x5, 0x7f, 0x7}, {0x1, 0x9, 0x7fffffff, 0x0, 0x2, 0x7}, {0x8, 0x7ff, 0x1, 0x7ff, 0x7dbd, 0x4ec0}, {0x7, 0x1, 0xffffffff, 0x0, 0x40, 0x5}, {0x1, 0x0, 0x6094, 0x0, 0x3}, {0xfff, 0x5, 0x80, 0x8, 0x7, 0x1}, {0x6, 0x8001, 0x1, 0x100, 0xf8ab, 0x6}, {0x4a, 0x5, 0x0, 0x8d7e, 0x1, 0x400}, {0xf, 0x7f, 0x1, 0x7fffffff, 0xc, 0x101}, {0xff, 0x81, 0x7, 0x4, 0x917, 0x6}, {0x6, 0x1fe00000, 0x3, 0x4, 0x3, 0xa0000000}, {0xa77d, 0xfffffff9, 0x8}, {0x403, 0x5, 0x1, 0x2, 0x8, 0x10001}, {0xd, 0x401, 0xf, 0x7f, 0x15e4, 0x9}, {0xfffffffc, 0x5, 0x5, 0xfffffca9, 0x90, 0x3}, {0xf4, 0x2, 0x4, 0x4, 0x2, 0x8a4a}, {0x3, 0x6, 0x4, 0x8, 0x7, 0x1}, {0x1ff, 0x6, 0x7fffffff, 0x60, 0x3, 0xe}, {0x7, 0x993b, 0x400, 0x10000, 0x3, 0x10000e}, {0x7, 0x6, 0x1, 0xfff, 0xffffffff, 0x3ffc}, {0x7, 0x10000, 0x2, 0x80000000, 0x0, 0xffff}, {0xffffffff, 0xf, 0x5, 0x4, 0xd5, 0x9}, {0x7ff, 0xae96, 0x3, 0x6, 0x3, 0x1}, {0x4, 0x2, 0x8, 0x5, 0xf424, 0x5}, {0x9, 0x5, 0xade7, 0x9, 0x2, 0x5}, {0x6, 0x4, 0x1, 0xb1e, 0x0, 0x2}, {0x6, 0xd, 0x1, 0x80, 0x5, 0xc75}, {0xf, 0x9, 0x1, 0x3e989c97, 0xfffffffe, 0x5}, {0x200, 0xdc, 0x5, 0x8000, 0x1000, 0x5}, {0x2, 0x200, 0x7, 0x8, 0x1ff, 0x3}, {0xc0, 0x1, 0x5, 0x52, 0x7, 0xfffffff8}, {0xff, 0x2, 0x10001, 0x0, 0x2, 0xffffff00}, {0x4, 0xed, 0xfffffff9, 0x1307, 0x2, 0x1}, {0x0, 0x0, 0xb, 0x6, 0x6, 0x80000000}, {0xb623, 0x10000, 0x1, 0x8, 0x6, 0x8}, {0x4, 0x9, 0xe7, 0x2, 0x40, 0x401}, {0x4, 0x8001, 0x5, 0x97c, 0xfffffffe, 0x7}, {0x0, 0x2, 0x4, 0x7, 0x80000001, 0xfffffff7}, {0x1, 0x8, 0x4, 0x865, 0x2, 0x7}, {0x6, 0x3, 0x5d, 0x8e816326, 0xc, 0x6}, {0x5, 0xee6c, 0x2, 0x5, 0x40, 0x101}, {0x2, 0xfffffff9, 0xd, 0x66, 0x5, 0x9}, {0x4, 0xfffffff8, 0x3, 0x6, 0x4, 0x5}, {0x1, 0xdd, 0x6, 0x9, 0x80000001, 0x8818518a}, {0x7, 0x1, 0xff, 0x7fff, 0x8, 0x6}, {0x9, 0x9d, 0x2, 0x9, 0x7b7fb9f0, 0x9}, {0x30, 0x7, 0x3, 0x100000, 0x8, 0xfffffe01}, {0xfffffffe, 0x6, 0x40, 0x0, 0xfffff5a2, 0x401}, {0x1, 0x100, 0x5, 0x3, 0x7, 0x7}, {0x1, 0x800, 0x3, 0x40, 0x5, 0xc}, {0x3, 0x3ff, 0x4, 0x7, 0x9, 0xd}, {0x1, 0x401, 0x9, 0x2, 0x7, 0x6}, {0x3, 0x7, 0x3, 0x1, 0x10001, 0x9}, {0x2, 0x7fff, 0x9, 0x9, 0xb}, {0x7, 0x7, 0x2, 0x0, 0x5, 0x1}, {0x9, 0x8, 0x7, 0x6, 0x7, 0x5}, {0x9, 0x7, 0x1, 0x2, 0x1, 0x80}, {0x9, 0x7f, 0x5, 0x5, 0xeb, 0x5}, {0x3, 0x1, 0x8000, 0x5, 0x8, 0x3}, {0x1, 0x5a1c, 0x8001, 0x7ebe, 0x4cf72505, 0xcd}, {0x0, 0x6, 0x6, 0x5, 0x1ff0, 0x10001}, {0xe, 0x1, 0x3, 0x2, 0x9, 0x100}, {0x5, 0x7ff, 0x3, 0x80, 0x200, 0x4}, {0x4, 0x6, 0x1ff, 0x3ff, 0x20000000, 0x8}, {0x31b, 0x8001, 0xe, 0x1, 0x3, 0x8}, {0x6, 0x2, 0x5, 0xb, 0x1, 0x8}, {0xf, 0x6, 0x98a, 0x3, 0x1, 0x3}, {0x5276, 0x366, 0x5, 0x44, 0x0, 0x5cd0}, {0x80000001, 0x8, 0x2, 0x24c, 0x7, 0x1000}, {0x1, 0x2, 0x6, 0x2, 0x5}, {0x5, 0x5, 0x80, 0x1, 0x5, 0x401}, {0x1, 0x5cf, 0xa, 0x2, 0x3, 0x8}, {0x800, 0x4, 0x2, 0x1, 0xc0, 0xfffffffa}, {0x7, 0x3ff, 0x200, 0x0, 0x2, 0x5}, {0xffffffff, 0x7, 0xf, 0x0, 0x8, 0x3}, {0x3, 0xb2b2, 0x194f9bf4, 0x87a4, 0xaab7, 0x7}, {0x7, 0x9, 0xa8e, 0x7, 0x60670000, 0x7}, {0x40, 0x10000, 0x4, 0x2, 0x0, 0x1}, {0x5, 0x9, 0xffffff7f, 0x7, 0x3}, {0x8e5, 0x1, 0xa, 0x28, 0x9, 0x80000001}, {0x3, 0x80000001, 0xe225, 0xd, 0x8, 0x9}, {0x29d, 0x401, 0xffffffff, 0xfff, 0xfded, 0x8}, {0xfffffbff, 0xe, 0x0, 0xffffff81, 0x8, 0xfffffffe}, {0xed6, 0x3, 0x5, 0x259c, 0x9, 0x3}, {0xfffffbff, 0x7f, 0x400, 0xfffffff9, 0x0, 0x1}, {0x0, 0x7ff, 0x40, 0xcd, 0x6, 0x8}, {0x6, 0x6, 0x1, 0x9, 0x61, 0xffffffff}, {0x6, 0x8, 0x0, 0x4, 0x5, 0x6}, {0x8000, 0xff, 0x516, 0x0, 0x2371, 0xffff}, {0x8, 0x1, 0x6, 0x9, 0x101, 0x86}, {0x5, 0x8, 0x186, 0x1, 0x101, 0x80000000}], [{0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0xd171415e8ad05f3d}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x3}, {0x6}, {0x4}, {0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2aa8}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000640)={r8, 0x7925, 0x1}, &(0x7f0000000680)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)

56.409768977s ago: executing program 5 (id=3312):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090829bd7000030000000100000008000100", @ANYRES32=r1, @ANYBLOB="4400028040000100240001007072696f7269747900000000000000000000000000000000000000000000000005000300", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004)

56.301860138s ago: executing program 5 (id=3317):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0)

56.254865889s ago: executing program 5 (id=3320):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@loopback, <r3=>0x0}, &(0x7f0000000280)=0x14)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r5}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', <r7=>0x0, 0x10, 0x1, 0x101, 0x6, {{0xc, 0x4, 0x2, 0x17, 0x30, 0x64, 0x0, 0xee, 0x29, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @timestamp_prespec={0x44, 0xc, 0x39, 0x3, 0x3, [{@remote}]}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="040026bd7000fbdbdf25190000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="5400018008000300000000001400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r3, @ANYBLOB="1400020070696d3672656730000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="f00500005f9f0000a857ee46c3594d53ac124900"/29, @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="18000180140002006261746164763000000000000000000018000180140002006d6163766c616e310000000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
pipe2$9p(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX])
creat(&(0x7f0000000380)='./file0\x00', 0x100000)

55.979821703s ago: executing program 5 (id=3324):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
setxattr$incfs_id(&(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000300)={'0000000000000000000000000000000', 0x30}, 0x20, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x10ef}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x44)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r3, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}}], 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0), 0x0, 0xfffffffd)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x10000}, 0x100002, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

55.095320455s ago: executing program 5 (id=3353):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)

54.72021742s ago: executing program 5 (id=3366):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_emit_ethernet(0x72, &(0x7f0000000780)={@link_local, @broadcast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x37, '\x00', {0x8, 0x6, "ceb2e9", 0x2, 0x2f, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, [@dstopts={0x3a}]}}}}}}}, 0x0)

54.70783878s ago: executing program 33 (id=3366):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
syz_emit_ethernet(0x72, &(0x7f0000000780)={@link_local, @broadcast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x37, '\x00', {0x8, 0x6, "ceb2e9", 0x2, 0x2f, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, [@dstopts={0x3a}]}}}}}}}, 0x0)

2.196945229s ago: executing program 4 (id=4255):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c)
r4 = semget$private(0x0, 0x5, 0x0)
semtimedop(r4, &(0x7f0000000480)=[{0x4, 0xfff6}], 0x1, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)

1.611876887s ago: executing program 3 (id=4261):
socket$inet6(0xa, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r1 = syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0x100114db, 0x1000, 0x2, 0x89}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x4}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0)
io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)
r5 = socket(0x1e, 0x4, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x1e, 0x4e20, @multicast2}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140))
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f00000000c0)=""/157, 0x9d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224, 0x0, r1}, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r8, 0x47f8, 0x0, 0x0, 0x0, 0x0)

1.257566532s ago: executing program 0 (id=4266):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])

1.199438193s ago: executing program 4 (id=4268):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")
sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, 0x0}, 0x2)

1.198897023s ago: executing program 3 (id=4269):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = dup(r1)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
creat(&(0x7f0000000380)='./file0\x00', 0x100000)

1.152083344s ago: executing program 0 (id=4270):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000180), 0x0}, 0x20)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x49c, 0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]})
inotify_rm_watch(0xffffffffffffffff, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cd817ad90832132674dc64c79ff8a95f17db8bc69b49c4656b8bfcbcdff9f927c021594fa57cffb9369a89ee04586834c66c60ddeb42728ecea79184c8a5afe15e6c38a4411887916d5de82ea581c45303dec8c62553a6480db3920bfa4b24fcd3d67807a8725cc09879ae31"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

1.089816015s ago: executing program 3 (id=4272):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000180), 0x0}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x49c, 0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]})
ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0)

944.727897ms ago: executing program 4 (id=4276):
socket$inet6(0xa, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r1 = syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0x100114db, 0x1000, 0x2, 0x89}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x4}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0)
io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)
r5 = socket(0x1e, 0x4, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x1e, 0x4e20, @multicast2}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000008540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000380240000800800034000000002180002801400028008000180fffffffd08000340"], 0xe8}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224, 0x0, r1}, &(0x7f0000000040)=<r10=>0x0, &(0x7f00000000c0)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r9, 0x47f8, 0x0, 0x0, 0x0, 0x0)

927.803287ms ago: executing program 3 (id=4278):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d2", 0xc6}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9fb037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe626262e0764eed651fe91d276cd8918ba1a079c716281613b127eca886d75e994a1b41314ff21f5a4fd8a7e55c65b2eebabf0db0268c53503bb309959c1c0b222c6fb8310e8f25e7c26e24baedcc72d41798c95c01626c311e9f1262dfa4dedd161672c578a7af36c8a95437f295e14a1e0c7245cb53f83cc7b4b9294bb13473331502b7735a9550", 0x1d1}], 0x2}}], 0x1, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

707.4935ms ago: executing program 0 (id=4283):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000072489927b91cc8d7c84026f9a07abb6356928860d77e00f1a0140fc5bef3bae0d62b98543249629a5dcc2d525c5d267d65503d9f5d840d24682f84165629ae1b7f6e96a1496d4496b6cc324dfd08ec5897cecbe567b4d4d7278016664f4e948cd7a8114cb92ec379a3b3a353f48d0b8445f9e31ec94ed822dfd9feb6aa5934641a6ef4a1d741ff6c44b47fda4980af5f43dd7c75f4a2ea829b9d9aea2257b9527d1da98940506a2995b73ec44bb27c6e43e65e044485c11d78343c80"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
fsopen(0x0, 0x0)
fchdir(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40000)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="05002f"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

701.99442ms ago: executing program 6 (id=4284):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = dup(r1)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
creat(&(0x7f0000000380)='./file0\x00', 0x100000)

696.35882ms ago: executing program 1 (id=4285):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000072489927b91cc8d7c84026f9a07abb6356928860d77e00f1a0140fc5bef3bae0d62b98543249629a5dcc2d525c5d267d65503d9f5d840d24682f84165629ae1b7f6e96a1496d4496b6cc324dfd08ec5897cecbe567b4d4d7278016664f4e948cd7a8114cb92ec379a3b3a353f48d0b8445f9e31ec94ed822dfd9feb6aa5934641a6ef4a1d741ff6c44b47fda4980af5f43dd7c75f4a2ea829b9d9aea2257b9527d1da98940506a2995b73ec44bb27c6e43e65e044485c11d78343c80"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
fsopen(0x0, 0x0)
fchdir(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40000)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="05002f"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

650.524341ms ago: executing program 1 (id=4286):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")
sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x2)

620.459461ms ago: executing program 0 (id=4287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@loopback, <r3=>0x0}, &(0x7f0000000280)=0x14)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r5}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', <r7=>0x0, 0x10, 0x1, 0x101, 0x6, {{0xc, 0x4, 0x2, 0x17, 0x30, 0x64, 0x0, 0xee, 0x29, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @timestamp_prespec={0x44, 0xc, 0x39, 0x3, 0x3, [{@remote}]}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="040026bd7000fbdbdf25190000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="5400018008000300000000001400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r3, @ANYBLOB="1400020070696d3672656730000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="f00500005f9f0000a857ee46c3594d53ac124900"/29, @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="18000180140002006261746164763000000000000000000018000180140002006d6163766c616e310000000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
pipe2$9p(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}}, 0x20)
write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r12 = dup(r9)
write$P9_RLERRORu(r12, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r12, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r12, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r12])

579.681862ms ago: executing program 6 (id=4288):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socket$kcm(0x28, 0x1, 0x0)
syz_emit_ethernet(0xe, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@generic={0x8}}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2080, @void, @value}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r5}, 0x40)
syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[@ANYBLOB="e5abd8bbb2bbbbbbbb"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
write$binfmt_elf64(r6, &(0x7f0000000040)=ANY=[], 0xa89)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800003400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYRES64=r7], 0x20)

491.683583ms ago: executing program 1 (id=4289):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

438.750753ms ago: executing program 6 (id=4290):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="090829bd7000030000000100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004)

411.905894ms ago: executing program 1 (id=4291):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

404.982904ms ago: executing program 6 (id=4292):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000072489927b91cc8d7c84026f9a07abb6356928860d77e00f1a0140fc5bef3bae0d62b98543249629a5dcc2d525c5d267d65503d9f5d840d24682f84165629ae1b7f6e96a1496d4496b6cc324dfd08ec5897cecbe567b4d4d7278016664f4e948cd7a8114cb92ec379a3b3a353f48d0b8445f9e31ec94ed822dfd9feb6aa5934641a6ef4a1d741ff6c44b47fda4980af5f43dd7c75f4a2ea829b9d9aea2257b9527d1da98940506a2995b73ec44bb27c6e43e65e044485c11d78343c80"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
fsopen(0x0, 0x0)
fchdir(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40000)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="05002f"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

389.625234ms ago: executing program 0 (id=4293):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090829bd700003000000010000000800", @ANYRES32=r2, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004)

388.310674ms ago: executing program 4 (id=4294):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
set_mempolicy(0x1, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000207, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="16680d9927d9765b7b30c4af498ac12e3d24fe69613a319c6bd6527ca7767469352f5e528c", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18)
futex(&(0x7f000000cffc), 0x0, 0x2, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x58, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xef03}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000005)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
brk(0x20001000)

334.451225ms ago: executing program 0 (id=4295):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x40)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000e00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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")
creat(&(0x7f0000000280)='./file0\x00', 0x16)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000340)={[{@noacl}]}, 0xfc, 0x7bb, &(0x7f00000007c0)="$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")
newfstatat(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001180), 0x2000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, &(0x7f0000000680), &(0x7f0000000000), 0x6c, r1}, 0x38)
getdents(r0, 0x0, 0x0)

297.811315ms ago: executing program 4 (id=4296):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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")
open(&(0x7f00000000c0)='.\x00', 0x0, 0x40)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
creat(0x0, 0x16)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, 0x0)
sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
newfstatat(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2000)
chown(&(0x7f0000000f80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, r0)

256.702396ms ago: executing program 1 (id=4297):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000072489927b91cc8d7c84026f9a07abb6356928860d77e00f1a0140fc5bef3bae0d62b98543249629a5dcc2d525c5d267d65503d9f5d840d24682f84165629ae1b7f6e96a1496d4496b6cc324dfd08ec5897cecbe567b4d4d7278016664f4e948cd7a8114cb92ec379a3b3a353f48d0b8445f9e31ec94ed822dfd9feb6aa5934641a6ef4a1d741ff6c44b47fda4980af5f43dd7c75f4a2ea829b9d9aea2257b9527d1da98940506a2995b73ec44bb27c6e43e65e044485c11d78343c80"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
fsopen(0x0, 0x0)
fchdir(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40000)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000006880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="05002f"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

248.388446ms ago: executing program 6 (id=4298):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = dup(r1)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
creat(&(0x7f0000000380)='./file0\x00', 0x100000)

217.743267ms ago: executing program 4 (id=4299):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

137.106888ms ago: executing program 1 (id=4300):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")
sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x2)

60.227369ms ago: executing program 3 (id=4301):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2)

59.538349ms ago: executing program 6 (id=4302):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

0s ago: executing program 3 (id=4303):
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000200)={@loopback, <r2=>0x0}, &(0x7f0000000280)=0x14)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r4}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000003c0)={'erspan0\x00', <r6=>0x0, 0x10, 0x1, 0x101, 0x6, {{0xc, 0x4, 0x2, 0x17, 0x30, 0x64, 0x0, 0xee, 0x29, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xf, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @timestamp_prespec={0x44, 0xc, 0x39, 0x3, 0x3, [{@remote}]}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="040026bd7000fbdbdf25190000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="5400018008000300000000001400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r2, @ANYBLOB="1400020070696d3672656730000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="f00500005f9f0000a857ee46c3594d53ac124900"/29, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="18000180140002006261746164763000000000000000000018000180140002006d6163766c616e310000000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
pipe2$9p(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={<r13=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r13, 0x0, 0x2, 0x2}}, 0x20)
write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r14 = dup(r8)
write$RDMA_USER_CM_CMD_SET_OPTION(r14, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r14, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r14])
creat(&(0x7f0000000380)='./file0\x00', 0x100000)

kernel console output (not intermixed with test programs):

8.867:11898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.6.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  202.022583][   T29] audit: type=1326 audit(1748965618.867:11899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.6.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  202.046326][   T29] audit: type=1326 audit(1748965618.867:11900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.6.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  202.211239][T13966] netlink: 'syz.3.3543': attribute type 1 has an invalid length.
[  202.241790][   T29] audit: type=1400 audit(1748965619.157:11901): avc:  denied  { create } for  pid=13967 comm="syz.0.3545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  202.275871][T13960] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.283126][T13960] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.371689][   T29] audit: type=1400 audit(1748965619.187:11902): avc:  denied  { bind } for  pid=13967 comm="syz.0.3545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  202.499891][T13960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.544605][T13960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.604875][T13960] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.613893][T13960] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.622922][T13960] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.631932][T13960] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.656229][T13960] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  202.725794][T13997] 9pnet_fd: Insufficient options for proto=fd
[  203.108447][T14011] syzkaller0: entered promiscuous mode
[  203.114032][T14011] syzkaller0: entered allmulticast mode
[  203.218148][T14013] syzkaller0: entered promiscuous mode
[  203.223720][T14013] syzkaller0: entered allmulticast mode
[  203.232010][T14013] FAULT_INJECTION: forcing a failure.
[  203.232010][T14013] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  203.245204][T14013] CPU: 1 UID: 0 PID: 14013 Comm: syz.0.3556 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  203.245231][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  203.245244][T14013] Call Trace:
[  203.245252][T14013]  <TASK>
[  203.245262][T14013]  __dump_stack+0x1d/0x30
[  203.245288][T14013]  dump_stack_lvl+0xe8/0x140
[  203.245320][T14013]  dump_stack+0x15/0x1b
[  203.245338][T14013]  should_fail_ex+0x265/0x280
[  203.245359][T14013]  should_fail+0xb/0x20
[  203.245401][T14013]  should_fail_usercopy+0x1a/0x20
[  203.245496][T14013]  _copy_from_iter+0xcf/0xe40
[  203.245520][T14013]  ? mntput+0x4b/0x80
[  203.245577][T14013]  ? terminate_walk+0x27f/0x2a0
[  203.245613][T14013]  tun_get_user+0x2e7/0x2500
[  203.245658][T14013]  ? ref_tracker_alloc+0x1f2/0x2f0
[  203.245681][T14013]  ? selinux_file_permission+0x1e4/0x320
[  203.245825][T14013]  tun_chr_write_iter+0x15e/0x210
[  203.245857][T14013]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  203.245895][T14013]  vfs_write+0x4a0/0x8e0
[  203.245929][T14013]  ksys_write+0xda/0x1a0
[  203.245989][T14013]  __x64_sys_write+0x40/0x50
[  203.246017][T14013]  x64_sys_call+0x2cdd/0x2fb0
[  203.246045][T14013]  do_syscall_64+0xd2/0x200
[  203.246194][T14013]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  203.246252][T14013]  ? clear_bhb_loop+0x40/0x90
[  203.246275][T14013]  ? clear_bhb_loop+0x40/0x90
[  203.246317][T14013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.246343][T14013] RIP: 0033:0x7f424092e969
[  203.246361][T14013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.246389][T14013] RSP: 002b:00007f423ef97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  203.246411][T14013] RAX: ffffffffffffffda RBX: 00007f4240b55fa0 RCX: 00007f424092e969
[  203.246429][T14013] RDX: 000000000000ffdd RSI: 00002000000000c0 RDI: 0000000000000008
[  203.246443][T14013] RBP: 00007f423ef97090 R08: 0000000000000000 R09: 0000000000000000
[  203.246455][T14013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.246469][T14013] R13: 0000000000000000 R14: 00007f4240b55fa0 R15: 00007fff616d0a18
[  203.246492][T14013]  </TASK>
[  203.379510][T14019] syzkaller0: entered promiscuous mode
[  203.471018][T14019] syzkaller0: entered allmulticast mode
[  203.634945][T14036] FAULT_INJECTION: forcing a failure.
[  203.634945][T14036] name failslab, interval 1, probability 0, space 0, times 0
[  203.647679][T14036] CPU: 0 UID: 0 PID: 14036 Comm: syz.3.3563 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  203.647763][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  203.647777][T14036] Call Trace:
[  203.647785][T14036]  <TASK>
[  203.647839][T14036]  __dump_stack+0x1d/0x30
[  203.647914][T14036]  dump_stack_lvl+0xe8/0x140
[  203.647934][T14036]  dump_stack+0x15/0x1b
[  203.647950][T14036]  should_fail_ex+0x265/0x280
[  203.648049][T14036]  should_failslab+0x8c/0xb0
[  203.648152][T14036]  kmem_cache_alloc_node_noprof+0x57/0x320
[  203.648264][T14036]  ? __alloc_skb+0x101/0x320
[  203.648299][T14036]  __alloc_skb+0x101/0x320
[  203.648373][T14036]  tcp_stream_alloc_skb+0x2d/0x1d0
[  203.648398][T14036]  tcp_sendmsg_locked+0x12f0/0x2cc0
[  203.648444][T14036]  ? __pfx_tcp_sendmsg+0x10/0x10
[  203.648546][T14036]  tcp_sendmsg+0x2f/0x50
[  203.648568][T14036]  inet_sendmsg+0x76/0xd0
[  203.648621][T14036]  __sock_sendmsg+0x102/0x180
[  203.648652][T14036]  __sys_sendto+0x268/0x330
[  203.648765][T14036]  __x64_sys_sendto+0x76/0x90
[  203.648796][T14036]  x64_sys_call+0x2eb6/0x2fb0
[  203.648815][T14036]  do_syscall_64+0xd2/0x200
[  203.648864][T14036]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  203.648891][T14036]  ? clear_bhb_loop+0x40/0x90
[  203.648932][T14036]  ? clear_bhb_loop+0x40/0x90
[  203.649029][T14036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.649055][T14036] RIP: 0033:0x7f6718b1e969
[  203.649074][T14036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.649097][T14036] RSP: 002b:00007f6717187038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  203.649180][T14036] RAX: ffffffffffffffda RBX: 00007f6718d45fa0 RCX: 00007f6718b1e969
[  203.649195][T14036] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003
[  203.649211][T14036] RBP: 00007f6717187090 R08: 0000000000000000 R09: 0000000000000000
[  203.649226][T14036] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001
[  203.649241][T14036] R13: 0000000000000000 R14: 00007f6718d45fa0 R15: 00007ffe34a7eaa8
[  203.649351][T14036]  </TASK>
[  203.866757][T14038] netlink: 'syz.1.3564': attribute type 1 has an invalid length.
[  203.874777][T14038] __nla_validate_parse: 14 callbacks suppressed
[  203.874789][T14038] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3564'.
[  203.982199][T14047] 9pnet_fd: Insufficient options for proto=fd
[  204.037597][T14049] 9pnet_fd: Insufficient options for proto=fd
[  204.152982][T14057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.207683][T14057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3572'.
[  204.216739][T14057] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3572'.
[  204.226172][T14057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3572'.
[  204.254804][T14057] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3572'.
[  204.263940][T14057] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3572'.
[  204.348495][T14065] 9pnet_fd: Insufficient options for proto=fd
[  204.447191][T14071] netlink: 'syz.6.3577': attribute type 1 has an invalid length.
[  204.455009][T14071] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3577'.
[  204.612394][T14082] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3579'.
[  204.686590][T14091] loop3: detected capacity change from 0 to 512
[  204.703702][T14091] EXT4-fs: Ignoring removed nobh option
[  204.760002][T14091] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  204.771617][T14091] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  204.781902][T14091] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3580: Corrupt directory, running e2fsck is recommended
[  204.821129][T14091] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  204.837706][T14091] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.3580: corrupted in-inode xattr: invalid ea_ino
[  204.869605][T14105] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.878737][T14091] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3580: couldn't read orphan inode 15 (err -117)
[  204.907125][T14105] 8021q: adding VLAN 0 to HW filter on device team0
[  204.920027][T14091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.940820][T14091] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  204.952538][T14091] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  204.963526][T14091] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3580: Corrupt directory, running e2fsck is recommended
[  204.977099][T14105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.995055][T14091] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  205.005675][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3583'.
[  205.006628][T14091] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  205.015515][T14106] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3583'.
[  205.025592][T14091] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3580: Corrupt directory, running e2fsck is recommended
[  205.053102][T14091] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  205.064780][T14091] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  205.074994][T14091] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3580: Corrupt directory, running e2fsck is recommended
[  205.104430][T14091] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  205.133335][T14111] FAULT_INJECTION: forcing a failure.
[  205.133335][T14111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.146707][T14111] CPU: 1 UID: 0 PID: 14111 Comm: syz.0.3585 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  205.146801][T14111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  205.146814][T14111] Call Trace:
[  205.146820][T14111]  <TASK>
[  205.146827][T14111]  __dump_stack+0x1d/0x30
[  205.146852][T14111]  dump_stack_lvl+0xe8/0x140
[  205.146942][T14111]  dump_stack+0x15/0x1b
[  205.146959][T14111]  should_fail_ex+0x265/0x280
[  205.146979][T14111]  should_fail+0xb/0x20
[  205.147040][T14111]  should_fail_usercopy+0x1a/0x20
[  205.147068][T14111]  _copy_from_user+0x1c/0xb0
[  205.147096][T14111]  __sys_bpf+0x178/0x790
[  205.147122][T14111]  __x64_sys_bpf+0x41/0x50
[  205.147183][T14111]  x64_sys_call+0x2478/0x2fb0
[  205.147205][T14111]  do_syscall_64+0xd2/0x200
[  205.147239][T14111]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  205.147309][T14111]  ? clear_bhb_loop+0x40/0x90
[  205.147331][T14111]  ? clear_bhb_loop+0x40/0x90
[  205.147354][T14111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.147375][T14111] RIP: 0033:0x7f424092e969
[  205.147406][T14111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.147424][T14111] RSP: 002b:00007f423ef97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  205.147462][T14111] RAX: ffffffffffffffda RBX: 00007f4240b55fa0 RCX: 00007f424092e969
[  205.147475][T14111] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000009
[  205.147558][T14111] RBP: 00007f423ef97090 R08: 0000000000000000 R09: 0000000000000000
[  205.147613][T14111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.147627][T14111] R13: 0000000000000000 R14: 00007f4240b55fa0 R15: 00007fff616d0a18
[  205.147647][T14111]  </TASK>
[  205.329237][T14091] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.3580: path /159/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  205.357335][T14091] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 8: comm syz.3.3580: path /159/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  205.389298][T14091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.412724][T14091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.442095][T14119] netlink: 'syz.0.3589': attribute type 1 has an invalid length.
[  205.502681][T14128] loop1: detected capacity change from 0 to 512
[  205.513020][T14128] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  205.526185][T14128] EXT4-fs (loop1): 1 truncate cleaned up
[  205.534315][T14128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.588601][T12820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.622639][T14101] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  205.659937][T14142] FAULT_INJECTION: forcing a failure.
[  205.659937][T14142] name failslab, interval 1, probability 0, space 0, times 0
[  205.665097][T14141] FAULT_INJECTION: forcing a failure.
[  205.665097][T14141] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.672785][T14142] CPU: 0 UID: 0 PID: 14142 Comm: syz.0.3597 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  205.672817][T14142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  205.672874][T14142] Call Trace:
[  205.672882][T14142]  <TASK>
[  205.672890][T14142]  __dump_stack+0x1d/0x30
[  205.672936][T14142]  dump_stack_lvl+0xe8/0x140
[  205.673029][T14142]  dump_stack+0x15/0x1b
[  205.673075][T14142]  should_fail_ex+0x265/0x280
[  205.673164][T14142]  should_failslab+0x8c/0xb0
[  205.673199][T14142]  kmem_cache_alloc_node_noprof+0x57/0x320
[  205.673239][T14142]  ? __alloc_skb+0x101/0x320
[  205.673278][T14142]  __alloc_skb+0x101/0x320
[  205.673313][T14142]  tcp_stream_alloc_skb+0x2d/0x1d0
[  205.673420][T14142]  tcp_sendmsg_locked+0x12f0/0x2cc0
[  205.673494][T14142]  ? __pfx_tcp_sendmsg+0x10/0x10
[  205.673526][T14142]  tcp_sendmsg+0x2f/0x50
[  205.673555][T14142]  inet_sendmsg+0x76/0xd0
[  205.673596][T14142]  __sock_sendmsg+0x102/0x180
[  205.673625][T14142]  __sys_sendto+0x268/0x330
[  205.673768][T14142]  __x64_sys_sendto+0x76/0x90
[  205.673805][T14142]  x64_sys_call+0x2eb6/0x2fb0
[  205.673883][T14142]  do_syscall_64+0xd2/0x200
[  205.673946][T14142]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  205.673996][T14142]  ? clear_bhb_loop+0x40/0x90
[  205.674024][T14142]  ? clear_bhb_loop+0x40/0x90
[  205.674053][T14142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.674100][T14142] RIP: 0033:0x7f424092e969
[  205.674120][T14142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.674170][T14142] RSP: 002b:00007f423ef97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  205.674194][T14142] RAX: ffffffffffffffda RBX: 00007f4240b55fa0 RCX: 00007f424092e969
[  205.674243][T14142] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003
[  205.674259][T14142] RBP: 00007f423ef97090 R08: 0000000000000000 R09: 0000000000000000
[  205.674312][T14142] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001
[  205.674330][T14142] R13: 0000000000000000 R14: 00007f4240b55fa0 R15: 00007fff616d0a18
[  205.674357][T14142]  </TASK>
[  205.689509][T14143] netlink: 'syz.6.3598': attribute type 4 has an invalid length.
[  205.698248][T14141] CPU: 1 UID: 0 PID: 14141 Comm: syz.4.3599 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  205.698289][T14141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  205.698307][T14141] Call Trace:
[  205.698316][T14141]  <TASK>
[  205.698326][T14141]  __dump_stack+0x1d/0x30
[  205.698356][T14141]  dump_stack_lvl+0xe8/0x140
[  205.698438][T14141]  dump_stack+0x15/0x1b
[  205.698461][T14141]  should_fail_ex+0x265/0x280
[  205.698491][T14141]  should_fail+0xb/0x20
[  205.698580][T14141]  should_fail_usercopy+0x1a/0x20
[  205.698612][T14141]  _copy_from_user+0x1c/0xb0
[  205.698693][T14141]  __sys_bpf+0x178/0x790
[  205.698726][T14141]  __x64_sys_bpf+0x41/0x50
[  205.698767][T14141]  x64_sys_call+0x2478/0x2fb0
[  205.698873][T14141]  do_syscall_64+0xd2/0x200
[  205.698912][T14141]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  205.698949][T14141]  ? clear_bhb_loop+0x40/0x90
[  205.698977][T14141]  ? clear_bhb_loop+0x40/0x90
[  205.699006][T14141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.699108][T14141] RIP: 0033:0x7f0b4b16e969
[  205.699128][T14141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.699153][T14141] RSP: 002b:00007f0b497d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  205.699203][T14141] RAX: ffffffffffffffda RBX: 00007f0b4b395fa0 RCX: 00007f0b4b16e969
[  205.699220][T14141] RDX: 0000000000000018 RSI: 0000200000000040 RDI: 0000000000000009
[  205.699281][T14141] RBP: 00007f0b497d7090 R08: 0000000000000000 R09: 0000000000000000
[  205.699297][T14141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.699313][T14141] R13: 0000000000000000 R14: 00007f0b4b395fa0 R15: 00007ffec5435848
[  205.699331][T14141]  </TASK>
[  206.156194][T11569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.219744][T14148] netlink: 'syz.4.3601': attribute type 1 has an invalid length.
[  206.438287][T14170] 9pnet_fd: Insufficient options for proto=fd
[  206.536976][T14177] 9pnet_fd: Insufficient options for proto=fd
[  206.638526][T14185] can0: slcan on ttyS3.
[  206.691425][T14189] 9pnet_fd: Insufficient options for proto=fd
[  206.702083][T14185] can0 (unregistered): slcan off ttyS3.
[  206.829549][T14204] netlink: 'syz.4.3628': attribute type 1 has an invalid length.
[  206.926239][   T29] kauditd_printk_skb: 103 callbacks suppressed
[  206.926258][   T29] audit: type=1400 audit(1748965623.847:12006): avc:  denied  { watch watch_reads } for  pid=14213 comm="syz.4.3631" path="/136" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  207.039367][T14223] atomic_op ffff888119058928 conn xmit_atomic 0000000000000000
[  207.077315][T14230] loop0: detected capacity change from 0 to 1024
[  207.096309][T14233] netlink: 'syz.4.3639': attribute type 1 has an invalid length.
[  207.119399][   T29] audit: type=1326 audit(1748965624.037:12007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  207.143198][   T29] audit: type=1326 audit(1748965624.037:12008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  207.167383][T14230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.167845][   T29] audit: type=1326 audit(1748965624.037:12009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  207.203105][   T29] audit: type=1326 audit(1748965624.037:12010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  207.226916][   T29] audit: type=1326 audit(1748965624.037:12011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  207.250697][   T29] audit: type=1326 audit(1748965624.037:12012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  207.274349][   T29] audit: type=1326 audit(1748965624.037:12013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  207.286804][T14230] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.3638: Allocating blocks 449-513 which overlap fs metadata
[  207.298193][   T29] audit: type=1326 audit(1748965624.037:12014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  207.335448][   T29] audit: type=1326 audit(1748965624.037:12015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.1.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  207.489206][T14257] EXT4-fs (loop0): pa ffff888106aa1a80: logic 48, phys. 177, len 21
[  207.497432][T14257] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[  207.599618][T14264] vlan2: entered allmulticast mode
[  207.604883][T14264] macvtap0: entered allmulticast mode
[  207.888806][T11333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.431886][T14287] 9pnet_fd: Insufficient options for proto=fd
[  208.601213][T14293] netlink: 'syz.0.3646': attribute type 4 has an invalid length.
[  208.621650][T14302] netlink: 'syz.6.3655': attribute type 1 has an invalid length.
[  208.639285][T14293] loop0: detected capacity change from 0 to 512
[  208.697656][T14308] loop3: detected capacity change from 0 to 1024
[  208.706036][T14293] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  208.755662][T14308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.859333][T14308] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3656: Allocating blocks 449-513 which overlap fs metadata
[  209.106802][T14323] can0: slcan on ttyS3.
[  209.251425][T14323] can0 (unregistered): slcan off ttyS3.
[  209.263572][T14328] can0: slcan on ttyS3.
[  209.272612][T14330] EXT4-fs (loop3): pa ffff888106aa1af0: logic 48, phys. 177, len 21
[  209.280654][T14330] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[  209.294677][T14333] netlink: 'syz.4.3662': attribute type 1 has an invalid length.
[  209.302505][T14333] __nla_validate_parse: 11 callbacks suppressed
[  209.302516][T14333] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3662'.
[  209.361229][T11569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.390206][T14346] loop0: detected capacity change from 0 to 512
[  209.399756][T14346] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  209.445237][T14346] EXT4-fs (loop0): 1 truncate cleaned up
[  209.457074][T14346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.493094][T14327] can0 (unregistered): slcan off ttyS3.
[  209.512937][T11333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.557640][T14363] 9pnet_fd: Insufficient options for proto=fd
[  209.591110][T14372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3671'.
[  209.608194][T14372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3671'.
[  209.628555][T14371] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3669'.
[  209.709576][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3669'.
[  209.718711][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3669'.
[  209.730771][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3669'.
[  209.784780][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3669'.
[  209.793885][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3669'.
[  209.819981][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3669'.
[  209.966788][T14394] loop3: detected capacity change from 0 to 256
[  209.979127][T14394] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  209.994847][T14394] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  210.003667][T14394] FAT-fs (loop3): Filesystem has been set read-only
[  210.284521][T14427] 9pnet_fd: Insufficient options for proto=fd
[  210.556040][T14453] loop3: detected capacity change from 0 to 512
[  210.569374][T14450] atomic_op ffff888148072128 conn xmit_atomic 0000000000000000
[  210.573362][T14453] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  210.779611][T14477] netlink: 'syz.1.3698': attribute type 1 has an invalid length.
[  211.154261][T14523] 9pnet_fd: Insufficient options for proto=fd
[  211.379415][T14542] netlink: 'syz.6.3718': attribute type 1 has an invalid length.
[  211.512563][T14555] 9pnet_fd: Insufficient options for proto=fd
[  211.579520][T14562] vhci_hcd: invalid port number 16
[  211.584863][T14562] vhci_hcd: default hub control req: 0000 v0008 i0010 l0
[  211.785414][T14588] netlink: 'syz.4.3733': attribute type 1 has an invalid length.
[  211.890678][T14591] 9pnet_fd: Insufficient options for proto=fd
[  211.965696][   T29] kauditd_printk_skb: 290 callbacks suppressed
[  211.965710][   T29] audit: type=1400 audit(1748965628.887:12306): avc:  denied  { bind } for  pid=14603 comm="syz.4.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  211.979291][T14602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=14602 comm=syz.6.3738
[  212.031658][T14604] FAULT_INJECTION: forcing a failure.
[  212.031658][T14604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.044997][T14604] CPU: 1 UID: 0 PID: 14604 Comm: syz.4.3739 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  212.045032][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  212.045047][T14604] Call Trace:
[  212.045055][T14604]  <TASK>
[  212.045064][T14604]  __dump_stack+0x1d/0x30
[  212.045090][T14604]  dump_stack_lvl+0xe8/0x140
[  212.045135][T14604]  dump_stack+0x15/0x1b
[  212.045153][T14604]  should_fail_ex+0x265/0x280
[  212.045187][T14604]  should_fail+0xb/0x20
[  212.045207][T14604]  should_fail_usercopy+0x1a/0x20
[  212.045302][T14604]  _copy_from_user+0x1c/0xb0
[  212.045329][T14604]  ___sys_sendmsg+0xc1/0x1d0
[  212.045374][T14604]  __x64_sys_sendmsg+0xd4/0x160
[  212.045416][T14604]  x64_sys_call+0x2999/0x2fb0
[  212.045566][T14604]  do_syscall_64+0xd2/0x200
[  212.045598][T14604]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  212.045640][T14604]  ? clear_bhb_loop+0x40/0x90
[  212.045661][T14604]  ? clear_bhb_loop+0x40/0x90
[  212.045714][T14604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.045740][T14604] RIP: 0033:0x7f0b4b16e969
[  212.045759][T14604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.045837][T14604] RSP: 002b:00007f0b497d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.045859][T14604] RAX: ffffffffffffffda RBX: 00007f0b4b395fa0 RCX: 00007f0b4b16e969
[  212.045874][T14604] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[  212.045896][T14604] RBP: 00007f0b497d7090 R08: 0000000000000000 R09: 0000000000000000
[  212.045911][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.045926][T14604] R13: 0000000000000000 R14: 00007f0b4b395fa0 R15: 00007ffec5435848
[  212.045949][T14604]  </TASK>
[  212.321824][T14618] netlink: 'syz.6.3747': attribute type 1 has an invalid length.
[  212.385180][   T29] audit: type=1326 audit(1748965629.307:12307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  212.408897][   T29] audit: type=1326 audit(1748965629.307:12308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  212.432575][   T29] audit: type=1326 audit(1748965629.307:12309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  212.456307][   T29] audit: type=1326 audit(1748965629.307:12310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  212.481390][   T29] audit: type=1326 audit(1748965629.307:12311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  212.505075][   T29] audit: type=1326 audit(1748965629.307:12312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  212.528871][   T29] audit: type=1326 audit(1748965629.307:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  212.552487][   T29] audit: type=1326 audit(1748965629.307:12314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  212.576161][   T29] audit: type=1326 audit(1748965629.307:12315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.6.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  212.604302][T14626] 9pnet_fd: Insufficient options for proto=fd
[  212.807677][T14649] FAULT_INJECTION: forcing a failure.
[  212.807677][T14649] name failslab, interval 1, probability 0, space 0, times 0
[  212.820583][T14649] CPU: 0 UID: 0 PID: 14649 Comm: syz.0.3758 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  212.820618][T14649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  212.820712][T14649] Call Trace:
[  212.820719][T14649]  <TASK>
[  212.820727][T14649]  __dump_stack+0x1d/0x30
[  212.820754][T14649]  dump_stack_lvl+0xe8/0x140
[  212.820779][T14649]  dump_stack+0x15/0x1b
[  212.820855][T14649]  should_fail_ex+0x265/0x280
[  212.820882][T14649]  should_failslab+0x8c/0xb0
[  212.820912][T14649]  kmem_cache_alloc_noprof+0x50/0x310
[  212.820977][T14649]  ? skb_clone+0x151/0x1f0
[  212.821014][T14649]  skb_clone+0x151/0x1f0
[  212.821049][T14649]  __netlink_deliver_tap+0x2c9/0x500
[  212.821089][T14649]  netlink_unicast+0x64c/0x670
[  212.821128][T14649]  netlink_sendmsg+0x58b/0x6b0
[  212.821166][T14649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.821203][T14649]  __sock_sendmsg+0x142/0x180
[  212.821305][T14649]  ____sys_sendmsg+0x31e/0x4e0
[  212.821345][T14649]  ___sys_sendmsg+0x17b/0x1d0
[  212.821418][T14649]  __x64_sys_sendmsg+0xd4/0x160
[  212.821452][T14649]  x64_sys_call+0x2999/0x2fb0
[  212.821515][T14649]  do_syscall_64+0xd2/0x200
[  212.821567][T14649]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  212.821598][T14649]  ? clear_bhb_loop+0x40/0x90
[  212.821734][T14649]  ? clear_bhb_loop+0x40/0x90
[  212.821762][T14649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.821788][T14649] RIP: 0033:0x7f424092e969
[  212.821806][T14649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.821835][T14649] RSP: 002b:00007f423ef97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.821858][T14649] RAX: ffffffffffffffda RBX: 00007f4240b55fa0 RCX: 00007f424092e969
[  212.821931][T14649] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003
[  212.821946][T14649] RBP: 00007f423ef97090 R08: 0000000000000000 R09: 0000000000000000
[  212.821960][T14649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.821975][T14649] R13: 0000000000000000 R14: 00007f4240b55fa0 R15: 00007fff616d0a18
[  212.821997][T14649]  </TASK>
[  212.841033][T14653] loop1: detected capacity change from 0 to 512
[  212.869157][T14651] FAULT_INJECTION: forcing a failure.
[  212.869157][T14651] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.945345][T14657] loop0: detected capacity change from 0 to 512
[  212.946994][T14651] CPU: 0 UID: 0 PID: 14651 Comm: syz.6.3759 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  212.947083][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  212.947100][T14651] Call Trace:
[  212.947108][T14651]  <TASK>
[  212.947119][T14651]  __dump_stack+0x1d/0x30
[  212.947148][T14651]  dump_stack_lvl+0xe8/0x140
[  212.947174][T14651]  dump_stack+0x15/0x1b
[  212.947260][T14651]  should_fail_ex+0x265/0x280
[  212.947355][T14651]  should_fail+0xb/0x20
[  212.947380][T14651]  should_fail_usercopy+0x1a/0x20
[  212.947485][T14651]  _copy_from_user+0x1c/0xb0
[  212.947521][T14651]  __sys_bpf+0x178/0x790
[  212.947556][T14651]  __x64_sys_bpf+0x41/0x50
[  212.947654][T14651]  x64_sys_call+0x2478/0x2fb0
[  212.947684][T14651]  do_syscall_64+0xd2/0x200
[  212.947725][T14651]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  212.947810][T14651]  ? clear_bhb_loop+0x40/0x90
[  212.947911][T14651]  ? clear_bhb_loop+0x40/0x90
[  212.947959][T14651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.947988][T14651] RIP: 0033:0x7fd3352de969
[  212.948009][T14651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.948033][T14651] RSP: 002b:00007fd333947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  212.948059][T14651] RAX: ffffffffffffffda RBX: 00007fd335505fa0 RCX: 00007fd3352de969
[  212.948076][T14651] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000009
[  212.948174][T14651] RBP: 00007fd333947090 R08: 0000000000000000 R09: 0000000000000000
[  212.948190][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.948207][T14651] R13: 0000000000000000 R14: 00007fd335505fa0 R15: 00007fff44331308
[  212.948248][T14651]  </TASK>
[  212.965332][T14653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  213.117685][T14658] 9pnet_fd: Insufficient options for proto=fd
[  213.121303][T14657] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  213.129734][T14653] EXT4-fs (loop1): 1 truncate cleaned up
[  213.199076][T14657] EXT4-fs (loop0): mount failed
[  213.201162][T14653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.329419][T14669] loop3: detected capacity change from 0 to 512
[  213.356297][T12820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.366016][T14669] EXT4-fs: Ignoring removed nobh option
[  213.378419][T14669] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  213.390020][T14669] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  213.400230][T14669] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3765: Corrupt directory, running e2fsck is recommended
[  213.439898][T14669] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  213.484900][T14669] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.3765: corrupted in-inode xattr: invalid ea_ino
[  213.535263][T14669] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3765: couldn't read orphan inode 15 (err -117)
[  213.578155][T14669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.603773][T14669] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  213.615420][T14669] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  213.625600][T14669] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3765: Corrupt directory, running e2fsck is recommended
[  213.701094][T14669] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  213.712841][T14669] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  213.723105][T14669] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3765: Corrupt directory, running e2fsck is recommended
[  213.776940][T14701] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  213.788490][T14701] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  213.798661][T14701] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3765: Corrupt directory, running e2fsck is recommended
[  213.838417][T14703] Illegal XDP return value 4294967274 on prog  (id 2554) dev syz_tun, expect packet loss!
[  213.884456][T11569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.969235][T14698] loop1: detected capacity change from 0 to 256
[  213.988770][T14707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.000010][T14698] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.038024][T14707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.114509][T14707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.154099][T14707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.198963][T14715] FAULT_INJECTION: forcing a failure.
[  214.198963][T14715] name failslab, interval 1, probability 0, space 0, times 0
[  214.211734][T14715] CPU: 0 UID: 0 PID: 14715 Comm: syz.1.3781 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  214.211773][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  214.211795][T14715] Call Trace:
[  214.211803][T14715]  <TASK>
[  214.211811][T14715]  __dump_stack+0x1d/0x30
[  214.211833][T14715]  dump_stack_lvl+0xe8/0x140
[  214.211854][T14715]  dump_stack+0x15/0x1b
[  214.211874][T14715]  should_fail_ex+0x265/0x280
[  214.211932][T14715]  should_failslab+0x8c/0xb0
[  214.211956][T14715]  kmem_cache_alloc_noprof+0x50/0x310
[  214.211984][T14715]  ? skb_clone+0x151/0x1f0
[  214.212028][T14715]  skb_clone+0x151/0x1f0
[  214.212066][T14715]  __netlink_deliver_tap+0x2c9/0x500
[  214.212112][T14715]  netlink_unicast+0x64c/0x670
[  214.212258][T14715]  netlink_sendmsg+0x58b/0x6b0
[  214.212293][T14715]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.212324][T14715]  __sock_sendmsg+0x142/0x180
[  214.212351][T14715]  ____sys_sendmsg+0x31e/0x4e0
[  214.212421][T14715]  ___sys_sendmsg+0x17b/0x1d0
[  214.212476][T14715]  __x64_sys_sendmsg+0xd4/0x160
[  214.212590][T14715]  x64_sys_call+0x2999/0x2fb0
[  214.212618][T14715]  do_syscall_64+0xd2/0x200
[  214.212655][T14715]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  214.212761][T14715]  ? clear_bhb_loop+0x40/0x90
[  214.212811][T14715]  ? clear_bhb_loop+0x40/0x90
[  214.212839][T14715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.212877][T14715] RIP: 0033:0x7fb8451ee969
[  214.212981][T14715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.213050][T14715] RSP: 002b:00007fb843857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.213071][T14715] RAX: ffffffffffffffda RBX: 00007fb845415fa0 RCX: 00007fb8451ee969
[  214.213082][T14715] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003
[  214.213094][T14715] RBP: 00007fb843857090 R08: 0000000000000000 R09: 0000000000000000
[  214.213108][T14715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.213139][T14715] R13: 0000000000000000 R14: 00007fb845415fa0 R15: 00007ffc1fc15558
[  214.213252][T14715]  </TASK>
[  214.467427][T14707] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.497003][T14710] loop0: detected capacity change from 0 to 256
[  214.528404][T14710] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.553200][T14707] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.589187][T14707] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.604540][T14707] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.638500][T14729] loop1: detected capacity change from 0 to 512
[  214.681759][T14729] EXT4-fs: Ignoring removed nobh option
[  214.708980][T14729] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  214.720599][T14729] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  214.730912][T14729] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3788: Corrupt directory, running e2fsck is recommended
[  214.776296][T14729] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  214.806527][T14743] loop3: detected capacity change from 0 to 512
[  214.815357][T14729] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.3788: corrupted in-inode xattr: invalid ea_ino
[  214.829132][T14743] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  214.837221][T14729] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3788: couldn't read orphan inode 15 (err -117)
[  214.859417][T14729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.875028][T14729] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  214.886657][T14729] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  214.896814][T14729] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3788: Corrupt directory, running e2fsck is recommended
[  215.010013][T14729] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  215.021586][T14729] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  215.031870][T14729] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3788: Corrupt directory, running e2fsck is recommended
[  215.063124][T14729] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  215.074869][T14729] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  215.085032][T14729] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3788: Corrupt directory, running e2fsck is recommended
[  215.129189][T12820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.482342][T14792] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.489620][T14792] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.544740][T14792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.557385][T14792] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.601871][T14792] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.610819][T14792] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.619808][T14792] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.628765][T14792] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.724184][T14801] loop3: detected capacity change from 0 to 512
[  215.755050][T14801] EXT4-fs: Ignoring removed nobh option
[  215.770983][T14801] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  215.782694][T14801] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  215.793013][T14801] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3817: Corrupt directory, running e2fsck is recommended
[  215.810979][T14801] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  215.845698][T14801] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.3817: corrupted in-inode xattr: invalid ea_ino
[  215.879142][T14801] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3817: couldn't read orphan inode 15 (err -117)
[  215.893042][T14801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.914233][T14801] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  215.925937][T14801] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  215.936056][T14801] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3817: Corrupt directory, running e2fsck is recommended
[  215.961996][T14807] 9pnet_fd: Insufficient options for proto=fd
[  216.007259][T14801] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  216.018822][T14801] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  216.018847][T14801] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3817: Corrupt directory, running e2fsck is recommended
[  216.032235][T14815] netlink: 'syz.4.3823': attribute type 1 has an invalid length.
[  216.049585][T14815] __nla_validate_parse: 17 callbacks suppressed
[  216.049599][T14815] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3823'.
[  216.118028][T11569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.250196][T14833] loop3: detected capacity change from 0 to 512
[  216.271221][T14833] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  216.369741][T14844] 9pnet_fd: Insufficient options for proto=fd
[  217.004827][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3860'.
[  217.091703][T14905] loop0: detected capacity change from 0 to 512
[  217.098792][T14905] EXT4-fs: Ignoring removed nobh option
[  217.127012][T14905] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  217.138686][T14905] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  217.148795][T14905] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3863: Corrupt directory, running e2fsck is recommended
[  217.205518][T14905] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  217.232171][T14831] syz.1.3831 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  217.246417][T14905] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.3863: corrupted in-inode xattr: invalid ea_ino
[  217.246461][T14831] CPU: 0 UID: 0 PID: 14831 Comm: syz.1.3831 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  217.246495][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  217.246513][T14831] Call Trace:
[  217.246522][T14831]  <TASK>
[  217.246531][T14831]  __dump_stack+0x1d/0x30
[  217.246637][T14831]  dump_stack_lvl+0xe8/0x140
[  217.246663][T14831]  dump_stack+0x15/0x1b
[  217.246686][T14831]  dump_header+0x81/0x220
[  217.246788][T14831]  oom_kill_process+0x334/0x3f0
[  217.246901][T14831]  out_of_memory+0x979/0xb80
[  217.246941][T14831]  try_charge_memcg+0x5e6/0x9e0
[  217.246983][T14831]  obj_cgroup_charge_pages+0xa6/0x150
[  217.247098][T14831]  __memcg_kmem_charge_page+0x9f/0x170
[  217.247143][T14831]  __alloc_frozen_pages_noprof+0x188/0x360
[  217.247179][T14831]  alloc_pages_mpol+0xb3/0x250
[  217.247225][T14831]  alloc_pages_noprof+0x90/0x130
[  217.247303][T14831]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  217.247365][T14831]  __kvmalloc_node_noprof+0x312/0x4f0
[  217.247407][T14831]  ? ip_set_alloc+0x1f/0x30
[  217.247456][T14831]  ? ip_set_alloc+0x1f/0x30
[  217.247509][T14831]  ? __kmalloc_cache_noprof+0x189/0x320
[  217.247583][T14831]  ip_set_alloc+0x1f/0x30
[  217.247619][T14831]  hash_netiface_create+0x282/0x740
[  217.247661][T14831]  ? __pfx_hash_netiface_create+0x10/0x10
[  217.247775][T14831]  ip_set_create+0x3c9/0x960
[  217.247831][T14831]  ? __nla_parse+0x40/0x60
[  217.247866][T14831]  nfnetlink_rcv_msg+0x4c3/0x590
[  217.247964][T14831]  ? selinux_capable+0x1f9/0x270
[  217.247996][T14831]  netlink_rcv_skb+0x123/0x220
[  217.248061][T14831]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  217.248102][T14831]  nfnetlink_rcv+0x16b/0x1690
[  217.248131][T14831]  ? insn_get_prefixes+0x99d/0xbe0
[  217.248238][T14831]  ? insn_get_prefixes+0x99d/0xbe0
[  217.248281][T14831]  ? inat_get_opcode_attribute+0xc/0x20
[  217.248317][T14831]  ? insn_get_opcode+0x750/0x790
[  217.248361][T14831]  ? insn_get_modrm+0x32a/0x360
[  217.248402][T14831]  ? insn_get_modrm+0x32a/0x360
[  217.248441][T14831]  ? __rcu_read_lock+0x37/0x50
[  217.248472][T14831]  ? kmem_cache_free+0x38/0x300
[  217.248607][T14831]  ? __pte_offset_map_lock+0x1d4/0x230
[  217.248655][T14831]  ? switch_ldt+0x7a/0x140
[  217.248699][T14831]  ? do_sync_core+0x39/0x60
[  217.248797][T14831]  ? put_dec_trunc8+0x119/0x140
[  217.248837][T14831]  ? should_fail_ex+0x30/0x280
[  217.248864][T14831]  ? selinux_nlmsg_lookup+0x99/0x890
[  217.248893][T14831]  ? selinux_netlink_send+0x59f/0x5f0
[  217.248930][T14831]  ? __rcu_read_unlock+0x34/0x70
[  217.248959][T14831]  ? __netlink_lookup+0x266/0x2a0
[  217.249027][T14831]  netlink_unicast+0x5a1/0x670
[  217.249065][T14831]  netlink_sendmsg+0x58b/0x6b0
[  217.249146][T14831]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.249206][T14831]  __sock_sendmsg+0x142/0x180
[  217.249235][T14831]  ____sys_sendmsg+0x31e/0x4e0
[  217.249313][T14831]  ___sys_sendmsg+0x17b/0x1d0
[  217.249372][T14831]  __x64_sys_sendmsg+0xd4/0x160
[  217.249543][T14831]  x64_sys_call+0x2999/0x2fb0
[  217.249576][T14831]  do_syscall_64+0xd2/0x200
[  217.249613][T14831]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  217.249648][T14831]  ? clear_bhb_loop+0x40/0x90
[  217.249735][T14831]  ? clear_bhb_loop+0x40/0x90
[  217.249763][T14831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.249790][T14831] RIP: 0033:0x7fb8451ee969
[  217.249809][T14831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.249833][T14831] RSP: 002b:00007fb843857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.249915][T14831] RAX: ffffffffffffffda RBX: 00007fb845415fa0 RCX: 00007fb8451ee969
[  217.249931][T14831] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000007
[  217.249947][T14831] RBP: 00007fb845270ab1 R08: 0000000000000000 R09: 0000000000000000
[  217.250035][T14831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.250050][T14831] R13: 0000000000000000 R14: 00007fb845415fa0 R15: 00007ffc1fc15558
[  217.250075][T14831]  </TASK>
[  217.250095][T14831] memory: usage 307200kB, limit 307200kB, failcnt 290
[  217.318624][T14905] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3863: couldn't read orphan inode 15 (err -117)
[  217.320391][T14831] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[  217.320406][T14831] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  217.320419][T14831] Memory cgroup stats for /syz1:
[  217.320998][T14831] cache 0
[  217.354668][T14905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.358168][T14831] rss 4096
[  217.358179][T14831] shmem 0
[  217.403939][T14905] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  217.406964][T14831] mapped_file 0
[  217.406976][T14831] dirty 0
[  217.411812][T14905] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  217.417189][T14831] writeback 0
[  217.417200][T14831] workingset_refault_anon 71
[  217.421875][T14905] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3863: Corrupt directory, running e2fsck is recommended
[  217.426977][T14831] workingset_refault_file 181
[  217.497899][T14905] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  217.502104][T14831] swap 200704
[  217.507155][T14905] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  217.511914][T14831] swapcached 4096
[  217.511924][T14831] nr_memmap_boot_pages 297511
[  217.516670][T14905] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3863: Corrupt directory, running e2fsck is recommended
[  217.521960][T14831] pgpgin 297510
[  217.521972][T14831] pglazyfree 96156
[  217.538942][T14905] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  217.540941][T14831] pgfault 58
[  217.540952][T14831] a_other 0
[  217.545752][T14905] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  217.550156][T14831] inactive_anon 0
[  217.550169][T14831] active_anon 0
[  217.550178][T14831] inactive_file 0
[  217.556250][T14905] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3863: Corrupt directory, running e2fsck is recommended
[  217.560930][T14831] active_file 0
[  217.560941][T14831] hierarchical_memory_limit 314572800
[  217.604306][T14905] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  217.612131][T14831] hierarchical_memsw_limit 9223372036854771712
[  217.631583][T14905] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.3863: path /200/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  217.636165][T14831] total_cache 0
[  217.657587][T14905] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 8: comm syz.0.3863: path /200/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  217.666090][T14831] total_rss 4096
[  217.666102][T14831] total_shmem 0
[  217.943930][T14831] total_mapped_file 0
[  217.947941][T14831] total_dirty 0
[  217.951483][T14831] total_writeback 0
[  217.955285][T14831] total_workingset_refault_anon 71
[  217.960388][T14831] total_workingset_refault_file 181
[  217.965696][T14831] total_swap 200704
[  217.969559][T14831] total_swapcached 4096
[  217.973729][T14831] total_nr_memmap_boot_pages 297511
[  217.978939][T14831] total_pgpgin 297510
[  217.982946][T14831] total_pglazyfree 96156
[  217.987184][T14831] total_pgfault 58
[  217.991016][T14831] total_a_other 0
[  217.994696][T14831] total_inactive_anon 0
[  217.998861][T14831] total_active_anon 0
[  218.002893][T14831] total_inactive_file 0
[  218.007087][T14831] total_active_file 0
[  218.011152][T14831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3831,pid=14830,uid=0
[  218.025886][T14831] Memory cgroup out of memory: Killed process 14830 (syz.1.3831) total-vm:93748kB, anon-rss:936kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  218.066883][T14916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.083494][T11333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.094981][   T29] kauditd_printk_skb: 195 callbacks suppressed
[  218.094995][   T29] audit: type=1400 audit(1748965635.017:12510): avc:  granted  { setsecparam } for  pid=14920 comm="syz.6.3869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  218.120654][T14919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3867'.
[  218.129661][T14919] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3867'.
[  218.201327][   T29] audit: type=1326 audit(1748965635.087:12511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  218.202165][T14919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3867'.
[  218.225030][   T29] audit: type=1326 audit(1748965635.087:12512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  218.257662][   T29] audit: type=1326 audit(1748965635.087:12513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  218.281366][   T29] audit: type=1326 audit(1748965635.087:12514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  218.320966][T14919] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3867'.
[  218.330089][T14919] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3867'.
[  218.338080][T14929] loop3: detected capacity change from 0 to 512
[  218.365200][T14929] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  218.459044][   T29] audit: type=1326 audit(1748965635.377:12515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  218.482750][   T29] audit: type=1326 audit(1748965635.377:12516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  218.526235][   T29] audit: type=1326 audit(1748965635.407:12517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  218.549854][   T29] audit: type=1326 audit(1748965635.407:12518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  218.573531][   T29] audit: type=1326 audit(1748965635.407:12519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14922 comm="syz.6.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  218.746291][T14952] loop0: detected capacity change from 0 to 1024
[  218.763137][T14952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.810341][T14952] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.3881: Allocating blocks 449-513 which overlap fs metadata
[  218.839860][T14962] loop1: detected capacity change from 0 to 512
[  218.908205][T14962] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  218.931481][T14962] EXT4-fs (loop1): mount failed
[  218.991118][T14973] EXT4-fs (loop0): pa ffff888106a6d540: logic 48, phys. 177, len 21
[  218.999217][T14973] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[  219.094198][T11333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.094734][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3891'.
[  219.146068][T14987] netlink: 'syz.0.3893': attribute type 1 has an invalid length.
[  219.153972][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3893'.
[  219.229300][T14995] loop0: detected capacity change from 0 to 512
[  219.245082][T14995] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  219.261637][T14995] EXT4-fs (loop0): mount failed
[  219.401143][T15012] 9pnet_fd: Insufficient options for proto=fd
[  219.491786][T15008] loop0: detected capacity change from 0 to 256
[  219.499789][T15008] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  219.513642][T15008] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  219.522436][T15008] FAT-fs (loop0): Filesystem has been set read-only
[  219.529379][T15019] 9pnet_fd: Insufficient options for proto=fd
[  219.578084][T15023] loop3: detected capacity change from 0 to 512
[  219.592770][T15023] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  219.607813][T15023] EXT4-fs (loop3): mount failed
[  219.835146][T15042] 9pnet_fd: Insufficient options for proto=fd
[  219.860889][T15044] 9pnet_fd: Insufficient options for proto=fd
[  219.928708][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3919'.
[  220.056054][T15052] loop0: detected capacity change from 0 to 256
[  220.073902][T15052] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  220.086341][T15052] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  220.095050][T15052] FAT-fs (loop0): Filesystem has been set read-only
[  220.105455][T15066] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.112686][T15066] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.154874][T15066] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.165579][T15066] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.201375][T15066] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.210303][T15066] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.219307][T15066] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.228286][T15066] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.314288][T15076] 9pnet_fd: Insufficient options for proto=fd
[  220.473513][T15092] loop0: detected capacity change from 0 to 512
[  220.483586][T15092] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  220.656228][T15103] 9pnet_fd: Insufficient options for proto=fd
[  220.819667][T15117] netlink: 'syz.4.3949': attribute type 1 has an invalid length.
[  221.098003][T15139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.270128][T15143] __nla_validate_parse: 2 callbacks suppressed
[  221.270148][T15143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3958'.
[  221.285496][T15143] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3958'.
[  221.414294][T15143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3958'.
[  221.493821][T15143] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3958'.
[  221.503110][T15143] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3958'.
[  221.548641][T15149] loop0: detected capacity change from 0 to 512
[  221.601291][T15149] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  221.983340][T15165] 9pnet_fd: Insufficient options for proto=fd
[  222.017623][T15167] 9pnet_fd: Insufficient options for proto=fd
[  222.046167][T15169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3970'.
[  222.064678][T15169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3970'.
[  222.125658][T15173] capability: warning: `GPL' uses deprecated v2 capabilities in a way that may be insecure
[  222.210690][T15181] 9pnet_fd: Insufficient options for proto=fd
[  222.438498][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3972'.
[  222.518475][T15187] bond1: entered promiscuous mode
[  222.523623][T15187] bond1: entered allmulticast mode
[  222.566284][T15187] 8021q: adding VLAN 0 to HW filter on device bond1
[  222.702506][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3982'.
[  223.164425][T15231] loop3: detected capacity change from 0 to 512
[  223.251576][T15231] __quota_error: 165 callbacks suppressed
[  223.251592][T15231] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6).
[  223.270610][T15231] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  223.286542][T15231] EXT4-fs (loop3): mount failed
[  223.638583][T15257] loop1: detected capacity change from 0 to 512
[  223.647276][T15257] EXT4-fs: Ignoring removed nobh option
[  223.667702][T15257] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  223.679363][T15257] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  223.689598][T15257] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4007: Corrupt directory, running e2fsck is recommended
[  223.711145][T15257] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  223.740145][T15222] syz.0.3992 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  223.754415][T15222] CPU: 0 UID: 0 PID: 15222 Comm: syz.0.3992 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  223.754446][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  223.754460][T15222] Call Trace:
[  223.754547][T15222]  <TASK>
[  223.754557][T15222]  __dump_stack+0x1d/0x30
[  223.754581][T15222]  dump_stack_lvl+0xe8/0x140
[  223.754599][T15222]  dump_stack+0x15/0x1b
[  223.754678][T15222]  dump_header+0x81/0x220
[  223.754709][T15222]  oom_kill_process+0x334/0x3f0
[  223.754824][T15222]  out_of_memory+0x979/0xb80
[  223.754865][T15222]  try_charge_memcg+0x5e6/0x9e0
[  223.754911][T15222]  obj_cgroup_charge_pages+0xa6/0x150
[  223.754973][T15222]  __memcg_kmem_charge_page+0x9f/0x170
[  223.755005][T15222]  __alloc_frozen_pages_noprof+0x188/0x360
[  223.755069][T15222]  alloc_pages_mpol+0xb3/0x250
[  223.755109][T15222]  alloc_pages_noprof+0x90/0x130
[  223.755206][T15222]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  223.755264][T15222]  __kvmalloc_node_noprof+0x312/0x4f0
[  223.755362][T15222]  ? ip_set_alloc+0x1f/0x30
[  223.755405][T15222]  ? ip_set_alloc+0x1f/0x30
[  223.755497][T15222]  ? __kmalloc_cache_noprof+0x189/0x320
[  223.755546][T15222]  ip_set_alloc+0x1f/0x30
[  223.755573][T15222]  hash_netiface_create+0x282/0x740
[  223.755606][T15222]  ? __pfx_hash_netiface_create+0x10/0x10
[  223.755702][T15222]  ip_set_create+0x3c9/0x960
[  223.755779][T15222]  ? __nla_parse+0x40/0x60
[  223.755804][T15222]  nfnetlink_rcv_msg+0x4c3/0x590
[  223.755877][T15222]  ? selinux_capable+0x1f9/0x270
[  223.755898][T15222]  netlink_rcv_skb+0x123/0x220
[  223.756004][T15222]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  223.756033][T15222]  nfnetlink_rcv+0x16b/0x1690
[  223.756106][T15222]  ? __kfree_skb+0x109/0x150
[  223.756133][T15222]  ? nlmon_xmit+0x4f/0x60
[  223.756192][T15222]  ? consume_skb+0x49/0x150
[  223.756219][T15222]  ? nlmon_xmit+0x4f/0x60
[  223.756324][T15222]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  223.756357][T15222]  ? __dev_queue_xmit+0x11c0/0x1fb0
[  223.756386][T15222]  ? __dev_queue_xmit+0x182/0x1fb0
[  223.756479][T15222]  ? __rcu_read_lock+0x37/0x50
[  223.756500][T15222]  ? css_rstat_updated+0xcd/0x5b0
[  223.756560][T15222]  ? free_unref_folios+0xaf/0x750
[  223.756651][T15222]  ? ref_tracker_free+0x37d/0x3e0
[  223.756677][T15222]  ? __netlink_deliver_tap+0x4dc/0x500
[  223.756767][T15222]  netlink_unicast+0x5a1/0x670
[  223.756796][T15222]  netlink_sendmsg+0x58b/0x6b0
[  223.756883][T15222]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.756915][T15222]  __sock_sendmsg+0x142/0x180
[  223.756936][T15222]  ____sys_sendmsg+0x31e/0x4e0
[  223.756990][T15222]  ___sys_sendmsg+0x17b/0x1d0
[  223.757034][T15222]  __x64_sys_sendmsg+0xd4/0x160
[  223.757071][T15222]  x64_sys_call+0x2999/0x2fb0
[  223.757092][T15222]  do_syscall_64+0xd2/0x200
[  223.757122][T15222]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  223.757149][T15222]  ? clear_bhb_loop+0x40/0x90
[  223.757306][T15222]  ? clear_bhb_loop+0x40/0x90
[  223.757327][T15222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.757412][T15222] RIP: 0033:0x7f424092e969
[  223.757429][T15222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.757466][T15222] RSP: 002b:00007f423ef97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.757486][T15222] RAX: ffffffffffffffda RBX: 00007f4240b55fa0 RCX: 00007f424092e969
[  223.757543][T15222] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000008
[  223.757556][T15222] RBP: 00007f42409b0ab1 R08: 0000000000000000 R09: 0000000000000000
[  223.757569][T15222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.757582][T15222] R13: 0000000000000000 R14: 00007f4240b55fa0 R15: 00007fff616d0a18
[  223.757602][T15222]  </TASK>
[  223.757612][T15222] memory: usage 307196kB, limit 307200kB, failcnt 542
[  223.803570][T15257] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.4007: corrupted in-inode xattr: invalid ea_ino
[  223.803955][T15222] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0
[  223.831519][T15257] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4007: couldn't read orphan inode 15 (err -117)
[  223.835110][T15222] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  223.857640][T15257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.860558][T15222] Memory cgroup stats for /syz0:
[  223.877954][T15222] cache 0
[  223.909636][T15257] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  223.910361][T15222] rss 0
[  223.910371][T15222] shmem 0
[  223.910380][T15222] mapped_file 0
[  223.915893][T15257] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  223.920522][T15222] dirty 0
[  223.920532][T15222] writeback 0
[  223.925142][T15257] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4007: Corrupt directory, running e2fsck is recommended
[  223.930852][T15257] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  223.934043][T15222] workingset_refault_anon 285
[  223.934113][T15222] workingset_refault_file 914
[  223.938393][T15257] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  223.943680][T15222] swap 360448
[  223.943691][T15222] swapcached 12288
[  223.943701][T15222] nr_memmap_boot_pages 299023
[  223.943711][T15222] pgpgin 299020
[  223.948883][T15257] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4007: Corrupt directory, running e2fsck is recommended
[  223.954020][T15222] pglazyfree 120723
[  223.965419][T15257] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  223.966068][T15222] pgfault 182
[  223.971059][T15257] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  223.976081][T15222] a_other 12288
[  223.981562][T15257] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4007: Corrupt directory, running e2fsck is recommended
[  223.986285][T15222] inactive_anon 0
[  223.986297][T15222] active_anon 0
[  224.012776][   T29] audit: type=1326 audit(1748965640.937:12682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15264 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4b16e969 code=0x7ffc0000
[  224.015427][T15222] inactive_file 0
[  224.020154][   T29] audit: type=1326 audit(1748965640.937:12683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15264 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f0b4b16e969 code=0x7ffc0000
[  224.024726][T15222] active_file 0
[  224.024738][T15222] hierarchical_memory_limit 314572800
[  224.024749][T15222] hierarchical_memsw_limit 9223372036854771712
[  224.024761][T15222] total_cache 0
[  224.024769][T15222] total_rss 0
[  224.024778][T15222] total_shmem 0
[  224.030825][   T29] audit: type=1326 audit(1748965640.937:12684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15264 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4b16e969 code=0x7ffc0000
[  224.030854][   T29] audit: type=1326 audit(1748965640.937:12685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15264 comm="syz.4.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4b16e969 code=0x7ffc0000
[  224.035547][T15222] total_mapped_file 0
[  224.047666][T15257] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  224.050754][T15222] total_dirty 0
[  224.050765][T15222] total_writeback 0
[  224.497952][T15222] total_workingset_refault_anon 285
[  224.503205][T15222] total_workingset_refault_file 914
[  224.508431][T15222] total_swap 360448
[  224.512272][T15222] total_swapcached 12288
[  224.516517][T15222] total_nr_memmap_boot_pages 299023
[  224.521739][T15222] total_pgpgin 299020
[  224.525815][T15222] total_pglazyfree 120723
[  224.530141][T15222] total_pgfault 182
[  224.534088][T15222] total_a_other 12288
[  224.538085][T15222] total_inactive_anon 0
[  224.542257][T15222] total_active_anon 0
[  224.546239][T15222] total_inactive_file 0
[  224.550382][T15222] total_active_file 0
[  224.554408][T15222] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3992,pid=15221,uid=0
[  224.569191][T15222] Memory cgroup out of memory: Killed process 15221 (syz.0.3992) total-vm:93748kB, anon-rss:936kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  224.589071][T12820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.789361][T15292] netlink: 'syz.1.4023': attribute type 1 has an invalid length.
[  224.797202][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'.
[  224.990821][   T29] audit: type=1326 audit(1748965641.887:12686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424092e969 code=0x7ffc0000
[  225.014714][   T29] audit: type=1326 audit(1748965641.887:12687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424092e969 code=0x7ffc0000
[  225.038435][   T29] audit: type=1326 audit(1748965641.887:12688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15304 comm="syz.0.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424092e969 code=0x7ffc0000
[  225.062075][   T29] audit: type=1326 audit(1748965641.887:12689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15295 comm="syz.3.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6718b1e969 code=0x7ffc0000
[  225.085715][   T29] audit: type=1326 audit(1748965641.887:12690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15295 comm="syz.3.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6718b1e969 code=0x7ffc0000
[  225.116230][T15302] vlan2: entered allmulticast mode
[  225.121412][T15302] macvtap0: entered allmulticast mode
[  225.249522][T15305] loop0: detected capacity change from 0 to 256
[  225.266439][T15305] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  225.301687][T15305] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  225.310381][T15305] FAT-fs (loop0): Filesystem has been set read-only
[  225.539472][T15337] loop3: detected capacity change from 0 to 512
[  225.551225][T15337] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  226.000163][T15374] 9pnet_fd: Insufficient options for proto=fd
[  226.805924][T15402] 9pnet_fd: Insufficient options for proto=fd
[  226.843156][T15404] 9pnet_fd: Insufficient options for proto=fd
[  226.879344][T15408] __nla_validate_parse: 1 callbacks suppressed
[  226.879362][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4067'.
[  227.012619][T15417] bond1: left promiscuous mode
[  227.263238][T15427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.359458][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4078'.
[  227.368607][T15430] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4078'.
[  227.389593][T15436] 9pnet_fd: Insufficient options for proto=fd
[  227.416786][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4078'.
[  227.458005][T15430] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4078'.
[  227.467230][T15430] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4078'.
[  227.650487][T15451] loop0: detected capacity change from 0 to 512
[  227.833767][T15451] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  227.964337][T15451] EXT4-fs (loop0): mount failed
[  228.484662][T15472] netlink: 'syz.6.4092': attribute type 1 has an invalid length.
[  228.492599][T15472] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4092'.
[  228.836596][T15487] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.843956][T15487] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.921593][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4100'.
[  229.099083][T15487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.120307][T15502] netlink: 'syz.0.4103': attribute type 1 has an invalid length.
[  229.128263][T15502] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4103'.
[  229.164902][T15487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.258047][T15487] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.266479][T15487] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.274993][T15487] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.283412][T15487] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.388601][   T29] kauditd_printk_skb: 57 callbacks suppressed
[  229.388620][   T29] audit: type=1326 audit(1748965646.307:12747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.1.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  229.418398][T15513] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.438338][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4111'.
[  229.462599][   T29] audit: type=1326 audit(1748965646.307:12748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.1.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  229.486349][   T29] audit: type=1326 audit(1748965646.307:12749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.1.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  229.509871][   T29] audit: type=1326 audit(1748965646.307:12750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.1.4108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8451ee969 code=0x7ffc0000
[  229.511721][T15513] 8021q: adding VLAN 0 to HW filter on device team0
[  229.546333][T15532] loop3: detected capacity change from 0 to 512
[  229.553868][T15532] EXT4-fs: Ignoring removed nobh option
[  229.590347][T15532] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  229.602028][T15532] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  229.612194][T15532] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4114: Corrupt directory, running e2fsck is recommended
[  229.782534][T15535] netlink: 'syz.0.4115': attribute type 1 has an invalid length.
[  229.802137][T15532] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  229.810370][T15532] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.4114: corrupted in-inode xattr: invalid ea_ino
[  229.828818][T15532] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4114: couldn't read orphan inode 15 (err -117)
[  229.842751][T15532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.922485][T15532] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  229.934078][T15532] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  229.944186][T15532] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4114: Corrupt directory, running e2fsck is recommended
[  229.987121][T15513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  230.032432][T15548] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  230.044020][T15548] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  230.054120][T15548] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4114: Corrupt directory, running e2fsck is recommended
[  230.557350][T15532] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  230.568995][T15532] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  230.579139][T15532] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4114: Corrupt directory, running e2fsck is recommended
[  232.141294][T15554] __nla_validate_parse: 6 callbacks suppressed
[  232.141314][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4119'.
[  232.286475][T15532] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  232.663075][T15456] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  232.894594][   T29] audit: type=1326 audit(1748965649.247:12751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424092e969 code=0x7ffc0000
[  232.918353][   T29] audit: type=1326 audit(1748965649.247:12752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424092e969 code=0x7ffc0000
[  232.942034][   T29] audit: type=1326 audit(1748965649.247:12753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424092e969 code=0x7ffc0000
[  232.965948][   T29] audit: type=1326 audit(1748965649.247:12754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424092e969 code=0x7ffc0000
[  232.990030][   T29] audit: type=1326 audit(1748965649.247:12755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424092e969 code=0x7ffc0000
[  233.013916][   T29] audit: type=1326 audit(1748965649.557:12756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f424092e969 code=0x7ffc0000
[  233.031670][T15566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4122'.
[  233.048330][T11569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.098612][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4125'.
[  233.243198][T15575] 9pnet_fd: Insufficient options for proto=fd
[  233.344822][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'.
[  233.493618][T15597] blktrace: Concurrent blktraces are not allowed on sg0
[  233.551146][T15603] loop1: detected capacity change from 0 to 512
[  233.573989][T15603] EXT4-fs: Ignoring removed nobh option
[  233.607415][T15603] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  233.618980][T15603] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  233.629163][T15603] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4141: Corrupt directory, running e2fsck is recommended
[  233.643964][T15603] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  233.644097][T15603] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.4141: corrupted in-inode xattr: invalid ea_ino
[  233.644567][T15603] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4141: couldn't read orphan inode 15 (err -117)
[  233.645618][T15603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.649523][T15603] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  233.649625][T15603] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  233.649656][T15603] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4141: Corrupt directory, running e2fsck is recommended
[  233.653856][T15603] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  233.653886][T15603] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  233.653981][T15603] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4141: Corrupt directory, running e2fsck is recommended
[  233.657346][T15603] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  233.657374][T15603] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  233.657395][T15603] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4141: Corrupt directory, running e2fsck is recommended
[  233.677633][T15603] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  233.693647][T15614] netlink: 'syz.0.4143': attribute type 1 has an invalid length.
[  233.845402][T15614] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4143'.
[  233.855120][T12820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.151212][T15628] loop3: detected capacity change from 0 to 256
[  234.159372][T15628] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  234.208269][T15628] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  234.217001][T15628] FAT-fs (loop3): Filesystem has been set read-only
[  234.219290][T15636] loop1: detected capacity change from 0 to 1024
[  234.256543][T15636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.364999][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4157'.
[  234.534824][T15653] netlink: 'syz.0.4160': attribute type 1 has an invalid length.
[  234.542799][T15653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4160'.
[  234.729139][T15636] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.4154: Allocating blocks 449-513 which overlap fs metadata
[  234.748803][T15631] syz.6.4153 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  234.759830][T15631] CPU: 0 UID: 0 PID: 15631 Comm: syz.6.4153 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  234.759883][T15631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  234.759896][T15631] Call Trace:
[  234.759901][T15631]  <TASK>
[  234.759908][T15631]  __dump_stack+0x1d/0x30
[  234.759930][T15631]  dump_stack_lvl+0xe8/0x140
[  234.759952][T15631]  dump_stack+0x15/0x1b
[  234.760038][T15631]  dump_header+0x81/0x220
[  234.760074][T15631]  oom_kill_process+0x334/0x3f0
[  234.760182][T15631]  out_of_memory+0x979/0xb80
[  234.760218][T15631]  try_charge_memcg+0x5e6/0x9e0
[  234.760281][T15631]  charge_memcg+0x51/0xc0
[  234.760300][T15631]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  234.760325][T15631]  __read_swap_cache_async+0x1df/0x350
[  234.760509][T15631]  swap_cluster_readahead+0x277/0x3e0
[  234.760563][T15631]  swapin_readahead+0xde/0x6f0
[  234.760655][T15631]  ? __filemap_get_folio+0x49f/0x650
[  234.760679][T15631]  ? swap_cache_get_folio+0x77/0x200
[  234.760720][T15631]  do_swap_page+0x301/0x2430
[  234.760759][T15631]  ? finish_task_switch+0xad/0x2b0
[  234.760790][T15631]  ? __pfx_default_wake_function+0x10/0x10
[  234.760870][T15631]  handle_mm_fault+0x9a5/0x2be0
[  234.760951][T15631]  ? mas_walk+0xf2/0x120
[  234.760985][T15631]  do_user_addr_fault+0x636/0x1090
[  234.761019][T15631]  ? fpregs_restore_userregs+0xad/0x1d0
[  234.761132][T15631]  ? switch_fpu_return+0xe/0x20
[  234.761169][T15631]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  234.761203][T15631]  exc_page_fault+0x62/0xa0
[  234.761239][T15631]  asm_exc_page_fault+0x26/0x30
[  234.761400][T15631] RIP: 0033:0x7fd3351b53ac
[  234.761420][T15631] Code: 66 0f 1f 44 00 00 69 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00
[  234.761445][T15631] RSP: 002b:00007fff44331470 EFLAGS: 00010202
[  234.761465][T15631] RAX: 0000000000000000 RBX: 00007fd335505fa0 RCX: 0000000000000000
[  234.761479][T15631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558664d808
[  234.761495][T15631] RBP: 00007fd335507ba0 R08: 0000000000000000 R09: 7fffffffffffffff
[  234.761511][T15631] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003954c
[  234.761528][T15631] R13: 00007fd335506080 R14: ffffffffffffffff R15: 00007fff44331580
[  234.761611][T15631]  </TASK>
[  234.986825][T15631] memory: usage 307196kB, limit 307200kB, failcnt 159
[  234.986844][T15631] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[  234.986861][T15631] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  234.986875][T15631] Memory cgroup stats for /syz6:
[  234.993754][T15665] EXT4-fs (loop1): pa ffff888106aa1b60: logic 48, phys. 177, len 21
[  234.993825][T15665] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[  235.041576][T15631] cache 0
[  235.041588][T15631] rss 0
[  235.041594][T15631] shmem 0
[  235.041599][T15631] mapped_file 0
[  235.041605][T15631] dirty 0
[  235.041611][T15631] writeback 8192
[  235.041618][T15631] workingset_refault_anon 140
[  235.041628][T15631] workingset_refault_file 0
[  235.041637][T15631] swap 192512
[  235.041645][T15631] swapcached 12288
[  235.041660][T15631] nr_memmap_boot_pages 90857
[  235.041670][T15631] pgpgin 90854
[  235.041678][T15631] pglazyfree 37032
[  235.041687][T15631] pgfault 87
[  235.041696][T15631] a_other 8192
[  235.041704][T15631] inactive_anon 4096
[  235.041713][T15631] active_anon 0
[  235.041721][T15631] inactive_file 0
[  235.041799][T15631] active_file 0
[  235.041842][T15631] hierarchical_memory_limit 314572800
[  235.041853][T15631] hierarchical_memsw_limit 9223372036854771712
[  235.041865][T15631] total_cache 0
[  235.041922][T15631] total_rss 0
[  235.041931][T15631] total_shmem 0
[  235.041940][T15631] total_mapped_file 0
[  235.041949][T15631] total_dirty 0
[  235.041957][T15631] total_writeback 8192
[  235.041979][T15631] total_workingset_refault_anon 140
[  235.041987][T15631] total_workingset_refault_file 0
[  235.041996][T15631] total_swap 192512
[  235.042002][T15631] total_swapcached 12288
[  235.042010][T15631] total_nr_memmap_boot_pages 90857
[  235.042063][T15631] total_pgpgin 90854
[  235.042073][T15631] total_pglazyfree 37032
[  235.042083][T15631] total_pgfault 87
[  235.042092][T15631] total_a_other 8192
[  235.042102][T15631] total_inactive_anon 4096
[  235.042112][T15631] total_active_anon 0
[  235.042147][T15631] total_inactive_file 0
[  235.042154][T15631] total_active_file 0
[  235.042161][T15631] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4153,pid=15631,uid=0
[  235.042251][T15631] Memory cgroup out of memory: Killed process 15631 (syz.6.4153) total-vm:93676kB, anon-rss:932kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  235.099426][T12820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.321705][T15669] netlink: 'syz.1.4165': attribute type 1 has an invalid length.
[  235.329466][T15669] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4165'.
[  235.389059][T15680] loop0: detected capacity change from 0 to 512
[  235.408122][T15680] EXT4-fs: Ignoring removed nobh option
[  235.415892][T15682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.481416][T15680] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  235.492980][T15680] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  235.503118][T15680] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4168: Corrupt directory, running e2fsck is recommended
[  235.523209][T15691] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4169'.
[  235.532273][T15691] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4169'.
[  235.558756][   T29] kauditd_printk_skb: 61 callbacks suppressed
[  235.558814][   T29] audit: type=1326 audit(1748965652.467:12818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.4.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4b16e969 code=0x7ffc0000
[  235.588593][   T29] audit: type=1326 audit(1748965652.467:12819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.4.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4b16e969 code=0x7ffc0000
[  235.611118][T15697] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.612352][   T29] audit: type=1326 audit(1748965652.467:12820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.4.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f0b4b16e969 code=0x7ffc0000
[  235.622092][T15697] 8021q: adding VLAN 0 to HW filter on device team0
[  235.642554][   T29] audit: type=1326 audit(1748965652.467:12821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.4.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4b16e969 code=0x7ffc0000
[  235.649395][T15690] loop3: detected capacity change from 0 to 512
[  235.680148][T15690] EXT4-fs: Ignoring removed nobh option
[  235.684610][T15680] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  235.699764][T15690] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  235.701601][T15680] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.4168: corrupted in-inode xattr: invalid ea_ino
[  235.711456][T15690] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  235.730020][T15680] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.4168: couldn't read orphan inode 15 (err -117)
[  235.734870][T15690] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4172: Corrupt directory, running e2fsck is recommended
[  235.748579][T15680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.776264][T15690] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  235.786047][T15690] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.4172: corrupted in-inode xattr: invalid ea_ino
[  235.826610][T15680] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  235.838316][T15680] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  235.848431][T15680] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4168: Corrupt directory, running e2fsck is recommended
[  235.863647][T15697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.886896][T15690] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4172: couldn't read orphan inode 15 (err -117)
[  235.909617][T15690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.949984][T15703] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  235.961592][T15703] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  235.971763][T15703] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4168: Corrupt directory, running e2fsck is recommended
[  236.033204][T15690] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  236.044756][T15690] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  236.054879][T15690] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4172: Corrupt directory, running e2fsck is recommended
[  236.234024][T15709] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  236.245642][T15709] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  236.255853][T15709] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4172: Corrupt directory, running e2fsck is recommended
[  236.325047][T15710] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  236.336604][T15710] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  236.346792][T15710] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4168: Corrupt directory, running e2fsck is recommended
[  236.413043][T15713] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  236.424636][T15713] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  236.434850][T15713] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4172: Corrupt directory, running e2fsck is recommended
[  236.504307][T15680] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  236.520590][T15715] netlink: 'syz.4.4178': attribute type 1 has an invalid length.
[  236.542193][T15680] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.4168: path /258/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  236.578971][T15690] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  236.620038][T15680] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 8: comm syz.0.4168: path /258/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  236.667406][T11569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.783301][T11333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.834914][   T29] audit: type=1326 audit(1748965653.757:12822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz.6.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  236.910140][   T29] audit: type=1326 audit(1748965653.777:12823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz.6.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  236.933830][   T29] audit: type=1326 audit(1748965653.777:12824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz.6.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  237.029425][T15740] loop0: detected capacity change from 0 to 512
[  237.040120][T15740] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  237.301268][T15749] loop1: detected capacity change from 0 to 512
[  237.313025][T15749] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  237.324840][T15751] netlink: 'syz.6.4192': attribute type 1 has an invalid length.
[  237.332752][T15751] __nla_validate_parse: 10 callbacks suppressed
[  237.332765][T15751] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4192'.
[  237.366347][T15757] loop3: detected capacity change from 0 to 512
[  237.383887][T15757] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6).
[  237.402374][T15757] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  237.421823][T15757] EXT4-fs (loop3): mount failed
[  237.497864][   T29] audit: type=1326 audit(1748965654.417:12825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6718b1e969 code=0x7ffc0000
[  237.521648][   T29] audit: type=1326 audit(1748965654.417:12826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15765 comm="syz.3.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6718b1e969 code=0x7ffc0000
[  238.193102][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'.
[  238.206153][T15794] vlan2: entered allmulticast mode
[  238.211361][T15794] macvtap0: entered allmulticast mode
[  238.216810][T15794] veth0_macvtap: entered allmulticast mode
[  238.396373][T15798] netlink: 'syz.6.4205': attribute type 1 has an invalid length.
[  238.404175][T15798] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4205'.
[  239.629594][T15834] netlink: 'syz.0.4216': attribute type 1 has an invalid length.
[  239.637454][T15834] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4216'.
[  239.731043][T15840] netlink: 'syz.0.4218': attribute type 1 has an invalid length.
[  239.738848][T15840] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4218'.
[  239.931914][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4219'.
[  240.067091][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4221'.
[  240.397521][T15860] loop0: detected capacity change from 0 to 512
[  240.465598][T15860] EXT4-fs: Ignoring removed nobh option
[  240.612739][T15860] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  240.624347][T15860] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  240.634451][T15860] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4223: Corrupt directory, running e2fsck is recommended
[  240.770980][T15860] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  240.810270][T15870] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.825916][T15860] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.4223: corrupted in-inode xattr: invalid ea_ino
[  240.843243][T15872] loop1: detected capacity change from 0 to 512
[  240.869907][T15870] 8021q: adding VLAN 0 to HW filter on device team0
[  240.887805][T15860] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.4223: couldn't read orphan inode 15 (err -117)
[  240.915198][T15872] __quota_error: 22 callbacks suppressed
[  240.915217][T15872] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[  240.942138][T15870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  240.972958][T15860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.986306][T15872] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  241.011506][T15873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4227'.
[  241.020567][T15873] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4227'.
[  241.032687][T15860] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  241.044249][T15860] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  241.054352][T15860] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4223: Corrupt directory, running e2fsck is recommended
[  241.082360][T15872] EXT4-fs (loop1): mount failed
[  241.090067][T15873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4227'.
[  241.169511][T15879] loop1: detected capacity change from 0 to 1024
[  241.178605][T15860] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  241.190216][T15860] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  241.200400][T15860] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4223: Corrupt directory, running e2fsck is recommended
[  241.245495][T15879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.309348][T15882] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  241.321078][T15882] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  241.331303][T15882] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4223: Corrupt directory, running e2fsck is recommended
[  241.357263][T15860] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  241.449478][T11333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.535970][T15891] netlink: 'syz.6.4233': attribute type 1 has an invalid length.
[  241.693658][T15894] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.4229: Allocating blocks 497-513 which overlap fs metadata
[  241.732936][   T29] audit: type=1326 audit(1748965658.657:12849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.6.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  241.781589][T15894] EXT4-fs (loop1): pa ffff888106aa1af0: logic 256, phys. 385, len 8
[  241.789643][T15894] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  241.800006][   T29] audit: type=1326 audit(1748965658.657:12850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.6.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  241.823759][   T29] audit: type=1326 audit(1748965658.677:12851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.6.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  241.847372][   T29] audit: type=1326 audit(1748965658.677:12852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.6.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  241.870989][   T29] audit: type=1326 audit(1748965658.677:12853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.6.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  241.894792][   T29] audit: type=1326 audit(1748965658.677:12854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.6.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  242.021169][T12820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.144169][   T29] audit: type=1326 audit(1748965659.067:12855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.6.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  242.167933][   T29] audit: type=1326 audit(1748965659.067:12856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.6.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  242.219857][T15922] 9pnet_fd: Insufficient options for proto=fd
[  242.246378][T15920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.280481][   T29] audit: type=1326 audit(1748965659.197:12857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.6.4238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3352de969 code=0x7ffc0000
[  242.366774][T15928] loop0: detected capacity change from 0 to 1024
[  242.387498][T15928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.496804][T15928] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.4245: Allocating blocks 449-513 which overlap fs metadata
[  242.602363][T15943] loop1: detected capacity change from 0 to 512
[  242.619149][T15945] loop3: detected capacity change from 0 to 512
[  242.641455][T15943] EXT4-fs: Ignoring removed nobh option
[  242.653178][T15948] EXT4-fs (loop0): pa ffff888106a6d5b0: logic 48, phys. 177, len 21
[  242.661275][T15948] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[  242.676794][T15943] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  242.688440][T15943] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  242.698705][T15943] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4250: Corrupt directory, running e2fsck is recommended
[  242.700532][T15945] EXT4-fs: Ignoring removed nobh option
[  242.736943][T15943] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  242.761368][T15943] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.4250: corrupted in-inode xattr: invalid ea_ino
[  242.808623][T15943] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4250: couldn't read orphan inode 15 (err -117)
[  242.833061][T15945] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  242.833339][T11333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.844576][T15945] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  242.863728][T15945] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4251: Corrupt directory, running e2fsck is recommended
[  242.891838][T15943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.934674][T15943] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  242.946224][T15943] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  242.956420][T15943] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4250: Corrupt directory, running e2fsck is recommended
[  242.970666][T15945] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  243.016592][T15945] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.4251: corrupted in-inode xattr: invalid ea_ino
[  243.046187][T15955] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.053437][T15955] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.063502][T15945] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4251: couldn't read orphan inode 15 (err -117)
[  243.081442][T15943] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  243.092985][T15943] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  243.103137][T15943] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4250: Corrupt directory, running e2fsck is recommended
[  243.112081][T15945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.195418][T15960] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  243.207023][T15960] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  243.217159][T15960] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4250: Corrupt directory, running e2fsck is recommended
[  243.261763][T15943] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  243.277073][T15943] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.4250: path /202/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  243.280942][T15945] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  243.308790][T15945] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  243.319091][T15945] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4251: Corrupt directory, running e2fsck is recommended
[  243.336968][T15943] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 8: comm syz.1.4250: path /202/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  243.350996][T15955] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.367593][T15955] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.388420][T15955] batman_adv: batadv0: Interface deactivated: macvlan0
[  243.402507][T15945] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  243.414075][T15945] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  243.424190][T15945] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4251: Corrupt directory, running e2fsck is recommended
[  243.442658][T12820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.455507][T15968] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  243.467085][T15968] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  243.477249][T15968] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4251: Corrupt directory, running e2fsck is recommended
[  243.494285][T15955] veth0_macvtap: left allmulticast mode
[  243.506006][T15955] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.515025][T15955] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.523966][T15955] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.532953][T15955] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.545701][T11569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.581545][T15963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  243.597244][T15967] __nla_validate_parse: 8 callbacks suppressed
[  243.597257][T15967] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4256'.
[  243.612701][T15967] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4256'.
[  243.669339][T15967] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4256'.
[  243.710076][T15967] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4256'.
[  243.719291][T15967] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4256'.
[  243.745201][T15978] loop1: detected capacity change from 0 to 512
[  243.784488][T15978] EXT4-fs: Ignoring removed nobh option
[  243.854082][T15978] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  243.865711][T15978] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  243.875861][T15978] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4259: Corrupt directory, running e2fsck is recommended
[  243.933025][T15978] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  243.989265][T15978] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.4259: corrupted in-inode xattr: invalid ea_ino
[  244.063641][T15978] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4259: couldn't read orphan inode 15 (err -117)
[  244.103360][T15978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.138628][T15978] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  244.150242][T15978] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  244.160377][T15978] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4259: Corrupt directory, running e2fsck is recommended
[  244.172712][T15994] 9pnet_fd: Insufficient options for proto=fd
[  244.234748][T15978] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  244.246386][T15978] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  244.256682][T15978] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4259: Corrupt directory, running e2fsck is recommended
[  244.290664][T16003] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  244.302261][T16003] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  244.312565][T16003] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4259: Corrupt directory, running e2fsck is recommended
[  244.351417][T12820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.494614][T16022] 9pnet_fd: Insufficient options for proto=fd
[  244.692370][T16032] netlink: 'syz.1.4285': attribute type 1 has an invalid length.
[  244.700146][T16032] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4285'.
[  244.764508][T16037] loop1: detected capacity change from 0 to 512
[  244.800699][T16037] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  244.837376][T16037] EXT4-fs (loop1): mount failed
[  244.999248][T16054] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4293'.
[  245.018548][T16052] netlink: 'syz.6.4292': attribute type 1 has an invalid length.
[  245.026376][T16052] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4292'.
[  245.091107][T16061] loop0: detected capacity change from 0 to 512
[  245.109728][T16061] EXT4-fs: Ignoring removed nobh option
[  245.140420][T16061] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  245.152064][T16061] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  245.162416][T16061] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4295: Corrupt directory, running e2fsck is recommended
[  245.183026][T16061] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  245.201189][T16061] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.4295: corrupted in-inode xattr: invalid ea_ino
[  245.249643][T16061] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.4295: couldn't read orphan inode 15 (err -117)
[  245.264670][T16072] loop1: detected capacity change from 0 to 512
[  245.287846][T16061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.328016][T16061] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  245.339603][T16061] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  245.349782][T16061] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4295: Corrupt directory, running e2fsck is recommended
[  245.350378][T16072] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  245.380109][T16061] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  245.391897][T16061] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  245.402114][T16061] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4295: Corrupt directory, running e2fsck is recommended
[  245.428055][T16072] EXT4-fs (loop1): mount failed
[  245.435526][T16061] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  245.447120][T16061] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  245.457277][T16061] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4295: Corrupt directory, running e2fsck is recommended
[  245.495067][T16061] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  245.532202][T15932] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  245.555422][T16061] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.4295: path /276/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  245.579865][T16070] ==================================================================
[  245.587969][T16070] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[  245.595792][T16070] 
[  245.598109][T16070] write to 0xffffea0004e10818 of 8 bytes by task 15917 on cpu 0:
[  245.605821][T16070]  __filemap_remove_folio+0x1a5/0x2a0
[  245.611193][T16070]  filemap_remove_folio+0x6d/0x1d0
[  245.616305][T16070]  truncate_inode_folio+0x42/0x50
[  245.621330][T16070]  shmem_undo_range+0x244/0xa80
[  245.626207][T16070]  shmem_evict_inode+0x134/0x520
[  245.631151][T16070]  evict+0x2e0/0x550
[  245.635050][T16070]  iput+0x447/0x5b0
[  245.638863][T16070]  dentry_unlink_inode+0x24f/0x260
[  245.643984][T16070]  __dentry_kill+0x18d/0x4b0
[  245.648579][T16070]  dput+0x5e/0xd0
[  245.652268][T16070]  __fput+0x444/0x650
[  245.656258][T16070]  ____fput+0x1c/0x30
[  245.660261][T16070]  task_work_run+0x12e/0x1a0
[  245.664856][T16070]  do_exit+0x47f/0x1590
[  245.669061][T16070]  do_group_exit+0xff/0x140
[  245.673576][T16070]  get_signal+0xe59/0xf70
[  245.677945][T16070]  arch_do_signal_or_restart+0x96/0x480
[  245.683492][T16070]  irqentry_exit_to_user_mode+0x5e/0xa0
[  245.689043][T16070]  irqentry_exit+0x12/0x50
[  245.693456][T16070]  asm_exc_page_fault+0x26/0x30
[  245.698305][T16070] 
[  245.700625][T16070] read to 0xffffea0004e10818 of 8 bytes by task 16070 on cpu 1:
[  245.708250][T16070]  folio_mapping+0xa1/0x120
[  245.712763][T16070]  move_folios_to_lru+0x128/0x6a0
[  245.717795][T16070]  evict_folios+0x3013/0x33d0
[  245.722476][T16070]  try_to_shrink_lruvec+0x45a/0x7e0
[  245.727680][T16070]  shrink_lruvec+0x22e/0x1b40
[  245.732355][T16070]  shrink_node+0x686/0x2120
[  245.736861][T16070]  do_try_to_free_pages+0x3f6/0xcd0
[  245.742056][T16070]  try_to_free_mem_cgroup_pages+0x1ab/0x410
[  245.747946][T16070]  try_charge_memcg+0x358/0x9e0
[  245.752795][T16070]  obj_cgroup_charge_pages+0xa6/0x150
[  245.758176][T16070]  __memcg_kmem_charge_page+0x9f/0x170
[  245.763651][T16070]  __alloc_frozen_pages_noprof+0x188/0x360
[  245.769450][T16070]  alloc_pages_mpol+0xb3/0x250
[  245.774223][T16070]  alloc_pages_noprof+0x90/0x130
[  245.779169][T16070]  __vmalloc_node_range_noprof+0x6f2/0xe00
[  245.784981][T16070]  __kvmalloc_node_noprof+0x312/0x4f0
[  245.790354][T16070]  ip_set_alloc+0x1f/0x30
[  245.794707][T16070]  hash_netiface_create+0x282/0x740
[  245.799907][T16070]  ip_set_create+0x3c9/0x960
[  245.804501][T16070]  nfnetlink_rcv_msg+0x4c3/0x590
[  245.809452][T16070]  netlink_rcv_skb+0x123/0x220
[  245.814219][T16070]  nfnetlink_rcv+0x16b/0x1690
[  245.818887][T16070]  netlink_unicast+0x5a1/0x670
[  245.823647][T16070]  netlink_sendmsg+0x58b/0x6b0
[  245.828413][T16070]  __sock_sendmsg+0x142/0x180
[  245.833085][T16070]  ____sys_sendmsg+0x31e/0x4e0
[  245.837852][T16070]  ___sys_sendmsg+0x17b/0x1d0
[  245.842532][T16070]  __x64_sys_sendmsg+0xd4/0x160
[  245.847382][T16070]  x64_sys_call+0x2999/0x2fb0
[  245.852055][T16070]  do_syscall_64+0xd2/0x200
[  245.856558][T16070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.862461][T16070] 
[  245.864774][T16070] value changed: 0xffff8881060c1930 -> 0x0000000000000000
[  245.871870][T16070] 
[  245.874182][T16070] Reported by Kernel Concurrency Sanitizer on:
[  245.880321][T16070] CPU: 1 UID: 0 PID: 16070 Comm: syz.4.4299 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) 
[  245.892461][T16070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  245.902525][T16070] ==================================================================
[  245.917432][T16061] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 8: comm syz.0.4295: path /276/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  246.011828][T11333] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.147211][T16070] syz.4.4299 (16070) used greatest stack depth: 5880 bytes left