last executing test programs:

3m0.102846695s ago: executing program 4 (id=4331):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x0, 0x10)
finit_module(r2, 0x0, 0x7) (fail_nth: 1)

2m59.326944341s ago: executing program 4 (id=4334):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

2m59.269563097s ago: executing program 4 (id=4336):
r0 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x9, 0x913, 0xfffffef8, 0x6}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004"], 0x1c}}, 0x804)
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="338c677bb7a857977e6fc13b4a5849371ddc4d9c", 0x14}], 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0431000000b401001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0)
syz_emit_ethernet(0x355, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x31f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0xc, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d"}, {0x22, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "0008e100908f61646700006f00fec0ffff00000000000000ff0bc049000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x19, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0xc, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x5, 0x8}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}, @typedef={0xe, 0x0, 0x0, 0x8, 0x3}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x5, 0x8}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0xd, 0x3}, {0xc, 0x5}, {0x7, 0x5}, {0x7, 0x4}, {0x8, 0x2}, {0x4, 0x5}, {0x0, 0x4}, {0xc, 0x1}, {0x6, 0x4}]}, @float={0xe, 0x0, 0x0, 0x10, 0xc}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @float={0x9, 0x0, 0x0, 0x10, 0x10}, @typedef={0xc, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x61, 0x61, 0x2e, 0x0, 0x61, 0x61, 0x30, 0x0, 0x2e]}}, &(0x7f0000000700)=""/172, 0xe8, 0xac, 0x1, 0x1000}, 0x28)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x387, &(0x7f0000001440)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x8, 0x8, 0x8, 0x4400, r3, 0x6, '\x00', 0x0, r6, 0x4, 0x0, 0x5, 0x8}, 0x50)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x4001070, r3, 0x0)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)

2m58.089686234s ago: executing program 4 (id=4349):
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00')
write$cgroup_int(r0, &(0x7f0000000040)=0x7f, 0x12)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f00000002c0)={'erspan0\x00', <r1=>0x0, 0x10, 0x40, 0x800, 0x10000, {{0x2b, 0x4, 0x3, 0x8, 0xac, 0x67, 0x0, 0x1f, 0x2f, 0x0, @loopback, @empty, {[@ssrr={0x89, 0x1b, 0xf, [@loopback, @rand_addr=0x64010100, @multicast1, @multicast1, @multicast1, @remote]}, @cipso={0x86, 0x41, 0x7ffffffffffffffe, [{0x2, 0x3, "a3"}, {0x6, 0x4, "678e"}, {0x0, 0x10, "7dcab48e9b268c96809b9ec26722"}, {0x1, 0xa, "a2b0352102c6485f"}, {0x9a6e76929b09b362, 0xe, "c4eaf9d923e50c5b8bed1cd0"}, {0x2, 0x2}, {0x1, 0xa, "1880784a0a08ecbf"}]}, @timestamp={0x44, 0x2c, 0x84, 0x0, 0xb, [0x0, 0x7, 0xffff8000, 0x0, 0x0, 0x41, 0xffffffe7, 0x6, 0x800, 0x9]}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xa6, [@dev={0xac, 0x14, 0x14, 0x36}]}]}}}}})
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)=@newqdisc={0x200, 0x24, 0x98c128d97e035c46, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x6, 0x3}, {0x7, 0x7}, {0x10, 0xffff}}, [@q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffe}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x17}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x36}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}, @q_dsmark={{0xb}, {0x4c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2e0}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd29}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4c1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd3be}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x50}, 0x48000)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171cdea3e9b48b00", "f28359738e229a4c6681b4a2988e00d300e6c202000000000000000000000001", [0x204, 0x5]})
truncate(&(0x7f00000001c0)='./file1\x00', 0x200)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6}, 0x10)
bind$packet(r5, &(0x7f0000000040)={0x11, 0x1, r6, 0x1, 0x9}, 0x14)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x41)
close_range(r7, 0xffffffffffffffff, 0x0)
syz_clone(0x8000c000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m57.233453368s ago: executing program 4 (id=4356):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x18, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000600))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340), 0x1, 0x512, &(0x7f0000000380)="$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")
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x10000000000006, 0x10400)
syz_usb_disconnect(r2)

2m53.952006982s ago: executing program 4 (id=4386):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0)

2m53.951517173s ago: executing program 32 (id=4386):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0)

2.675701556s ago: executing program 2 (id=7477):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0)
syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r1 = socket$inet6(0xa, 0x3, 0x5)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='xen_mmu_pte_clear\x00', r4, 0x0, 0x8}, 0x18)
r5 = dup(r3)
write$UHID_INPUT(r5, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006)
sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000001b80)=[{0x18, 0x29, 0x37, "b2"}], 0x18}}], 0x1, 0x4000000)

2.584781445s ago: executing program 2 (id=7480):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000280))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0)
socket$inet6(0xa, 0x805, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
syz_emit_ethernet(0xfcd, &(0x7f0000001380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0xfbf, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @remote, {[@ssrr={0x89, 0xb, 0xa, [@broadcast, @multicast2]}, @noop]}}, "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"}}}}, 0x0)
sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10)
r10 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000000c0)='keyring\x00', 0x0, &(0x7f0000000200)="0100000002", 0x5, r10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r1, 0x7, 0x0, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0)

2.13053757s ago: executing program 2 (id=7482):
r0 = syz_open_dev$loop(0x0, 0x14f, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
pwritev2(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x0, 0x1, 0x11)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0xff, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x40, 0x4005, 0x4, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200))
socket(0x10, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r3, 0x4b3c, 0x0)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, '\x00', "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", '\b\x00', "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000100))
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
read$qrtrtun(r4, 0x0, 0xeffd)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50)

1.957766907s ago: executing program 3 (id=7484):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)

1.92602438s ago: executing program 3 (id=7486):
r0 = syz_open_dev$loop(0x0, 0x14f, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
pwritev2(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x0, 0x1, 0x11)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0xff, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x40, 0x4005, 0x4, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200))
socket(0x10, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r3, 0x4b3c, 0x0)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, '\x00', "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", '\b\x00', "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
gettid()
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108000000000000000005000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x800)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
read$qrtrtun(r5, 0x0, 0xeffd)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50)

1.605006952s ago: executing program 0 (id=7491):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0xc)

1.330868149s ago: executing program 0 (id=7493):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
getpgid(0x0)

1.279356604s ago: executing program 2 (id=7495):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x104b0d, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
lchown(&(0x7f0000000300)='./file1\x00', r0, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, r0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)='\\', 0x1}], 0x1}, 0x4000000)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000002c0)=""/8, 0x8}], 0x2, &(0x7f00000001c0)=""/174, 0xae}, 0x2000)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000013c0)={0x1, &(0x7f0000000040)=[{0x8, 0x7, 0xf, 0x6}]})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8a401, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})

1.257319496s ago: executing program 0 (id=7496):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r1, 0x711, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r2 = socket$inet6(0xa, 0x3, 0x5)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='xen_mmu_pte_clear\x00', r5, 0x0, 0x8}, 0x18)
r6 = dup(r4)
write$UHID_INPUT(r6, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006)
sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000001b80)=[{0x18, 0x29, 0x37, "b2"}], 0x18}}], 0x1, 0x4000000)

1.167295515s ago: executing program 1 (id=7497):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000280))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0)
socket$inet6(0xa, 0x805, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
syz_emit_ethernet(0xfcd, &(0x7f0000001380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0xfbf, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @remote, {[@ssrr={0x89, 0xb, 0xa, [@broadcast, @multicast2]}, @noop]}}, "dd9dec79219eb549dbd024c796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3abd27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc65b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324dde85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b6805913e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc368ef4ac3"}}}}, 0x0)
sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000000c0)='keyring\x00', 0x0, &(0x7f0000000200)="0100000002", 0x5, r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r1, 0x7, 0x0, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0)

1.073377494s ago: executing program 3 (id=7498):
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00008fb000/0x3000)=nil, 0x8000, 0x0, 0x0, 0x3, 0x38, 0x0, 0xb, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0c000000cd0000000600", @ANYRES32, @ANYBLOB='\a\x00'/19, @ANYBLOB], 0x50)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x7, r1, 'id0\x00'})
syz_open_dev$vcsa(&(0x7f0000000700), 0x4, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)

882.948553ms ago: executing program 3 (id=7499):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="7c0000000001010400000000000000000200000024000180"], 0x7c}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x24000040)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = gettid()
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r1], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r8, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
faccessat(r8, &(0x7f0000000000)='./file0\x00', 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x180, 0x1d8, 0x1d8, 0x180, 0x1d8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @private=0x8a010100, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xfff}}, @common=@unspec=@connbytes={{0x38}, {[{0xb}, {0xfffffffffffffcdc}], 0x2, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x3202, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
timer_create(0x0, &(0x7f0000000900)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r10 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
fcntl$setlease(r10, 0x400, 0x0)

862.774375ms ago: executing program 0 (id=7500):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x20008000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x261040}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0)

799.594502ms ago: executing program 1 (id=7501):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00008fb000/0x3000)=nil, 0x8000, 0x0, 0x0, 0x3, 0x38, 0x0, 0xb, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0c000000cd0000000600", @ANYRES32, @ANYBLOB='\a\x00'/19, @ANYBLOB], 0x50)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x7, r2, 'id0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)

798.737892ms ago: executing program 3 (id=7502):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000001f00000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000011400000011000100"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

755.277226ms ago: executing program 0 (id=7503):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0x0)

732.224878ms ago: executing program 3 (id=7504):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newtaction={0x168, 0x30, 0x1, 0x0, 0x0, {}, [{0x154, 0x1, [@m_nat={0x150, 0x1a, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2e6, 0xfffffff7, 0x5, 0x0, 0x80}, @local, @private=0xa010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x3d4, 0x9, 0x7, 0x2}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdf, 0x7, 0x5, 0x7, 0x2}, @rand_addr=0x64010102, @remote, 0xffffffff}}]}, {0xaf, 0x6, "bb11057e51132f534ad348fd8cd117ff5c38d42614fb0d6d24c1069fe3564a12efb3dcba647567dede3d1678cb62e3ee7ee4376bb81b5bdbd5149762090a0bb33373987ad750b669b471b7cd5bce6102e835113272cc1124c3a78a1e32b50da170a7ef02f1b6f7c99cc3429a8383317bbfd26e0b4f721ef459e4b59dc5de39435f6aa201a1d7df338a6e1b8b458bbaffd807d48c98ba69e8625233a45415d7ce66df45f7ff3ddd5dfae2ee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x168}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
accept4$unix(r1, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES8=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24000800}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000280), 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88c02, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
fsetxattr(r5, 0x0, &(0x7f0000000080)='@\x00', 0x2, 0x0)
getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000580))
r6 = msgget$private(0x0, 0x3ac)
msgrcv(r6, 0x0, 0x0, 0x1, 0x2000)
msgrcv(r6, 0x0, 0x0, 0x2, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x9, &(0x7f00007c5000/0x2000)=nil, 0x2)
accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x80800)
socket$nl_route(0x10, 0x3, 0x0)

702.854291ms ago: executing program 0 (id=7505):
r0 = syz_open_dev$loop(0x0, 0x14f, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
pwritev2(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x0, 0x1, 0x11)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0xff, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x40, 0x4005, 0x4, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200))
socket(0x10, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r3, 0x4b3c, 0x0)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, '\x00', "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", '\b\x00', "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000100))
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
read$qrtrtun(r4, 0x0, 0xeffd)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50)

539.678507ms ago: executing program 1 (id=7510):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080))
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r1, 0x711, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r2 = socket$inet6(0xa, 0x3, 0x5)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='xen_mmu_pte_clear\x00', r5, 0x0, 0x8}, 0x18)
r6 = dup(r4)
write$UHID_INPUT(r6, &(0x7f0000002080)={0x8, {"a2e3ad21ed0d09f91b5f090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f090063090890e0878f0e1ac6e7049b336c959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074b0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3c2b802181acfc90c41bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e74130d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b12d94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14007693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006)
sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000001b80)=[{0x18, 0x29, 0x37, "b2"}], 0x18}}], 0x1, 0x4000000)

438.835927ms ago: executing program 5 (id=7512):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000280))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0)
socket$inet6(0xa, 0x805, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
syz_emit_ethernet(0xfcd, &(0x7f0000001380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0xfbf, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @remote, {[@ssrr={0x89, 0xb, 0xa, [@broadcast, @multicast2]}, @noop]}}, "dd9dec79219eb549dbd024c796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3abd27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc65b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324dde85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b6805913e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc368ef4ac3"}}}}, 0x0)
sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f00000000c0)='keyring\x00', 0x0, &(0x7f0000000200)="0100000002", 0x5, r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r1, 0x7, 0x0, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0)

434.242897ms ago: executing program 1 (id=7513):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="7c0000000001010400000000000000000200000024000180"], 0x7c}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x24000040)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = gettid()
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r1], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r8, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
faccessat(r8, &(0x7f0000000000)='./file0\x00', 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x180, 0x1d8, 0x1d8, 0x180, 0x1d8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @private=0x8a010100, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xfff}}, @common=@unspec=@connbytes={{0x38}, {[{0xb}, {0xfffffffffffffcdc}], 0x2, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x3202, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
timer_create(0x0, &(0x7f0000000900)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r10 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
fcntl$setlease(r10, 0x400, 0x0)

387.545842ms ago: executing program 1 (id=7514):
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x70}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00008fb000/0x3000)=nil, 0x8000, 0x0, 0x0, 0x3, 0x38, 0x0, 0xb, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0c000000cd00000006000000d34f400011000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000002000000020000000000000000000000000000e1ffffff005ac83bf7dffe4b7733346faeaf1f04dbdada8eaeb6fce25db2813e294fb9edb9d502607637e9e453ab5c31d474bf1c00000000000000005693c3f96f4b61868a7fb54d2d7bab66e72621abc7a94cfadbb5a79039853f5c99c7c02ae603ae6d088f0c6ed47ceb02b94a817ff359e096b2a8a2ab99f52a3a312cceffde6f22656db6bd8cff10f625ada47dc9459389e14ee5ab52880beec97411d4ccfa86c09149868954a1ad7db8fea1b236120867c5959cefb58151a2c19ba0dec61fb1f6aabbb29530ba5742fc2dcdf72181e95cdedb29cff7cdc8000000146e7045baf4fbd74c23658a5acda367296d"], 0x50)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x7, r4, 'id0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
syz_open_dev$vcsa(&(0x7f0000000700), 0x4, 0x80)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)

360.662975ms ago: executing program 2 (id=7515):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000001f00000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000011400000011000100"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

306.74561ms ago: executing program 2 (id=7516):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000300)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@mblk_io_submit}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypprPB05533NO8p435zxvn5M3IQEMrYnsTyHixYj4Kok4HBFJvm008o0Ta/utPrw+my1JNBof/5E098vqredqPe5gXnkhIn75IuJkYWO7teWVhVK5nC7m9cl65cpkbXnl1KVKaT6dTy9Pz8yceXNm+p233+pbX187/9e3H919/8yXx1e/+en+kdtJnI1D+bb2fjyDG+2ViZjIX5OxOPvEjlN9aGw3SQZ9AGzLSB7nY5GNAYdjJI964L/v84hoAEMqEf8wpFp5QOvefvP74P/vUFaycx68t3YDtLH/o2vvjcS+5r3RgdXksTuj7H53vA/tZ238/Pud29kS/XsfAmBLN25GxOnR0Y3jX5KPf9t3uvPqfe2VJ9sw/sHOuZvlP693yn8K6/lPdMh/DnaI3e3YOv4L9/vQTFdZ/vdux/x3fdJqfCSv/a+Z840lFy+V09N5NnwixvZm9c3mc86s3mt029ae/2VL1n4rF8yP4/7o3scfM1eql56lz+0e3Ix4qWP+m6yf/6TD+c9ej/M9tnEsvfNKt21b9//5avwQ8WrH8/9oRivZfH5ysnk9TLauio3+vHXs127tD7r/2fk/sHn/x5P2+dra07fx/b6/027bHut/9H7970k+aZb35Ouuler1xamIPcmHG9dPP3psq97aP+v/ieObj3+drv/9EfFpj/2/dfTHl3vq/4DO/9xTnf+nL9z74LPvurXf2/j3RrN0Il/Ty/jX6wE+y2sHAAAAAAAAu00hIg5FUiiulwuFYnHt8x1H40ChXK3VT16sLl2ei+Z3ZcdjrNCa6T7c9nmIqfzzsK369BP1mYg4EhFfj+xv1ouz1fLcoDsPAAAAAAAAAAAAAAAAAAAAu8TBLt//z/w2MuijA547P/kNw2vL+O/HLz0Bu5L//zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPw0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dP3cuWxqrD6/PZvW5q8tLC9Wrp+bS2kKxsjRbnK0uXinOV6vz5bQ4W61s9XzlavXK1HQsXZusp7X6ZG155UKlunS5fuFSpTSfXkjHdqRXAAAAAAAAAAAAAAAAAAAA8O9SW15ZKJXL6aKCwrYKo7vjMBT6XBj0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wTAAD//wQrN8c=")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r3 = openat(r2, &(0x7f0000000180)='./bus\x00', 0x181000, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x60000000, 0x0, 0x1, 0x6})
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c)

159.744115ms ago: executing program 5 (id=7517):
lseek(0xffffffffffffffff, 0x9, 0xf5)
getpgid(0x0)

95.540431ms ago: executing program 5 (id=7518):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
sendmmsg$inet(r0, 0x0, 0x0, 0x2000c044)
sendto$inet(r0, 0x0, 0x0, 0x12000000, 0x0, 0x0)

95.132521ms ago: executing program 5 (id=7519):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r0, 0x9, 0xf5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
syslog(0x9, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f000000a540)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* rr'], 0xa)

47.253736ms ago: executing program 5 (id=7520):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x4)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)

32.103798ms ago: executing program 1 (id=7521):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000300)={0x60, 0x1, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00008fb000/0x3000)=nil, 0x8000, 0x0, 0x0, 0x3, 0x38, 0x0, 0xb, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0c000000cd0000000600", @ANYRES32, @ANYBLOB='\a\x00'/19, @ANYBLOB], 0x50)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x7, r2, 'id0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)

0s ago: executing program 5 (id=7522):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000300)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@mblk_io_submit}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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")
creat(&(0x7f0000000240)='./bus\x00', 0x0)
r3 = openat(r2, &(0x7f0000000180)='./bus\x00', 0x181000, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x60000000, 0x0, 0x1, 0x6})
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c)

kernel console output (not intermixed with test programs):

or, fat_free: invalid cluster chain (i_pos 548)
[  460.589506][T26801] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  460.680287][T26791] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.817364][T26791] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.898496][   T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.898727][   T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.898926][  T272] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.898989][  T272] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.032142][T26814] loop2: detected capacity change from 0 to 128
[  461.557299][T26870] loop2: detected capacity change from 0 to 128
[  461.566056][T26870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  461.574127][T26870] System zones: 1-3, 19-19, 35-36
[  461.614402][T26870] ext4 filesystem being mounted at /384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  461.661017][T26870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.667600][T26873] IPv6: Can't replace route, no match found
[  461.669552][T26870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.722907][T26870] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  461.823144][T26877] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.886968][T26881] loop1: detected capacity change from 0 to 1024
[  461.898632][T26877] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.910741][T26881] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  461.923788][T26881] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.6947: Invalid block bitmap block 0 in block_group 0
[  461.937541][T26881] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.6947: Failed to acquire dquot type 0
[  461.954522][T26881] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.6947: Freeing blocks not in datazone - block = 0, count = 4096
[  461.982453][T26877] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.000933][T26887] loop5: detected capacity change from 0 to 1024
[  462.007656][T26881] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.6947: Invalid inode bitmap blk 0 in block_group 0
[  462.034925][T26846] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0
[  462.047302][T26877] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.052405][T26887] EXT4-fs: Ignoring removed mblk_io_submit option
[  462.063717][T26887] EXT4-fs: Ignoring removed nobh option
[  462.069374][T26887] EXT4-fs: Ignoring removed bh option
[  462.084426][T26881] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  462.104492][T26881] EXT4-fs (loop1): 1 orphan inode deleted
[  462.158394][T26884] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.299669][T26884] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.351495][T26884] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.396434][T26884] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.465267][T26846] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.509673][T26844] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.509824][T26844] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.509916][T26844] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.574776][T26916] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6955'.
[  462.574795][T26916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6955'.
[  462.632369][T26921] loop1: detected capacity change from 0 to 512
[  462.675760][T26921] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  462.675901][T26921] EXT4-fs (loop1): orphan cleanup on readonly fs
[  462.677117][T26921] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm +}[@: corrupted inode contents
[  462.677253][T26921] EXT4-fs (loop1): Remounting filesystem read-only
[  462.677313][T26921] EXT4-fs (loop1): 1 truncate cleaned up
[  462.685540][  T272] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  462.685565][  T272] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  462.685634][  T272] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  462.781931][T26930] ip6t_srh: unknown srh match flags  4000
[  462.785495][T26930] loop2: detected capacity change from 0 to 512
[  462.785921][T26930] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  462.793187][T26930] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  462.793318][T26930] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  462.793412][T26930] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  463.069167][T26953] netlink: 'syz.3.6963': attribute type 3 has an invalid length.
[  463.103775][T26953] loop3: detected capacity change from 0 to 512
[  463.147959][T26953] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.192906][T26953] EXT4-fs (loop3): shut down requested (0)
[  463.242509][T26966] loop5: detected capacity change from 0 to 1024
[  463.349369][T26966] EXT4-fs: Ignoring removed mblk_io_submit option
[  463.355856][T26966] EXT4-fs: Ignoring removed nobh option
[  463.361433][T26966] EXT4-fs: Ignoring removed bh option
[  463.416825][T26970] wireguard2: entered promiscuous mode
[  463.422460][T26970] wireguard2: entered allmulticast mode
[  463.545651][T26976] loop1: detected capacity change from 0 to 1024
[  463.546276][T26976] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  463.565467][T26976] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.6969: Invalid block bitmap block 0 in block_group 0
[  463.565702][T26976] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.6969: Failed to acquire dquot type 0
[  463.565885][T26976] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.6969: Freeing blocks not in datazone - block = 0, count = 4096
[  463.624604][T26976] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.6969: Invalid inode bitmap blk 0 in block_group 0
[  463.624782][T26976] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  463.624865][T26976] EXT4-fs (loop1): 1 orphan inode deleted
[  463.660311][T26982] loop3: detected capacity change from 0 to 512
[  463.660739][T26982] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  463.668653][T26982] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  463.668719][T26982] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  463.668786][T26982] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  463.694426][  T272] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0
[  464.376561][T27003] netlink: 'syz.1.6977': attribute type 3 has an invalid length.
[  464.387840][T27003] loop1: detected capacity change from 0 to 512
[  464.388529][T27005] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6978'.
[  464.404041][T27005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6978'.
[  464.410865][T27006] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6976'.
[  464.426371][T27003] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  464.447872][T27003] EXT4-fs (loop1): shut down requested (0)
[  464.499030][T26844] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.513518][T26844] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.532231][T26844] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.554502][T26844] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.578730][T27013] wireguard0: entered promiscuous mode
[  464.584321][T27013] wireguard0: entered allmulticast mode
[  464.608222][T27019] ip6t_srh: unknown srh match flags  4000
[  464.611006][T27020] loop3: detected capacity change from 0 to 512
[  464.617917][T27019] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  464.635154][T27019] loop0: detected capacity change from 0 to 512
[  464.641549][T27020] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  464.641986][T27019] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  464.649668][T27020] EXT4-fs (loop3): orphan cleanup on readonly fs
[  464.669272][T27020] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm +}[@: corrupted inode contents
[  464.671647][T27019] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  464.684459][T27020] EXT4-fs (loop3): Remounting filesystem read-only
[  464.689529][T27019] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  464.704058][T27020] EXT4-fs (loop3): 1 truncate cleaned up
[  464.704038][T27019] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  464.717847][  T272] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  464.728429][  T272] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  464.743156][  T272] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  464.783236][T27026] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6985'.
[  464.814589][   T29] kauditd_printk_skb: 528 callbacks suppressed
[  464.814603][   T29] audit: type=1326 audit(1760342744.843:80718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27028 comm="syz.1.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  464.866997][   T29] audit: type=1326 audit(1760342744.883:80719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27028 comm="syz.1.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  464.890632][   T29] audit: type=1326 audit(1760342744.883:80720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27028 comm="syz.1.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  464.914328][   T29] audit: type=1326 audit(1760342744.883:80721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27028 comm="syz.1.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  464.937983][   T29] audit: type=1326 audit(1760342744.883:80722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27028 comm="syz.1.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  464.961799][   T29] audit: type=1326 audit(1760342744.883:80723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27028 comm="syz.1.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  464.985412][   T29] audit: type=1326 audit(1760342744.883:80724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27028 comm="syz.1.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  465.009118][   T29] audit: type=1326 audit(1760342744.883:80725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27028 comm="syz.1.6986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  465.071599][T27037] netlink: 'syz.1.6990': attribute type 3 has an invalid length.
[  465.083453][T27037] loop1: detected capacity change from 0 to 512
[  465.095854][T27039] loop3: detected capacity change from 0 to 512
[  465.103669][T27037] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.117613][T27037] EXT4-fs (loop1): shut down requested (0)
[  465.125558][T27039] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  465.133739][T27039] EXT4-fs (loop3): orphan cleanup on readonly fs
[  465.142159][T27039] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm +}[@: corrupted inode contents
[  465.154526][T27039] EXT4-fs (loop3): Remounting filesystem read-only
[  465.183850][T27039] EXT4-fs (loop3): 1 truncate cleaned up
[  465.189757][  T272] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  465.200311][  T272] Quota error (device loop3): write_blk: dquota write failed
[  465.207709][  T272] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries
[  465.217722][  T272] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  465.228429][  T272] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  465.289985][T27048] bridge0: entered promiscuous mode
[  465.304572][T27048] macsec1: entered promiscuous mode
[  465.315810][T27048] bridge0: port 3(macsec1) entered blocking state
[  465.322281][T27048] bridge0: port 3(macsec1) entered disabled state
[  465.344869][T27048] macsec1: entered allmulticast mode
[  465.350190][T27048] bridge0: entered allmulticast mode
[  465.371091][T27048] macsec1: left allmulticast mode
[  465.376282][T27048] bridge0: left allmulticast mode
[  465.386749][T27048] bridge0: left promiscuous mode
[  465.392739][T27056] loop5: detected capacity change from 0 to 512
[  465.421289][T27055] wireguard0: entered promiscuous mode
[  465.426918][T27055] wireguard0: entered allmulticast mode
[  465.438929][T27056] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  465.447304][T27056] EXT4-fs (loop5): orphan cleanup on readonly fs
[  465.467031][T27046] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.478625][T27056] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm +}[@: corrupted inode contents
[  465.501679][T27061] bridge0: entered promiscuous mode
[  465.507252][T27061] macsec1: entered promiscuous mode
[  465.513675][T27061] bridge0: port 3(macsec1) entered blocking state
[  465.520215][T27061] bridge0: port 3(macsec1) entered disabled state
[  465.526784][T27061] macsec1: entered allmulticast mode
[  465.532112][T27061] bridge0: entered allmulticast mode
[  465.538652][T27061] macsec1: left allmulticast mode
[  465.543706][T27061] bridge0: left allmulticast mode
[  465.544259][T27056] EXT4-fs (loop5): Remounting filesystem read-only
[  465.566100][T27056] EXT4-fs (loop5): 1 truncate cleaned up
[  465.571935][T26844] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  465.582554][T26844] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  465.595019][T27061] bridge0: left promiscuous mode
[  465.595899][T26844] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[  465.623147][T27063] wireguard5: entered promiscuous mode
[  465.628798][T27063] wireguard5: entered allmulticast mode
[  465.661183][T27046] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.718408][T27068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6999'.
[  465.727432][T27068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6999'.
[  465.781897][T27077] loop1: detected capacity change from 0 to 1024
[  465.792050][T27077] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  465.794706][T27046] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.825532][T27077] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.7002: Invalid block bitmap block 0 in block_group 0
[  465.827443][T27079] bond1: (slave macvlan5): Error -98 calling set_mac_address
[  465.847049][T27077] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.7002: Failed to acquire dquot type 0
[  465.858911][T27077] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.7002: Freeing blocks not in datazone - block = 0, count = 4096
[  465.874624][T27077] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.7002: Invalid inode bitmap blk 0 in block_group 0
[  465.887716][T27077] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  465.897042][T27046] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.907119][T26844] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:29: Failed to release dquot type 0
[  465.915437][T27077] EXT4-fs (loop1): 1 orphan inode deleted
[  465.927009][T27085] bridge0: entered promiscuous mode
[  465.934849][T27085] macsec1: entered promiscuous mode
[  465.941144][T27085] bridge0: port 3(macsec1) entered blocking state
[  465.947730][T27085] bridge0: port 3(macsec1) entered disabled state
[  465.956023][T27085] macsec1: entered allmulticast mode
[  465.961319][T27085] bridge0: entered allmulticast mode
[  465.967306][T27085] macsec1: left allmulticast mode
[  465.972351][T27085] bridge0: left allmulticast mode
[  465.979084][T27085] bridge0: left promiscuous mode
[  466.098146][T26846] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.110999][T26846] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.126232][T26846] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.153376][T26846] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.249935][T27096] loop5: detected capacity change from 0 to 512
[  466.276396][T27096] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  466.295624][T27096] EXT4-fs (loop5): orphan cleanup on readonly fs
[  466.304454][T27096] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm +}[@: corrupted inode contents
[  466.336773][T27096] EXT4-fs (loop5): Remounting filesystem read-only
[  466.353408][T27096] EXT4-fs (loop5): 1 truncate cleaned up
[  466.359206][T26845] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  466.369768][T26845] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  466.396400][T26845] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[  466.446286][T27119] ip6t_srh: unknown srh match flags  4000
[  466.456349][T27119] loop0: detected capacity change from 0 to 512
[  466.466140][T27119] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  466.502031][T27119] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  466.511079][T27119] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  466.519529][T27119] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  466.624761][T27131] wireguard2: entered promiscuous mode
[  466.630332][T27131] wireguard2: entered allmulticast mode
[  466.881406][T27141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7019'.
[  466.928626][T27144] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7020'.
[  466.928645][T27144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7020'.
[  466.946348][T27146] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7021'.
[  466.946364][T27146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7021'.
[  467.304455][T27163] bridge0: entered promiscuous mode
[  467.323926][T27163] macsec1: entered promiscuous mode
[  467.338922][T27163] bridge0: port 3(macsec1) entered blocking state
[  467.345476][T27163] bridge0: port 3(macsec1) entered disabled state
[  467.364018][T27163] macsec1: entered allmulticast mode
[  467.369376][T27163] bridge0: entered allmulticast mode
[  467.391818][T27163] macsec1: left allmulticast mode
[  467.396908][T27163] bridge0: left allmulticast mode
[  467.402767][T27163] bridge0: left promiscuous mode
[  467.524693][T27183] bridge0: entered promiscuous mode
[  467.532834][T27183] macsec1: entered promiscuous mode
[  467.539207][T27183] bridge0: port 3(macsec1) entered blocking state
[  467.545776][T27183] bridge0: port 3(macsec1) entered disabled state
[  467.552341][T27183] macsec1: entered allmulticast mode
[  467.557697][T27183] bridge0: entered allmulticast mode
[  467.565414][T27178] loop5: detected capacity change from 0 to 164
[  467.573346][T27183] macsec1: left allmulticast mode
[  467.578673][T27183] bridge0: left allmulticast mode
[  467.585988][T27183] bridge0: left promiscuous mode
[  467.613163][T27188] wireguard0: entered promiscuous mode
[  467.618723][T27188] wireguard0: entered allmulticast mode
[  467.659662][T27197] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7034'.
[  467.668904][T27197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7034'.
[  467.719298][T27201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7036'.
[  467.786188][T27210] loop1: detected capacity change from 0 to 512
[  467.793219][T27210] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  467.830546][T27210] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  467.839490][T27210] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  467.847979][T27210] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  467.914659][T27222] wireguard1: entered promiscuous mode
[  467.920184][T27222] wireguard1: entered allmulticast mode
[  467.977462][T27220] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.045419][T27220] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.138154][T27238] loop0: detected capacity change from 0 to 1024
[  468.163889][T27238] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  468.198221][T27238] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7048: Invalid block bitmap block 0 in block_group 0
[  468.205293][T27220] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.222727][T27238] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.7048: Failed to acquire dquot type 0
[  468.359008][T27238] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.7048: Freeing blocks not in datazone - block = 0, count = 4096
[  468.383185][T27238] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.7048: Invalid inode bitmap blk 0 in block_group 0
[  468.396678][T26843] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 0
[  468.426070][T27220] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.442506][T27238] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  468.456354][T27238] EXT4-fs (loop0): 1 orphan inode deleted
[  468.470394][T27238] EXT4-fs mount: 89 callbacks suppressed
[  468.470408][T27238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.626912][T23311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.681375][T27265] loop0: detected capacity change from 0 to 128
[  468.697269][T27255] loop5: detected capacity change from 0 to 164
[  468.706606][T27265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  468.715305][T27265] System zones: 1-3, 19-19, 35-36
[  468.722023][T27265] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  468.744492][T27265] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  468.855713][T27265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.864634][T27265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.880736][T27265] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  468.897858][T27271] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.936402][T27271] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.028026][T27271] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.076052][T27271] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.115020][ T3418] kernel read not supported for file /941/net/netlink (pid: 3418 comm: kworker/0:4)
[  469.131749][T26843] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.143192][T26843] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.152691][T27296] loop1: detected capacity change from 0 to 164
[  469.159244][T26843] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.168355][T26843] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.211622][T27302] loop1: detected capacity change from 0 to 512
[  469.218843][T27302] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  469.245864][T27302] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  469.254892][T27302] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  469.263068][T27302] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  469.279401][T27308] loop5: detected capacity change from 0 to 1024
[  469.286565][T27308] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  469.298147][T27308] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.7070: Invalid block bitmap block 0 in block_group 0
[  469.312131][T27308] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7070: Failed to acquire dquot type 0
[  469.323841][T27308] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.7070: Freeing blocks not in datazone - block = 0, count = 4096
[  469.338187][T27308] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.7070: Invalid inode bitmap blk 0 in block_group 0
[  469.354321][T26843] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 0
[  469.373973][T27308] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  469.388943][T27308] EXT4-fs (loop5): 1 orphan inode deleted
[  469.417332][T23311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  469.433464][T27308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.466717][T27314] wireguard0: entered promiscuous mode
[  469.472218][T27314] wireguard0: entered allmulticast mode
[  469.693435][ T3418] kernel read not supported for file /501/net/netlink (pid: 3418 comm: kworker/0:4)
[  470.042164][T27310] syz.1.7067 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  470.056352][T27310] CPU: 0 UID: 0 PID: 27310 Comm: syz.1.7067 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  470.056377][T27310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  470.056435][T27310] Call Trace:
[  470.056442][T27310]  <TASK>
[  470.056449][T27310]  __dump_stack+0x1d/0x30
[  470.056469][T27310]  dump_stack_lvl+0xe8/0x140
[  470.056487][T27310]  dump_stack+0x15/0x1b
[  470.056504][T27310]  dump_header+0x81/0x220
[  470.056540][T27310]  oom_kill_process+0x342/0x400
[  470.056599][T27310]  out_of_memory+0x979/0xb80
[  470.056682][T27310]  try_charge_memcg+0x610/0xa10
[  470.056712][T27310]  obj_cgroup_charge_pages+0xa6/0x150
[  470.056822][T27310]  __memcg_kmem_charge_page+0x9f/0x170
[  470.056859][T27310]  __alloc_frozen_pages_noprof+0x188/0x360
[  470.056929][T27310]  alloc_pages_mpol+0xb3/0x260
[  470.056950][T27310]  alloc_pages_noprof+0x90/0x130
[  470.056967][T27310]  __vmalloc_node_range_noprof+0x7a5/0xed0
[  470.057023][T27310]  __kvmalloc_node_noprof+0x483/0x670
[  470.057113][T27310]  ? ip_set_alloc+0x24/0x30
[  470.057138][T27310]  ? ip_set_alloc+0x24/0x30
[  470.057161][T27310]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  470.057213][T27310]  ip_set_alloc+0x24/0x30
[  470.057237][T27310]  hash_netiface_create+0x282/0x740
[  470.057312][T27310]  ? __pfx_hash_netiface_create+0x10/0x10
[  470.057356][T27310]  ip_set_create+0x3cc/0x970
[  470.057410][T27310]  ? __nla_parse+0x40/0x60
[  470.057471][T27310]  nfnetlink_rcv_msg+0x4c6/0x590
[  470.057526][T27310]  netlink_rcv_skb+0x123/0x220
[  470.057589][T27310]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  470.057626][T27310]  nfnetlink_rcv+0x167/0x16c0
[  470.057646][T27310]  ? kmem_cache_free+0xe4/0x3d0
[  470.057702][T27310]  ? __kfree_skb+0x109/0x150
[  470.057727][T27310]  ? nlmon_xmit+0x4f/0x60
[  470.057748][T27310]  ? consume_skb+0x49/0x150
[  470.057775][T27310]  ? nlmon_xmit+0x4f/0x60
[  470.057817][T27310]  ? dev_hard_start_xmit+0x3b0/0x3e0
[  470.057847][T27310]  ? __dev_queue_xmit+0x1200/0x2000
[  470.057878][T27310]  ? __dev_queue_xmit+0x182/0x2000
[  470.058006][T27310]  ? ref_tracker_free+0x37d/0x3e0
[  470.058052][T27310]  ? __netlink_deliver_tap+0x4dc/0x500
[  470.058094][T27310]  netlink_unicast+0x5c0/0x690
[  470.058131][T27310]  netlink_sendmsg+0x58b/0x6b0
[  470.058380][T27310]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.058505][T27310]  __sock_sendmsg+0x145/0x180
[  470.058534][T27310]  ____sys_sendmsg+0x31e/0x4e0
[  470.058579][T27310]  ___sys_sendmsg+0x17b/0x1d0
[  470.058648][T27310]  __x64_sys_sendmsg+0xd4/0x160
[  470.058691][T27310]  x64_sys_call+0x191e/0x3000
[  470.058720][T27310]  do_syscall_64+0xd2/0x200
[  470.058812][T27310]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  470.058845][T27310]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  470.058874][T27310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.058902][T27310] RIP: 0033:0x7f1f9215eec9
[  470.058921][T27310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  470.058959][T27310] RSP: 002b:00007f1f90b9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.058983][T27310] RAX: ffffffffffffffda RBX: 00007f1f923b6090 RCX: 00007f1f9215eec9
[  470.058999][T27310] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000d
[  470.059016][T27310] RBP: 00007f1f921e1f91 R08: 0000000000000000 R09: 0000000000000000
[  470.059032][T27310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  470.059053][T27310] R13: 00007f1f923b6128 R14: 00007f1f923b6090 R15: 00007ffc8ecc9b88
[  470.059150][T27310]  </TASK>
[  470.059159][T27310] memory: usage 307200kB, limit 307200kB, failcnt 4503
[  470.404622][T27310] memory+swap: usage 324028kB, limit 9007199254740988kB, failcnt 0
[  470.412522][T27310] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  470.419810][T27310] Memory cgroup stats for /syz1:
[  470.421103][T27310] cache 0
[  470.429141][T27310] rss 0
[  470.431912][T27310] shmem 0
[  470.434894][T27310] mapped_file 0
[  470.438350][T27310] dirty 0
[  470.441364][T27310] writeback 0
[  470.444668][T27310] workingset_refault_anon 2017
[  470.449467][T27310] workingset_refault_file 15258
[  470.454331][T27310] swap 17231872
[  470.457792][T27310] swapcached 12288
[  470.461491][T27310] pgpgin 630214
[  470.464958][T27310] pgpgout 630211
[  470.468486][T27310] pgfault 467431
[  470.472090][T27310] pgmajfault 960
[  470.475632][T27310] inactive_anon 12288
[  470.479597][T27310] active_anon 0
[  470.483043][T27310] inactive_file 0
[  470.486741][T27310] active_file 0
[  470.490246][T27310] unevictable 0
[  470.493695][T27310] hierarchical_memory_limit 314572800
[  470.499207][T27310] hierarchical_memsw_limit 9223372036854771712
[  470.505376][T27310] total_cache 0
[  470.508830][T27310] total_rss 0
[  470.512116][T27310] total_shmem 0
[  470.515592][T27310] total_mapped_file 0
[  470.517368][   T29] kauditd_printk_skb: 793 callbacks suppressed
[  470.517383][   T29] audit: type=1326 audit(1760342750.543:81494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27329 comm="syz.2.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae6dfeec9 code=0x7ffc0000
[  470.519570][T27310] total_dirty 0
[  470.519583][T27310] total_writeback 0
[  470.525929][   T29] audit: type=1326 audit(1760342750.553:81495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27329 comm="syz.2.7080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae6dfeec9 code=0x7ffc0000
[  470.549325][T27310] total_workingset_refault_anon 2017
[  470.585363][T27310] total_workingset_refault_file 15258
[  470.590739][T27310] total_swap 17231872
[  470.594757][T27310] total_swapcached 12288
[  470.599040][T27310] total_pgpgin 630214
[  470.603010][T27310] total_pgpgout 630211
[  470.606502][   T29] audit: type=1326 audit(1760342750.633:81496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27334 comm="syz.0.7081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  470.607090][T27310] total_pgfault 467431
[  470.630674][   T29] audit: type=1326 audit(1760342750.633:81497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27334 comm="syz.0.7081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  470.634682][T27310] total_pgmajfault 960
[  470.634693][T27310] total_inactive_anon 12288
[  470.666772][T27310] total_active_anon 0
[  470.670744][T27310] total_inactive_file 0
[  470.674901][T27310] total_active_file 0
[  470.678875][T27310] total_unevictable 0
[  470.682849][T27310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7067,pid=27301,uid=0
[  470.697590][T27310] Memory cgroup out of memory: Killed process 27301 (syz.1.7067) total-vm:93956kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  470.720969][T26843] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.732210][T26843] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.743789][T26843] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.773555][T26843] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.802493][T18931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.836086][T27342] loop5: detected capacity change from 0 to 128
[  470.845818][T27342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  470.853839][T27342] System zones: 1-3, 19-19, 35-36
[  470.883491][T27342] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  470.925553][T27342] ext4 filesystem being mounted at /515/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  470.967374][T27353] wireguard2: entered promiscuous mode
[  470.972891][T27353] wireguard2: entered allmulticast mode
[  470.979769][T27342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.988710][T27342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.999320][T27356] loop1: detected capacity change from 0 to 1024
[  471.006218][T27342] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  471.006515][T27356] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  471.026162][T27356] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.7089: Invalid block bitmap block 0 in block_group 0
[  471.039771][T27356] Quota error (device loop1): write_blk: dquota write failed
[  471.047291][T27356] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  471.057344][T27356] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.7089: Failed to acquire dquot type 0
[  471.069073][T27356] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.7089: Freeing blocks not in datazone - block = 0, count = 4096
[  471.082822][T27356] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.7089: Invalid inode bitmap blk 0 in block_group 0
[  471.095577][T26843] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7
[  471.096657][T27356] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  471.104575][T26843] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 0
[  471.113150][T27356] EXT4-fs (loop1): 1 orphan inode deleted
[  471.130730][T27356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.154916][   T29] audit: type=1326 audit(1760342751.183:81498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27355 comm="syz.1.7089" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f9215eec9 code=0x0
[  471.204890][T27362] loop3: detected capacity change from 0 to 1024
[  471.211651][T27362] EXT4-fs: Ignoring removed mblk_io_submit option
[  471.218350][T27362] EXT4-fs: Ignoring removed nobh option
[  471.224071][T27362] EXT4-fs: Ignoring removed bh option
[  471.235647][T27362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  471.536909][T18931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  471.632159][T27368] wireguard1: entered promiscuous mode
[  471.632231][T27368] wireguard1: entered allmulticast mode
[  471.735951][   T29] audit: type=1326 audit(1760342751.763:81499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.2.7094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae6dfeec9 code=0x7ffc0000
[  471.736173][   T29] audit: type=1326 audit(1760342751.763:81500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.2.7094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae6dfeec9 code=0x7ffc0000
[  471.867265][T23486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.890832][T27381] wireguard1: entered promiscuous mode
[  471.896511][T27381] wireguard1: entered allmulticast mode
[  471.908842][T27385] loop0: detected capacity change from 0 to 1024
[  471.916027][T27385] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  471.917471][T27385] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7097: Invalid block bitmap block 0 in block_group 0
[  471.936861][T27388] __nla_validate_parse: 5 callbacks suppressed
[  471.936893][T27388] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7099'.
[  471.940429][T27385] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.7097: Failed to acquire dquot type 0
[  471.946401][T27388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7099'.
[  471.955684][T27385] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.7097: Freeing blocks not in datazone - block = 0, count = 4096
[  471.994588][T27385] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.7097: Invalid inode bitmap blk 0 in block_group 0
[  471.994692][T27385] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  471.994906][T27385] EXT4-fs (loop0): 1 orphan inode deleted
[  471.995378][T27385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.021699][T27390] netlink: 'syz.1.7100': attribute type 3 has an invalid length.
[  472.022062][  T272] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0
[  472.044783][T27390] loop1: detected capacity change from 0 to 512
[  472.070238][T20721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.080897][T27390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.093713][T27390] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.107397][T27390] EXT4-fs (loop1): shut down requested (0)
[  472.114105][T27394] wireguard2: entered promiscuous mode
[  472.119703][T27394] wireguard2: entered allmulticast mode
[  472.153970][T23486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.172327][T27401] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7103'.
[  472.172353][T27401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7103'.
[  472.317233][T27415] loop1: detected capacity change from 0 to 164
[  472.338818][T27423] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7111'.
[  472.347840][T27423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7111'.
[  472.379738][T27427] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7112'.
[  472.388872][T27427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7112'.
[  472.425902][T27430] netlink: 'syz.1.7113': attribute type 3 has an invalid length.
[  472.436511][T27430] loop1: detected capacity change from 0 to 512
[  472.465438][T27430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.486555][T27430] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.514820][T27430] EXT4-fs (loop1): shut down requested (0)
[  472.554133][T23486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.616404][T27436] loop1: detected capacity change from 0 to 1024
[  472.654696][T27436] EXT4-fs: Ignoring removed mblk_io_submit option
[  472.661209][T27436] EXT4-fs: Ignoring removed nobh option
[  472.666837][T27436] EXT4-fs: Ignoring removed bh option
[  472.728467][T27436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  472.730828][T27440] ip6t_srh: unknown srh match flags  4000
[  472.763364][T27440] loop2: detected capacity change from 0 to 512
[  472.806069][T27440] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  472.822277][T27440] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  472.822492][T27440] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  472.822529][T27440] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  472.871433][T23311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.034176][T27446] ip6t_srh: unknown srh match flags  4000
[  473.038513][T27446] loop3: detected capacity change from 0 to 512
[  473.038950][T27446] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  473.052494][T27446] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  473.052643][T27446] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  473.052758][T27446] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  473.469590][T27467] loop5: detected capacity change from 0 to 512
[  473.485694][T27467] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  473.485776][T27467] EXT4-fs (loop5): orphan cleanup on readonly fs
[  473.487535][T27467] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm +}[@: corrupted inode contents
[  473.488593][T27467] EXT4-fs (loop5): Remounting filesystem read-only
[  473.488721][T27467] EXT4-fs (loop5): 1 truncate cleaned up
[  473.488884][T26843] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  473.488909][T26843] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  473.488933][T26843] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[  473.489406][T27467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  473.525189][T18931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.617493][T23486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.809684][T27484] loop2: detected capacity change from 0 to 512
[  473.849702][T27484] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  473.874306][T27484] EXT4-fs (loop2): orphan cleanup on readonly fs
[  473.900969][T27484] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm +}[@: corrupted inode contents
[  473.973384][T27484] EXT4-fs (loop2): Remounting filesystem read-only
[  473.986908][T27484] EXT4-fs (loop2): 1 truncate cleaned up
[  473.992671][T26844] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  474.003260][T26844] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  474.043613][T26844] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  474.069762][T27484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  474.104800][T21315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.139968][T27491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7133'.
[  474.149011][T27491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7133'.
[  474.482250][T27507] loop0: detected capacity change from 0 to 164
[  474.507543][T27512] loop2: detected capacity change from 0 to 164
[  474.513340][T27520] loop0: detected capacity change from 0 to 128
[  474.525866][T27520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  474.525899][T27520] System zones: 1-3, 19-19, 35-36
[  474.526465][T27520] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  474.526586][T27520] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  474.534404][T27520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.534530][T27520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.546104][T27520] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  474.561861][T27517] loop3: detected capacity change from 0 to 512
[  474.581591][T27517] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  474.581654][T27517] EXT4-fs (loop3): orphan cleanup on readonly fs
[  474.582971][T27517] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm +}[@: corrupted inode contents
[  474.583140][T27517] EXT4-fs (loop3): Remounting filesystem read-only
[  474.583205][T27517] EXT4-fs (loop3): 1 truncate cleaned up
[  474.583437][T26844] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  474.583479][T26844] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  474.583497][T26844] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  474.584178][T27517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  474.596377][T20721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.923730][T27542] loop2: detected capacity change from 0 to 512
[  474.924285][T27542] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  474.932793][T27542] EXT4-fs (loop2): 1 truncate cleaned up
[  474.933089][T27542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  475.019249][T21315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.105567][T23311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  475.158819][T27552] loop2: detected capacity change from 0 to 164
[  475.214667][T27567] bridge0: entered promiscuous mode
[  475.214702][T27567] macsec1: entered promiscuous mode
[  475.215587][T27567] bridge0: port 3(macsec1) entered blocking state
[  475.215624][T27567] bridge0: port 3(macsec1) entered disabled state
[  475.215769][T27567] macsec1: entered allmulticast mode
[  475.215788][T27567] bridge0: entered allmulticast mode
[  475.216345][T27567] macsec1: left allmulticast mode
[  475.216364][T27567] bridge0: left allmulticast mode
[  475.216888][T27567] bridge0: left promiscuous mode
[  475.231225][T27568] netlink: 'syz.5.7161': attribute type 3 has an invalid length.
[  475.252422][T27568] loop5: detected capacity change from 0 to 512
[  475.331526][T27569] wireguard0: entered promiscuous mode
[  475.331541][T27569] wireguard0: entered allmulticast mode
[  475.378915][T27568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.378966][T27568] ext4 filesystem being mounted at /534/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  475.416154][T27575] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  475.445868][T27568] EXT4-fs (loop5): shut down requested (0)
[  475.491466][T18931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.669459][   T29] kauditd_printk_skb: 333 callbacks suppressed
[  475.669505][   T29] audit: type=1326 audit(1760342755.693:81813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  475.715027][T27591] bridge0: entered promiscuous mode
[  475.720402][T27591] macsec1: entered promiscuous mode
[  475.743433][   T29] audit: type=1326 audit(1760342755.723:81814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  475.767055][   T29] audit: type=1326 audit(1760342755.723:81815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  475.771223][T27591] bridge0: port 3(macsec1) entered blocking state
[  475.790840][   T29] audit: type=1326 audit(1760342755.723:81816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  475.797131][T27591] bridge0: port 3(macsec1) entered disabled state
[  475.820619][   T29] audit: type=1326 audit(1760342755.723:81817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  475.820652][   T29] audit: type=1326 audit(1760342755.723:81818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  475.820679][   T29] audit: type=1326 audit(1760342755.723:81819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  475.897846][   T29] audit: type=1326 audit(1760342755.723:81820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  475.921440][   T29] audit: type=1326 audit(1760342755.723:81821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  475.945124][   T29] audit: type=1326 audit(1760342755.723:81822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27592 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  476.044556][T27591] macsec1: entered allmulticast mode
[  476.049884][T27591] bridge0: entered allmulticast mode
[  476.064312][T27591] macsec1: left allmulticast mode
[  476.069373][T27591] bridge0: left allmulticast mode
[  476.075284][T27591] bridge0: left promiscuous mode
[  476.089894][T27599] wireguard0: entered promiscuous mode
[  476.095467][T27599] wireguard0: entered allmulticast mode
[  476.130209][T27607] loop0: detected capacity change from 0 to 512
[  476.154845][T27607] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  476.181516][T27607] EXT4-fs (loop0): orphan cleanup on readonly fs
[  476.191911][T27607] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm +}[@: corrupted inode contents
[  476.223736][T27607] EXT4-fs (loop0): Remounting filesystem read-only
[  476.230878][T27612] wireguard1: entered promiscuous mode
[  476.233936][T27607] EXT4-fs (loop0): 1 truncate cleaned up
[  476.236429][T27612] wireguard1: entered allmulticast mode
[  476.247819][  T272] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  476.258424][  T272] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  476.269088][  T272] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  476.287535][T27607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  476.388301][T23311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.553201][T27630] loop2: detected capacity change from 0 to 164
[  476.595169][T27645] ip6t_srh: unknown srh match flags  4000
[  476.652541][T27648] loop2: detected capacity change from 0 to 512
[  476.659361][T27648] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  476.713599][T27645] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  476.734166][T27654] loop0: detected capacity change from 0 to 512
[  476.736710][T27645] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  476.778557][T27645] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  477.331687][T27678] loop0: detected capacity change from 0 to 164
[  477.477387][T27686] __nla_validate_parse: 12 callbacks suppressed
[  477.477404][T27686] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7201'.
[  477.504611][T27686] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7201'.
[  477.748327][T27689] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7202'.
[  477.767326][T27689] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7202'.
[  478.055846][T27707] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7210'.
[  478.092494][T27707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7210'.
[  478.134157][T27711] loop1: detected capacity change from 0 to 512
[  478.146456][T27693] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.169619][T27709] loop3: detected capacity change from 0 to 164
[  478.210674][T27717] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7213'.
[  478.221695][T27717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7213'.
[  478.241957][T27723] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7216'.
[  478.251078][T27720] wireguard2: entered promiscuous mode
[  478.256620][T27720] wireguard2: entered allmulticast mode
[  478.286604][T27723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7216'.
[  478.296829][T27693] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.345701][T27711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.369885][T27693] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.386086][T27711] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.455992][T27693] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.481129][T27733] netlink: 'syz.2.7220': attribute type 3 has an invalid length.
[  478.491361][T27734] netlink: 'syz.2.7220': attribute type 3 has an invalid length.
[  478.520255][T27736] netlink: 'syz.3.7221': attribute type 3 has an invalid length.
[  478.582672][T27736] loop3: detected capacity change from 0 to 512
[  478.614901][  T272] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.623404][  T272] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.645558][  T272] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.674570][  T272] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.685100][T27736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.704355][T27736] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.978936][T20721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.024756][T23486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.320612][T27784] loop1: detected capacity change from 0 to 128
[  479.393000][T27794] loop3: detected capacity change from 0 to 128
[  479.500024][T27794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  479.525840][T27794] System zones: 1-3, 19-19, 35-36
[  479.531456][T27794] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  479.646724][T27807] bridge0: entered promiscuous mode
[  479.652096][T27807] macsec1: entered promiscuous mode
[  479.658339][T27807] bridge0: port 3(macsec1) entered blocking state
[  479.664905][T27807] bridge0: port 3(macsec1) entered disabled state
[  479.703653][T27794] ext4 filesystem being mounted at /434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  479.768119][T27807] macsec1: entered allmulticast mode
[  479.773434][T27807] bridge0: entered allmulticast mode
[  479.809799][T27807] macsec1: left allmulticast mode
[  479.814964][T27807] bridge0: left allmulticast mode
[  479.855448][T27794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.874045][T27794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.899839][T27794] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  479.928217][T27784] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  479.934786][T27784] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  479.942401][T27784] vhci_hcd vhci_hcd.0: Device attached
[  479.949133][T27807] bridge0: left promiscuous mode
[  480.034317][T27814] vhci_hcd: connection closed
[  480.036368][T26844] vhci_hcd: stop threads
[  480.045374][T26844] vhci_hcd: release socket
[  480.049806][T26844] vhci_hcd: disconnect device
[  480.066498][T27811] wireguard0: entered promiscuous mode
[  480.071990][T27811] wireguard0: entered allmulticast mode
[  480.295881][T27827] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.376210][T27827] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.402897][T27834] loop0: detected capacity change from 0 to 512
[  480.426703][T27834] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.7253: inode #0: comm syz.0.7253: iget: illegal inode #
[  480.449585][T27827] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.466671][T20721] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  480.517175][T27827] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.533992][T27840] ip6t_srh: unknown srh match flags  4000
[  480.563223][T27834] EXT4-fs (loop0): get orphan inode failed
[  480.575489][T27834] EXT4-fs (loop0): mount failed
[  480.586358][T27840] loop3: detected capacity change from 0 to 512
[  480.602581][T27840] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  480.620185][T27838] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.657492][T27840] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  480.664391][T26844] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.676757][T27840] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  480.690260][T27845] loop0: detected capacity change from 0 to 1024
[  480.695246][T27840] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  480.699596][T27845] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  480.717183][   T29] kauditd_printk_skb: 341 callbacks suppressed
[  480.717199][   T29] audit: type=1326 audit(1760342760.733:82158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27842 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  480.746961][   T29] audit: type=1326 audit(1760342760.733:82159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27842 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  480.770638][   T29] audit: type=1326 audit(1760342760.733:82160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27842 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  480.794271][   T29] audit: type=1326 audit(1760342760.733:82161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27842 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  480.817042][T27845] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7257: Invalid block bitmap block 0 in block_group 0
[  480.817965][   T29] audit: type=1326 audit(1760342760.733:82162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27842 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  480.838918][T27845] Quota error (device loop0): write_blk: dquota write failed
[  480.854890][   T29] audit: type=1326 audit(1760342760.733:82163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27842 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  480.862255][T27845] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  480.885807][   T29] audit: type=1326 audit(1760342760.733:82164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27842 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  480.919389][   T29] audit: type=1326 audit(1760342760.743:82165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27842 comm="syz.1.7256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  480.943515][T27845] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.7257: Failed to acquire dquot type 0
[  480.955510][T27845] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.7257: Freeing blocks not in datazone - block = 0, count = 4096
[  480.957589][T27838] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.984723][T27845] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.7257: Invalid inode bitmap blk 0 in block_group 0
[  480.997567][T27845] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  481.014630][T27845] EXT4-fs (loop0): 1 orphan inode deleted
[  481.014655][T26843] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 0
[  481.024648][T27845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.034552][T27851] loop1: detected capacity change from 0 to 1024
[  481.050849][T26844] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.064506][T27851] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  481.069631][T26844] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.096491][T27838] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.107728][T27851] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.7256: Invalid block bitmap block 0 in block_group 0
[  481.123484][T27851] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.7256: Failed to acquire dquot type 0
[  481.136451][T26844] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.145423][T27851] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.7256: Freeing blocks not in datazone - block = 0, count = 4096
[  481.159535][T27851] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.7256: Invalid inode bitmap blk 0 in block_group 0
[  481.172592][T26844] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:29: Failed to release dquot type 0
[  481.184827][T27851] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  481.193778][T27851] EXT4-fs (loop1): 1 orphan inode deleted
[  481.200130][T27851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.200400][T27838] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.588439][T23486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.621817][T23311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.640407][T27862] ip6t_srh: unknown srh match flags  4000
[  481.644111][T27862] loop1: detected capacity change from 0 to 512
[  481.657758][T27862] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  481.664112][T27862] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  481.679788][T27862] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  481.679829][T27862] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  481.803198][T27883] loop3: detected capacity change from 0 to 128
[  481.828256][T27883] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  481.841216][T27883] System zones: 1-3, 19-19, 35-36
[  481.847061][T27883] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  481.860364][T27883] ext4 filesystem being mounted at /439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  481.910313][T27883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.918973][T27883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.938139][T27883] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  482.026612][T27895] ip6t_srh: unknown srh match flags  4000
[  482.036395][T27895] loop0: detected capacity change from 0 to 512
[  482.043341][T27895] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  482.067616][T27895] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  482.076633][T27895] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  482.084920][T27895] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  482.469214][T20721] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  482.738779][T27916] loop2: detected capacity change from 0 to 1024
[  482.746048][T27916] EXT4-fs: Ignoring removed mblk_io_submit option
[  482.752582][T27916] EXT4-fs: Ignoring removed nobh option
[  482.758235][T27916] EXT4-fs: Ignoring removed bh option
[  482.776770][T27916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.789214][T27914] wireguard0: entered promiscuous mode
[  482.794746][T27914] wireguard0: entered allmulticast mode
[  482.907128][T27926] wireguard2: entered promiscuous mode
[  482.912644][T27926] wireguard2: entered allmulticast mode
[  483.066644][  T272] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  483.066752][  T272] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  483.066789][  T272] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  483.091993][  T272] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.104828][T27931] loop3: detected capacity change from 0 to 128
[  483.108597][T27931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  483.108622][T27931] System zones: 1-3, 19-19, 35-36
[  483.168540][T27931] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  483.168702][T27931] ext4 filesystem being mounted at /446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  483.189966][T27931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.190110][T27931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.201078][T27931] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  483.350557][T27939] loop0: detected capacity change from 0 to 164
[  483.671577][T21315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.774892][T20721] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  483.825290][T27959] wireguard5: entered promiscuous mode
[  483.830850][T27959] wireguard5: entered allmulticast mode
[  483.969833][T27966] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.993175][T27968] bridge0: entered promiscuous mode
[  484.008690][T27968] macsec1: entered promiscuous mode
[  484.014946][T27968] bridge0: port 3(macsec1) entered blocking state
[  484.021589][T27968] bridge0: port 3(macsec1) entered disabled state
[  484.038682][T27968] macsec1: entered allmulticast mode
[  484.044066][T27968] bridge0: entered allmulticast mode
[  484.055724][T27977] __nla_validate_parse: 14 callbacks suppressed
[  484.055747][T27977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7298'.
[  484.070931][T27977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7298'.
[  484.084828][T27968] macsec1: left allmulticast mode
[  484.089933][T27968] bridge0: left allmulticast mode
[  484.105070][T27983] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7303'.
[  484.117224][T27968] bridge0: left promiscuous mode
[  484.146600][T27966] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.156758][T27983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7303'.
[  484.180634][T27977] wireguard0: entered promiscuous mode
[  484.186198][T27977] wireguard0: entered allmulticast mode
[  484.294332][T27978] wireguard1: entered promiscuous mode
[  484.299896][T27978] wireguard1: entered allmulticast mode
[  484.471204][T27981] bridge0: entered promiscuous mode
[  484.476713][T27981] macsec1: entered promiscuous mode
[  484.483051][T27981] bridge0: port 3(macsec1) entered blocking state
[  484.489557][T27981] bridge0: port 3(macsec1) entered disabled state
[  484.496326][T27981] macsec1: entered allmulticast mode
[  484.501645][T27981] bridge0: entered allmulticast mode
[  484.507844][T27981] macsec1: left allmulticast mode
[  484.512910][T27981] bridge0: left allmulticast mode
[  484.518772][T27981] bridge0: left promiscuous mode
[  484.551914][T27986] wireguard5: entered promiscuous mode
[  484.551939][T27986] wireguard5: entered allmulticast mode
[  484.556942][T27966] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.606517][T27966] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.702917][T26844] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  484.702981][T26844] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  484.703048][T26844] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  484.708788][T26844] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  484.744306][T28007] wireguard5: entered promiscuous mode
[  484.744325][T28007] wireguard5: entered allmulticast mode
[  484.824369][T28015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7314'.
[  484.824402][T28015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7314'.
[  484.981412][T28023] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7317'.
[  484.992331][T28023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7317'.
[  485.044658][T28026] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7316'.
[  485.053624][T28026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7316'.
[  485.083877][T28017] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.112259][T28033] bridge0: entered promiscuous mode
[  485.122088][T28033] macsec1: entered promiscuous mode
[  485.145194][T28033] bridge0: port 3(macsec1) entered blocking state
[  485.151773][T28033] bridge0: port 3(macsec1) entered disabled state
[  485.167777][T28033] macsec1: entered allmulticast mode
[  485.173100][T28033] bridge0: entered allmulticast mode
[  485.229160][T28040] loop1: detected capacity change from 0 to 1024
[  485.237405][T28033] macsec1: left allmulticast mode
[  485.242444][T28033] bridge0: left allmulticast mode
[  485.271327][T28033] bridge0: left promiscuous mode
[  485.277209][T28040] EXT4-fs: Ignoring removed mblk_io_submit option
[  485.283637][T28040] EXT4-fs: Ignoring removed nobh option
[  485.289347][T28040] EXT4-fs: Ignoring removed bh option
[  485.328807][T28040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  485.360710][T28017] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.484397][T28036] wireguard5: entered promiscuous mode
[  485.484432][T28036] wireguard5: entered allmulticast mode
[  485.566720][T28017] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.656359][T28017] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.680204][T28058] wireguard5: entered promiscuous mode
[  485.685767][T28058] wireguard5: entered allmulticast mode
[  485.813356][   T29] kauditd_printk_skb: 227 callbacks suppressed
[  485.813373][   T29] audit: type=1326 audit(1760342765.833:82389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28024 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  485.813684][   T29] audit: type=1326 audit(1760342765.833:82390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28024 comm="syz.0.7319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42777eec9 code=0x7ffc0000
[  486.039591][T23486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.218162][T28080] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.275660][T28080] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.340284][T28085] ip6t_srh: unknown srh match flags  4000
[  486.350356][T28085] loop1: detected capacity change from 0 to 512
[  486.357208][T28085] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  486.359192][T28080] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.380325][T28085] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  486.389292][T28085] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  486.397622][T28085] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  486.431249][T28080] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.475129][T26844] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.494552][T26844] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.514669][T26844] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.523018][T26844] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.588960][T28089] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.651074][T28092] ip6t_srh: unknown srh match flags  4000
[  486.666084][T28089] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.687988][T28092] loop2: detected capacity change from 0 to 512
[  486.707079][T28092] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  486.720718][T28089] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.747222][T28092] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  486.787602][T28092] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  486.800590][T28092] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  486.810496][T28089] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.843105][T28096] loop0: detected capacity change from 0 to 1024
[  486.854826][T28096] EXT4-fs: Ignoring removed mblk_io_submit option
[  486.861344][T28096] EXT4-fs: Ignoring removed nobh option
[  486.867040][T28096] EXT4-fs: Ignoring removed bh option
[  486.916054][T28096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  487.045867][  T272] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.045910][  T272] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.045947][  T272] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.050041][T26843] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.154537][   T29] audit: type=1326 audit(1760342767.183:82391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28100 comm="syz.5.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b7e6eec9 code=0x7ffc0000
[  487.154708][   T29] audit: type=1326 audit(1760342767.183:82392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28100 comm="syz.5.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0b7e6eec9 code=0x7ffc0000
[  487.155007][   T29] audit: type=1326 audit(1760342767.183:82393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28100 comm="syz.5.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b7e6eec9 code=0x7ffc0000
[  487.155072][   T29] audit: type=1326 audit(1760342767.183:82394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28100 comm="syz.5.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b7e6eec9 code=0x7ffc0000
[  487.155759][   T29] audit: type=1326 audit(1760342767.183:82395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28100 comm="syz.5.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0b7e6eec9 code=0x7ffc0000
[  487.155792][   T29] audit: type=1326 audit(1760342767.183:82396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28100 comm="syz.5.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b7e6eec9 code=0x7ffc0000
[  487.155855][   T29] audit: type=1326 audit(1760342767.183:82397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28100 comm="syz.5.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b7e6eec9 code=0x7ffc0000
[  487.156154][   T29] audit: type=1326 audit(1760342767.183:82398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28100 comm="syz.5.7342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0b7e6eec9 code=0x7ffc0000
[  487.725854][T23311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.867061][T28121] bridge0: entered promiscuous mode
[  487.872536][T28121] macsec1: entered promiscuous mode
[  487.878994][T28121] bridge0: port 3(macsec1) entered blocking state
[  487.885553][T28121] bridge0: port 3(macsec1) entered disabled state
[  487.892135][T28121] macsec1: entered allmulticast mode
[  487.897554][T28121] bridge0: entered allmulticast mode
[  487.903745][T28121] macsec1: left allmulticast mode
[  487.908889][T28121] bridge0: left allmulticast mode
[  487.915381][T28121] bridge0: left promiscuous mode
[  487.937803][T28126] wireguard1: entered promiscuous mode
[  487.943418][T28126] wireguard1: entered allmulticast mode
[  488.022765][T19516] kernel read not supported for file /1118/net/netlink (pid: 19516 comm: kworker/0:7)
[  488.161589][T28149] ip6t_srh: unknown srh match flags  4000
[  488.176060][T28149] loop1: detected capacity change from 0 to 512
[  488.176444][T28149] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  488.182086][T28149] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  488.182230][T28149] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  488.182279][T28149] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  488.404287][T26844] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  488.429858][T26844] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  488.444854][T26844] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  488.463834][T26844] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.842510][    T9] kernel read not supported for file /1349/net/netlink (pid: 9 comm: kworker/0:0)
[  489.066983][T28206] loop3: detected capacity change from 0 to 1024
[  489.074011][T28206] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  489.086543][T28206] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.7376: Invalid block bitmap block 0 in block_group 0
[  489.124336][T28206] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.7376: Failed to acquire dquot type 0
[  489.174136][T28206] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.7376: Freeing blocks not in datazone - block = 0, count = 4096
[  489.188622][T28206] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.7376: Invalid inode bitmap blk 0 in block_group 0
[  489.214106][T26846] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0
[  489.235258][T28206] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  489.244148][T28206] EXT4-fs (loop3): 1 orphan inode deleted
[  489.250566][T28206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.271166][T28148] syz.1.7360 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  489.282187][T28148] CPU: 1 UID: 0 PID: 28148 Comm: syz.1.7360 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  489.282260][T28148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  489.282284][T28148] Call Trace:
[  489.282291][T28148]  <TASK>
[  489.282299][T28148]  __dump_stack+0x1d/0x30
[  489.282334][T28148]  dump_stack_lvl+0xe8/0x140
[  489.282349][T28148]  dump_stack+0x15/0x1b
[  489.282362][T28148]  dump_header+0x81/0x220
[  489.282425][T28148]  oom_kill_process+0x342/0x400
[  489.282449][T28148]  out_of_memory+0x979/0xb80
[  489.282535][T28148]  try_charge_memcg+0x610/0xa10
[  489.282562][T28148]  charge_memcg+0x51/0xc0
[  489.282578][T28148]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  489.282654][T28148]  __read_swap_cache_async+0x17b/0x2d0
[  489.282729][T28148]  swap_cluster_readahead+0x262/0x3c0
[  489.282756][T28148]  swapin_readahead+0xde/0x6f0
[  489.282839][T28148]  ? inode_set_ctime_current+0x566/0x770
[  489.283037][T28148]  ? __rcu_read_unlock+0x4f/0x70
[  489.283133][T28148]  ? swap_cache_get_folio+0x277/0x280
[  489.283160][T28148]  do_swap_page+0x2ae/0x2370
[  489.283176][T28148]  ? __rcu_read_unlock+0x4f/0x70
[  489.283244][T28148]  ? __account_obj_stock+0x2d6/0x350
[  489.283271][T28148]  ? __pfx_default_wake_function+0x10/0x10
[  489.283293][T28148]  handle_mm_fault+0x9a5/0x2be0
[  489.283312][T28148]  ? vma_start_read+0x141/0x1f0
[  489.283392][T28148]  do_user_addr_fault+0x630/0x1080
[  489.283408][T28148]  ? fpregs_restore_userregs+0xe2/0x1d0
[  489.283432][T28148]  ? switch_fpu_return+0xe/0x20
[  489.283473][T28148]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  489.283494][T28148]  exc_page_fault+0x62/0xa0
[  489.283510][T28148]  asm_exc_page_fault+0x26/0x30
[  489.283527][T28148] RIP: 0033:0x7f1f9215eed1
[  489.283540][T28148] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  489.283595][T28148] RSP: 002b:00007ffc8ecc9ce8 EFLAGS: 00010217
[  489.283608][T28148] RAX: 0000000000000000 RBX: 00007f1f923b7da0 RCX: 00007f1f9215eec9
[  489.283633][T28148] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  489.283643][T28148] RBP: 00007f1f923b7da0 R08: 00000000000056c4 R09: 0000001d8ecc9fdf
[  489.283652][T28148] R10: 00007f1f923b7cb0 R11: 0000000000000246 R12: 0000000000077608
[  489.283662][T28148] R13: 00007ffc8ecc9de0 R14: ffffffffffffffff R15: 00007ffc8ecc9e00
[  489.283678][T28148]  </TASK>
[  489.283683][T28148] memory: usage 307200kB, limit 307200kB, failcnt 4925
[  489.525052][T28148] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0
[  489.533006][T28148] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0
[  489.540398][T28148] Memory cgroup stats for /syz1:
[  489.540698][T28148] cache 20480
[  489.549089][T28148] rss 4096
[  489.552120][T28148] shmem 0
[  489.555143][T28148] mapped_file 4096
[  489.558964][T28148] dirty 0
[  489.561981][T28148] writeback 4096
[  489.565572][T28148] workingset_refault_anon 2205
[  489.570365][T28148] workingset_refault_file 18990
[  489.575255][T28148] swap 466944
[  489.578572][T28148] swapcached 4096
[  489.582201][T28148] pgpgin 717148
[  489.585763][T28148] pgpgout 717142
[  489.589332][T28148] pgfault 492138
[  489.592876][T28148] pgmajfault 1070
[  489.596543][T28148] inactive_anon 4096
[  489.600439][T28148] active_anon 0
[  489.604080][T28148] inactive_file 16384
[  489.608107][T28148] active_file 4096
[  489.611842][T28148] unevictable 0
[  489.615312][T28148] hierarchical_memory_limit 314572800
[  489.620690][T28148] hierarchical_memsw_limit 9223372036854771712
[  489.626946][T28148] total_cache 20480
[  489.630790][T28148] total_rss 4096
[  489.634366][T28148] total_shmem 0
[  489.637875][T28148] total_mapped_file 4096
[  489.642148][T28148] total_dirty 0
[  489.645693][T28148] total_writeback 4096
[  489.649770][T28148] total_workingset_refault_anon 2205
[  489.655124][T28148] total_workingset_refault_file 18990
[  489.660582][T28148] total_swap 466944
[  489.664448][T28148] total_swapcached 4096
[  489.668615][T28148] total_pgpgin 717148
[  489.672593][T28148] total_pgpgout 717142
[  489.676672][T28148] total_pgfault 492138
[  489.680729][T28148] total_pgmajfault 1070
[  489.684914][T28148] total_inactive_anon 4096
[  489.689314][T28148] total_active_anon 0
[  489.693291][T28148] total_inactive_file 16384
[  489.697826][T28148] total_active_file 4096
[  489.702089][T28148] total_unevictable 0
[  489.706076][T28148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7360,pid=28148,uid=0
[  489.720917][T28148] Memory cgroup out of memory: Killed process 28148 (syz.1.7360) total-vm:93956kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  489.742069][T28220] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.792612][T28220] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.858971][T28220] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.890329][T28224] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.936001][T28220] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.002099][T28224] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.013745][T20721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.049356][T28245] loop3: detected capacity change from 0 to 1024
[  490.062805][T28245] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  490.074103][T28224] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.089637][T28245] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.7382: Invalid block bitmap block 0 in block_group 0
[  490.103595][T28245] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.7382: Failed to acquire dquot type 0
[  490.115275][T28245] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.7382: Freeing blocks not in datazone - block = 0, count = 4096
[  490.129794][T28224] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.131292][T28245] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.7382: Invalid inode bitmap blk 0 in block_group 0
[  490.152312][T26846] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0
[  490.152466][T28245] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  490.172686][T28245] EXT4-fs (loop3): 1 orphan inode deleted
[  490.179110][T28245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.380713][T26845] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.392130][T26845] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.402788][T28259] loop1: detected capacity change from 0 to 164
[  490.409124][T26845] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.417370][T26845] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.465150][T28261] __nla_validate_parse: 8 callbacks suppressed
[  490.465162][T28261] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7385'.
[  490.480341][T28261] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7385'.
[  490.579547][T28265] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7387'.
[  490.588644][T28265] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7387'.
[  490.639816][T28272] loop2: detected capacity change from 0 to 128
[  490.647963][T28272] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  490.656596][T28272] System zones: 1-3, 19-19, 35-36
[  490.662179][T28272] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  490.674629][T28272] ext4 filesystem being mounted at /490/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  490.714124][T28272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.722735][T28272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.915162][T20721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.946503][   T29] kauditd_printk_skb: 1091 callbacks suppressed
[  490.946517][   T29] audit: type=1326 audit(1760342770.973:83484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28274 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72589beec9 code=0x7ffc0000
[  490.976650][   T29] audit: type=1326 audit(1760342770.973:83485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28274 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72589beec9 code=0x7ffc0000
[  491.000458][   T29] audit: type=1326 audit(1760342770.973:83486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28274 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72589beec9 code=0x7ffc0000
[  491.024352][   T29] audit: type=1326 audit(1760342770.973:83487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28274 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72589beec9 code=0x7ffc0000
[  491.025579][ T3418] kernel read not supported for file /1077/net/netlink (pid: 3418 comm: kworker/0:4)
[  491.047968][   T29] audit: type=1326 audit(1760342770.973:83488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28274 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f72589beec9 code=0x7ffc0000
[  491.048243][   T29] audit: type=1326 audit(1760342771.043:83489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28274 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72589beec9 code=0x7ffc0000
[  491.104717][   T29] audit: type=1326 audit(1760342771.053:83490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28274 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f72589bef03 code=0x7ffc0000
[  491.129038][   T29] audit: type=1326 audit(1760342771.053:83491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28274 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f72589bef87 code=0x7ffc0000
[  491.152707][   T29] audit: type=1326 audit(1760342771.053:83492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28274 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f725897632d code=0x7ffc0000
[  491.176787][   T29] audit: type=1326 audit(1760342771.053:83493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28274 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f72589f3609 code=0x7ffc0000
[  491.217531][T28280] ip6t_srh: unknown srh match flags  4000
[  491.227150][T28280] loop1: detected capacity change from 0 to 512
[  491.233969][T28280] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  491.251092][T28280] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  491.260594][T28280] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  491.270540][T28280] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  491.291407][T28282] ip6t_srh: unknown srh match flags  4000
[  491.311496][T21315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  491.312145][T28282] loop0: detected capacity change from 0 to 512
[  491.328588][T28282] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  491.355538][T28282] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  491.364485][T28282] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  491.373140][T28282] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  491.381501][T28285] loop2: detected capacity change from 0 to 128
[  491.416849][T28285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  491.425004][T28285] System zones: 1-3, 19-19, 35-36
[  491.430727][T28285] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  491.462054][T28285] ext4 filesystem being mounted at /491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  491.517096][T28285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.526158][T28285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.544644][T28285] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  491.812010][T26843] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.836555][T26843] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.856689][T26843] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.878797][T26843] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.961208][T28293] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7397'.
[  491.970548][T28293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7397'.
[  492.070503][T21315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  492.104629][T28301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7400'.
[  492.113721][T28301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7400'.
[  492.134512][T28299] wireguard2: entered promiscuous mode
[  492.139998][T28299] wireguard2: entered allmulticast mode
[  492.329824][T28310] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7404'.
[  492.341397][T28310] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7404'.
[  492.354019][T28308] syzkaller0: entered promiscuous mode
[  492.359527][T28308] syzkaller0: entered allmulticast mode
[  492.367537][T28308] FAULT_INJECTION: forcing a failure.
[  492.367537][T28308] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  492.380693][T28308] CPU: 1 UID: 0 PID: 28308 Comm: syz.1.7403 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  492.380804][T28308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  492.380818][T28308] Call Trace:
[  492.380825][T28308]  <TASK>
[  492.380833][T28308]  __dump_stack+0x1d/0x30
[  492.380856][T28308]  dump_stack_lvl+0xe8/0x140
[  492.380879][T28308]  dump_stack+0x15/0x1b
[  492.380897][T28308]  should_fail_ex+0x265/0x280
[  492.380983][T28308]  should_fail+0xb/0x20
[  492.381020][T28308]  should_fail_usercopy+0x1a/0x20
[  492.381047][T28308]  _copy_from_user+0x1c/0xb0
[  492.381155][T28308]  ___sys_sendmsg+0xc1/0x1d0
[  492.381212][T28308]  __x64_sys_sendmsg+0xd4/0x160
[  492.381291][T28308]  x64_sys_call+0x191e/0x3000
[  492.381312][T28308]  do_syscall_64+0xd2/0x200
[  492.381336][T28308]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  492.381475][T28308]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  492.381550][T28308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.381572][T28308] RIP: 0033:0x7f1f9215eec9
[  492.381587][T28308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.381607][T28308] RSP: 002b:00007f1f90bbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  492.381627][T28308] RAX: ffffffffffffffda RBX: 00007f1f923b5fa0 RCX: 00007f1f9215eec9
[  492.381690][T28308] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  492.381703][T28308] RBP: 00007f1f90bbf090 R08: 0000000000000000 R09: 0000000000000000
[  492.381715][T28308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.381808][T28308] R13: 00007f1f923b6038 R14: 00007f1f923b5fa0 R15: 00007ffc8ecc9b88
[  492.381827][T28308]  </TASK>
[  492.391705][T28312] bridge0: entered promiscuous mode
[  492.564028][T28312] macsec1: entered promiscuous mode
[  492.575824][T28312] bridge0: port 3(macsec1) entered blocking state
[  492.582332][T28312] bridge0: port 3(macsec1) entered disabled state
[  492.589794][T28312] macsec1: entered allmulticast mode
[  492.595143][T28312] bridge0: entered allmulticast mode
[  492.601086][T28312] macsec1: left allmulticast mode
[  492.606192][T28312] bridge0: left allmulticast mode
[  492.611906][T28312] bridge0: left promiscuous mode
[  492.634815][T28318] wireguard5: entered promiscuous mode
[  492.640449][T28318] wireguard5: entered allmulticast mode
[  492.653513][T28320] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.665646][T28315] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.755896][T28320] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.777755][T28315] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.855950][T28320] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.896953][T28315] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.914289][T28331] ip6t_srh: unknown srh match flags  4000
[  492.926444][T28320] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.936802][T28331] loop1: detected capacity change from 0 to 512
[  492.943901][T28331] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  492.963852][T28331] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  492.972933][T28331] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  492.981296][T28331] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  492.993741][T28315] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.053410][T26843] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.082721][T26843] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  493.100699][T26843] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.144594][T26843] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.164320][T26843] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.172614][T26843] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  493.214258][T26843] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.222691][T26843] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.286621][T28341] ip6t_srh: unknown srh match flags  4000
[  493.308386][T28341] loop0: detected capacity change from 0 to 512
[  493.315323][T28341] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  493.347678][T28341] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  493.356783][T28341] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  493.365505][T28341] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  493.381608][T28345] wireguard1: entered promiscuous mode
[  493.387138][T28345] wireguard1: entered allmulticast mode
[  493.446672][T28352] ip6t_srh: unknown srh match flags  4000
[  493.457028][T28352] loop5: detected capacity change from 0 to 512
[  493.484938][T28352] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  493.529355][T28352] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  493.569338][T28352] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  493.585015][T28352] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  494.453554][T28376] loop1: detected capacity change from 0 to 512
[  494.481588][T28376] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  494.521185][T28376] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  494.532551][T28376] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  494.541418][T28376] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  494.650162][T28383] bridge0: entered promiscuous mode
[  494.658142][T28383] macsec1: entered promiscuous mode
[  494.664626][T28383] bridge0: port 3(macsec1) entered blocking state
[  494.671162][T28383] bridge0: port 3(macsec1) entered disabled state
[  494.679503][T28383] macsec1: entered allmulticast mode
[  494.687089][T28383] bridge0: entered allmulticast mode
[  494.694287][T28383] macsec1: left allmulticast mode
[  494.701801][T28383] bridge0: left allmulticast mode
[  494.710822][T28383] bridge0: left promiscuous mode
[  494.747419][T28378] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.774729][T28384] wireguard0: entered promiscuous mode
[  494.780231][T28384] wireguard0: entered allmulticast mode
[  494.926598][T28378] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.962699][T28390] wireguard1: entered promiscuous mode
[  494.968299][T28390] wireguard1: entered allmulticast mode
[  494.994090][T28378] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.056408][T28378] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.121385][T28396] loop0: detected capacity change from 0 to 1024
[  495.138373][T28396] EXT4-fs: Ignoring removed mblk_io_submit option
[  495.144850][T28396] EXT4-fs: Ignoring removed nobh option
[  495.150417][T28396] EXT4-fs: Ignoring removed bh option
[  495.178558][T28398] wireguard5: entered promiscuous mode
[  495.184051][T28398] wireguard5: entered allmulticast mode
[  495.240614][T28396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  495.595833][T28415] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  495.689391][T26845] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.700773][T28420] netlink: 'syz.1.7442': attribute type 3 has an invalid length.
[  495.712080][T26845] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.717454][T28420] loop1: detected capacity change from 0 to 512
[  495.725445][T26845] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.728749][T26845] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.735648][T28420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.735703][T28420] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  495.739242][T28420] EXT4-fs (loop1): shut down requested (0)
[  496.020110][   T29] kauditd_printk_skb: 506 callbacks suppressed
[  496.020127][   T29] audit: type=1326 audit(1760342776.043:84000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28440 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  496.020217][   T29] audit: type=1326 audit(1760342776.043:84001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28440 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  496.020272][   T29] audit: type=1326 audit(1760342776.043:84002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28440 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  496.020433][   T29] audit: type=1326 audit(1760342776.043:84003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28440 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  496.020463][   T29] audit: type=1326 audit(1760342776.043:84004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28440 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  496.086533][   T29] audit: type=1326 audit(1760342776.113:84005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28440 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9215eec9 code=0x7ffc0000
[  496.086571][   T29] audit: type=1326 audit(1760342776.113:84006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28440 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f9215ef03 code=0x7ffc0000
[  496.086645][   T29] audit: type=1326 audit(1760342776.113:84007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28440 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1f9215ef87 code=0x7ffc0000
[  496.094355][   T29] audit: type=1326 audit(1760342776.113:84008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28440 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1f9211632d code=0x7ffc0000
[  496.195128][T28447] loop3: detected capacity change from 0 to 512
[  496.207319][   T29] audit: type=1326 audit(1760342776.113:84009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28440 comm="syz.1.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1f92193609 code=0x7ffc0000
[  496.312112][T28447] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  496.342127][T28443] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  496.351325][T28443] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  496.360095][T28443] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548)
[  496.504440][T28454] __nla_validate_parse: 4 callbacks suppressed
[  496.504458][T28454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7453'.
[  496.519662][T28454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7453'.
[  496.590706][T28459] netlink: 'syz.2.7455': attribute type 3 has an invalid length.
[  496.612559][T28459] loop2: detected capacity change from 0 to 512
[  496.639202][T28459] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  496.667726][T28459] EXT4-fs (loop2): shut down requested (0)
[  496.681096][T28463] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.746030][T28463] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.829894][T28463] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.887961][T28470] ip6t_srh: unknown srh match flags  4000
[  496.916175][T28463] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.944451][T28470] loop1: detected capacity change from 0 to 512
[  496.951271][T28470] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  497.026074][T28470] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  497.054354][T26845] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.065289][T28473] wireguard2: entered promiscuous mode
[  497.070801][T28473] wireguard2: entered allmulticast mode
[  497.075251][T28470] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  497.100773][T28470] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  497.114705][T26845] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.130138][T26845] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.162989][T26845] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.259417][T28485] loop5: detected capacity change from 0 to 128
[  497.277986][T28489] ip6t_srh: unknown srh match flags  4000
[  497.289648][T28489] loop0: detected capacity change from 0 to 512
[  497.299361][T28489] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  497.312614][T28485] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  497.325393][T28485] System zones: 1-3, 19-19, 35-36
[  497.341663][T28489] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  497.355798][T28485] ext4 filesystem being mounted at /583/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  497.397729][T28489] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  497.425036][T28485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.440440][T28489] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[  497.454448][T28485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.494384][T28485] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  498.055312][T28527] netlink: 'syz.5.7468': attribute type 3 has an invalid length.
[  498.097191][T28527] loop5: detected capacity change from 0 to 512
[  498.122709][T28527] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  498.171547][T28532] wireguard2: entered promiscuous mode
[  498.177065][T28532] wireguard2: entered allmulticast mode
[  498.190116][T28527] EXT4-fs (loop5): shut down requested (0)
[  498.517559][T28561] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.585252][T28561] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.676128][T28561] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.736599][T28561] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.760823][T28567] loop0: detected capacity change from 0 to 128
[  498.768339][T28567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  498.776497][T28567] System zones: 1-3, 19-19, 35-36
[  498.782132][T28567] EXT4-fs mount: 8 callbacks suppressed
[  498.782147][T28567] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  498.799892][T28567] ext4 filesystem being mounted at /298/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  498.837004][T26845] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  498.848917][T26845] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  498.864538][T26844] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  498.876258][T26844] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  498.894437][T28567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.913395][T28567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  499.165570][T28577] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7485'.
[  499.195530][T28581] ip6t_srh: unknown srh match flags  4000
[  499.205623][T28581] loop5: detected capacity change from 0 to 512
[  499.211936][T28577] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7485'.
[  499.221583][T28581] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  499.239759][T28581] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  499.248828][T28581] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  499.263785][T28581] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  499.371526][T28590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7490'.
[  499.380583][T28590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7490'.
[  499.487589][T23311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  499.557336][T28593] FAULT_INJECTION: forcing a failure.
[  499.557336][T28593] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  499.570548][T28593] CPU: 1 UID: 0 PID: 28593 Comm: syz.1.7492 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  499.570607][T28593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  499.570625][T28593] Call Trace:
[  499.570631][T28593]  <TASK>
[  499.570639][T28593]  __dump_stack+0x1d/0x30
[  499.570666][T28593]  dump_stack_lvl+0xe8/0x140
[  499.570687][T28593]  dump_stack+0x15/0x1b
[  499.570709][T28593]  should_fail_ex+0x265/0x280
[  499.570784][T28593]  should_fail+0xb/0x20
[  499.570825][T28593]  should_fail_usercopy+0x1a/0x20
[  499.570853][T28593]  _copy_from_user+0x1c/0xb0
[  499.570888][T28593]  memdup_user+0x5e/0xd0
[  499.571002][T28593]  strndup_user+0x68/0xb0
[  499.571034][T28593]  __se_sys_mount+0x4d/0x2e0
[  499.571124][T28593]  ? fput+0x8f/0xc0
[  499.571161][T28593]  ? ksys_write+0x192/0x1a0
[  499.571305][T28593]  __x64_sys_mount+0x67/0x80
[  499.571337][T28593]  x64_sys_call+0x2b51/0x3000
[  499.571366][T28593]  do_syscall_64+0xd2/0x200
[  499.571397][T28593]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  499.571456][T28593]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  499.571487][T28593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.571582][T28593] RIP: 0033:0x7f1f9215eec9
[  499.571598][T28593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  499.571624][T28593] RSP: 002b:00007f1f90bbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  499.571648][T28593] RAX: ffffffffffffffda RBX: 00007f1f923b5fa0 RCX: 00007f1f9215eec9
[  499.571665][T28593] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000
[  499.571716][T28593] RBP: 00007f1f90bbf090 R08: 00002000000004c0 R09: 0000000000000000
[  499.571734][T28593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.571759][T28593] R13: 00007f1f923b6038 R14: 00007f1f923b5fa0 R15: 00007ffc8ecc9b88
[  499.571786][T28593]  </TASK>
[  499.775078][T28600] netlink: 'syz.1.7494': attribute type 3 has an invalid length.
[  499.815764][T28600] loop1: detected capacity change from 0 to 512
[  499.854930][T28600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.867624][T28600] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  499.881257][T28600] EXT4-fs (loop1): shut down requested (0)
[  499.913604][T23486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.991563][T28606] loop2: detected capacity change from 0 to 1024
[  499.992331][T28606] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  500.005760][T28606] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.7495: Invalid block bitmap block 0 in block_group 0
[  500.006010][T28606] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.7495: Failed to acquire dquot type 0
[  500.006285][T28606] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.7495: Freeing blocks not in datazone - block = 0, count = 4096
[  500.006515][T28606] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.7495: Invalid inode bitmap blk 0 in block_group 0
[  500.006693][T28606] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  500.006783][T28606] EXT4-fs (loop2): 1 orphan inode deleted
[  500.007340][T28606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.024302][T26845] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:30: Failed to release dquot type 0
[  500.065117][T28615] wireguard2: entered promiscuous mode
[  500.065140][T28615] wireguard2: entered allmulticast mode
[  500.214002][T28619] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7499'.
[  500.231638][T28619] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7499'.
[  500.322341][T28626] bridge0: entered promiscuous mode
[  500.335922][T28626] macsec1: entered promiscuous mode
[  500.343860][T28626] bridge0: port 3(macsec1) entered blocking state
[  500.350391][T28626] bridge0: port 3(macsec1) entered disabled state
[  500.362586][T28626] macsec1: entered allmulticast mode
[  500.368021][T28626] bridge0: entered allmulticast mode
[  500.376527][T28626] macsec1: left allmulticast mode
[  500.381579][T28626] bridge0: left allmulticast mode
[  500.393588][T28626] bridge0: left promiscuous mode
[  500.407044][T28634] wireguard2: entered promiscuous mode
[  500.412545][T28634] wireguard2: entered allmulticast mode
[  500.509931][T28647] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7509'.
[  500.519007][T28647] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7509'.
[  500.575499][T28653] bond1: (slave macvlan5): Error -98 calling set_mac_address
[  500.730852][T21315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.758167][T28660] bridge0: entered promiscuous mode
[  500.771039][T28660] macsec1: entered promiscuous mode
[  500.788871][T28660] bridge0: port 3(macsec1) entered blocking state
[  500.795466][T28660] bridge0: port 3(macsec1) entered disabled state
[  500.813276][T28664] loop2: detected capacity change from 0 to 1024
[  500.814366][T28660] macsec1: entered allmulticast mode
[  500.820390][T28664] EXT4-fs: Ignoring removed mblk_io_submit option
[  500.824964][T28660] bridge0: entered allmulticast mode
[  500.836803][T28664] EXT4-fs: Ignoring removed nobh option
[  500.842429][T28664] EXT4-fs: Ignoring removed bh option
[  500.848079][T28660] macsec1: left allmulticast mode
[  500.853267][T28660] bridge0: left allmulticast mode
[  500.856218][T28664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  500.874643][T28660] bridge0: left promiscuous mode
[  500.889042][T28665] wireguard2: entered promiscuous mode
[  500.889121][T28665] wireguard2: entered allmulticast mode
[  501.070810][T28680] bridge0: entered promiscuous mode
[  501.071107][T28680] macsec1: entered promiscuous mode
[  501.072082][T28680] bridge0: port 3(macsec1) entered blocking state
[  501.072193][T28680] bridge0: port 3(macsec1) entered disabled state
[  501.072302][T28680] macsec1: entered allmulticast mode
[  501.072319][T28680] bridge0: entered allmulticast mode
[  501.078424][T28680] macsec1: left allmulticast mode
[  501.078442][T28680] bridge0: left allmulticast mode
[  501.091144][T28680] bridge0: left promiscuous mode
[  501.127005][T28684] wireguard2: entered promiscuous mode
[  501.127062][T28684] wireguard2: entered allmulticast mode
[  501.148620][T28683] loop5: detected capacity change from 0 to 1024
[  501.148948][T28683] EXT4-fs: Ignoring removed mblk_io_submit option
[  501.161737][T28683] EXT4-fs: Ignoring removed nobh option
[  501.161838][T28664] ==================================================================
[  501.167339][T28683] EXT4-fs: Ignoring removed bh option
[  501.175360][T28664] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve
[  501.187733][T28664] 
[  501.190063][T28664] write to 0xffffffff869184a8 of 88 bytes by task 28683 on cpu 1:
[  501.197858][T28664]  prb_reserve+0x695/0xaf0
[  501.202311][T28664]  vprintk_store+0x56d/0x860
[  501.206426][T28683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  501.206895][T28664]  vprintk_emit+0x10d/0x580
[  501.223342][T28664]  vprintk_default+0x26/0x30
[  501.223370][T28664]  vprintk+0x1d/0x30
[  501.223395][T28664]  _printk+0x79/0xa0
[  501.223427][T28664]  __ext4_msg+0x135/0x1a0
[  501.223448][T28664]  ext4_parse_param+0x7c1/0xf10
[  501.223468][T28664]  vfs_parse_fs_param+0x142/0x2a0
[  501.223494][T28664]  vfs_parse_monolithic_sep+0x1a3/0x220
[  501.223522][T28664]  generic_parse_monolithic+0x24/0x30
[  501.223547][T28664]  parse_monolithic_mount_data+0x46/0x60
[  501.223577][T28664]  do_new_mount+0x216/0x660
[  501.223601][T28664]  path_mount+0x4a5/0xb70
[  501.223618][T28664]  __se_sys_mount+0x28c/0x2e0
[  501.223640][T28664]  __x64_sys_mount+0x67/0x80
[  501.223659][T28664]  x64_sys_call+0x2b51/0x3000
[  501.223680][T28664]  do_syscall_64+0xd2/0x200
[  501.223708][T28664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.223731][T28664] 
[  501.223737][T28664] read to 0xffffffff869184a8 of 8 bytes by task 28664 on cpu 0:
[  501.223767][T28664]  _prb_read_valid+0x383/0x920
[  501.223787][T28664]  prb_read_valid+0x3c/0x60
[  501.223806][T28664]  console_unlock+0x164/0x2e0
[  501.223829][T28664]  con_flush_chars+0xb2/0x1b0
[  501.223854][T28664]  n_tty_write+0x93d/0xb40
[  501.223884][T28664]  file_tty_write+0x378/0x690
[  501.223903][T28664]  tty_write+0x25/0x30
[  501.223921][T28664]  vfs_write+0x52a/0x960
[  501.223941][T28664]  ksys_write+0xda/0x1a0
[  501.223959][T28664]  __x64_sys_write+0x40/0x50
[  501.223981][T28664]  x64_sys_call+0x2802/0x3000
[  501.359555][T28664]  do_syscall_64+0xd2/0x200
[  501.364109][T28664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.364137][T28664] 
[  501.364142][T28664] value changed: 0x000000000000374d -> 0x000000000000574d
[  501.364152][T28664] 
[  501.364155][T28664] Reported by Kernel Concurrency Sanitizer on:
[  501.364165][T28664] CPU: 0 UID: 0 PID: 28664 Comm: syz.2.7516 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  501.364188][T28664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  501.364213][T28664] ==================================================================
[  501.656196][T21315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.943723][T18931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.