last executing test programs:

6.279921864s ago: executing program 3 (id=1269):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x111}}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000600))
syz_open_procfs(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840)
rseq(0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814)
close(r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0xfc}, 0x1, 0x0, 0x0, 0x204c000}, 0x0)

6.247880766s ago: executing program 3 (id=1271):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = syz_io_uring_setup(0x3393, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, 0x0, 0x64, 0x183000, 0x23456})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aa26d8f3073020927d14ffaaab3f2f39fdc73740a08376aaaaaaaaaaaaaaaaaaaaaa8100100086dd6000000000242b00fe8000000000000000000000000000aafe8000000000000000000000000000aa3c000000000000002b00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r10, 0x2275, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00')

2.375904959s ago: executing program 3 (id=1320):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
gettid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

2.288263626s ago: executing program 4 (id=1321):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

2.287530846s ago: executing program 4 (id=1322):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

2.253025028s ago: executing program 3 (id=1325):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)

2.222653581s ago: executing program 4 (id=1326):
r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r1 = gettid()
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x500, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES8=r3, @ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x80000000}, 0x18)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x73a8034b2c98e04e}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
open(&(0x7f0000000380)='./bus\x00', 0x143c62, 0x48)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
io_uring_setup(0x807cac, &(0x7f00000000c0)={0x0, 0x753a, 0x400, 0x2, 0x1fd})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
io_setup(0x7f, &(0x7f0000000940))
vmsplice(r6, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x10000000000002fa, 0x0)

2.135910958s ago: executing program 3 (id=1327):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x7f, &(0x7f0000000940)=<r2=>0x0)
io_submit(r2, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="c3", 0x1}])
vmsplice(r1, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x10000000000002fa, 0x0)

1.976642811s ago: executing program 3 (id=1330):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = syz_io_uring_setup(0x3393, &(0x7f0000000140)={0x0, 0x20c6, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, 0x0, 0x64, 0x183000, 0x23456})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aa26d8f3073020927d14ffaaab3f2f39fdc73740a08376aaaaaaaaaaaaaaaaaaaaaa8100100086dd6000000000242b00fe8000000000000000000000000000aafe8000000000000000000000000000aa3c000000000000002b00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r10, 0x2275, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00')

1.429989645s ago: executing program 2 (id=1336):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xa}, 0x18)
umount2(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6770675f6167656e745f657865635f743a733030303030303030303030303030303030303030330096d46188d16916c7999063729f2547c82293f3fefba19be0819851d977ace2f361457f7e"], 0x46)
fallocate(r3, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)

1.292046336s ago: executing program 1 (id=1337):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.277147067s ago: executing program 4 (id=1338):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x7f, &(0x7f0000000940)=<r2=>0x0)
io_submit(r2, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="c3", 0x1}])
vmsplice(r1, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x10000000000002fa, 0x0)

1.217472432s ago: executing program 1 (id=1339):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c000780180001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)

1.215701902s ago: executing program 2 (id=1340):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffff39, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='rpcb_register\x00', r1}, 0x18)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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")
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES8=r3], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000f80)={0x150c, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x9b8, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x130, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @empty, 0xfffffff3}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x10}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8001, @private2={0xfc, 0x2, '\x00', 0x8}, 0x1ff}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x78}}]}, {0x128, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "29b8de0aee194da951495bbe692553bbe7d45b8069f41cacf53754ca69047b62"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c61e5c982801512ca4f4bd44d3b784daa96b392ca17582514731c641d8332e98"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "99689b31742a07de4a117cbabc7eb2f6f012506a4907edc016bc967330588ab8"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9c, @rand_addr=' \x01\x00', 0xfffffffe}}]}, {0x258, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xf5, @rand_addr=' \x01\x00', 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a560fb3d9800fd9ff9de131e4bb3415655b94983b52ea7c3c15bf81c6c1e15b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1b0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x3cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3c8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x3dc, 0x8, 0x0, 0x1, [{0x2dc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e8a4d33ee02070d1b9d6056e1de0f5bec164e1962885e094157b3a514bad6f71"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5158a645a3a52abe7cd352f2c6dd2005ef80916ac5f9a78f0d5d34f895e35fe9"}, @WGPEER_A_ALLOWEDIPS={0x288, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0xa3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "742a4ce46bbe069a6c4c716574be62c9e50282d07b0a006d6af3f2bb3aea63be"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8e415664141a519ad59846f74956b494a56f4fa0374e16634bdb30c96d24e9af"}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @mcast1, 0x7}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x6f8, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9418e77ff7377955276835c4560f37a588c9e11fc5eb517dfc5b21641a8d8f21"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x63c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x5d0, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8bb9, @dev={0xfe, 0x80, '\x00', 0x27}, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010102}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @mcast1, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x150c}, 0x1, 0x0, 0x0, 0x24040050}, 0x4000014)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

1.153847467s ago: executing program 1 (id=1341):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x2, &(0x7f0000000580)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
socket(0x11, 0x2, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
bind$tipc(r3, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
r8 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=<r9=>0x0, &(0x7f0000000580)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r8, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8)

1.111044111s ago: executing program 4 (id=1342):
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r0, 0x3c5cb000)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x88000)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10)
connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000340)=0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r1], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
sendmmsg$inet_sctp(r6, &(0x7f0000003780)=[{&(0x7f0000000bc0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0xc044)
recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r5}, 0x10)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0})
write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098000600040000009a09000002000000bb000000fc7d2c7cf1081527338d8e9a67300123a9a3fd9ef337ee387a9c2ae78f5ca1f1a0506e0f96c4d1b435159646dcf79e22d114607f7298024e7a61e9626ab594d0302543ffe5e485dff4b332abc095c6e66c2e06bc85ea1a6f606830b04ca45a37b40542fbe957e5963f4ea6023adc5e1fe7756bde1f1344e8089f0856ca9f55f66af8bf5d00705558a8eb11ff7f9a0ca6812e479229b18935"], 0x1b0)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x11, 0x141002)

1.088287853s ago: executing program 2 (id=1344):
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x2004c8d0)
capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0xfffffffe, 0x4, 0x10001, 0x1, 0xffffffaf, 0x2})
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
capset(&(0x7f0000000200)={0x19980330, r1}, &(0x7f0000000240)={0x7, 0x7, 0x8, 0x4, 0xae, 0xd9f4})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x0, 0x4}, 0x6)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pS    \x00'}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r3=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x8, '\x00', r3, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50)
r4 = openat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x40, 0x3a, 0x35}, 0x18)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000004c0)='silent\x00', 0x0, 0x0)
truncate(&(0x7f0000000500)='.\x00', 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r4, 0x20, &(0x7f0000000680)={&(0x7f0000000540)=""/95, 0x5f, 0x0, &(0x7f00000005c0)=""/140, 0x8c}}, 0x10)
mq_timedsend(r4, &(0x7f0000000700)="047307ca30d6bb", 0x7, 0x43b, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x178, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'l2tp\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IFACE={0x14}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3ff}]}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xfa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7fff}}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xca}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg0\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBPRIO={0x8}, @IPSET_ATTR_ETHER={0xa, 0x11, @local}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x178}}, 0x4000)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r4)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r7, 0x300, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0xc040804)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000c40)={<r8=>0x0, 0x3c, "05296e2ec5bfc077730cdc60e9864e41cbec4cfbb81284e87ca5ea881ca7472d60f421b3692cc626f6262f816fc82098340fe99c16ffcd1ffa8c5e77"}, &(0x7f0000000cc0)=0x44)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000d00)={r8, 0x800}, 0x8)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d40)={0x7ff, <r9=>0x0}, 0x8)
r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000d80)=r9, 0x4)
capset(&(0x7f0000000dc0)={0x19980330, r1}, &(0x7f0000000e00)={0x4, 0x7f, 0x5, 0x3, 0xc7f7, 0x2})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000e80)={'bond_slave_0\x00', &(0x7f0000000e40)=@ethtool_sset_info={0x37, 0x9, 0x10001, [0x2, 0x591, 0xbb, 0xc6, 0x180]}})
preadv2(r10, &(0x7f00000012c0)=[{&(0x7f0000000ec0)=""/146, 0x92}, {&(0x7f0000000f80)=""/83, 0x53}, {&(0x7f0000001000)=""/127, 0x7f}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/131, 0x83}, {&(0x7f0000001180)=""/110, 0x6e}, {&(0x7f0000001200)=""/158, 0x9e}], 0x7, 0x7, 0x10000, 0x6)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000)

1.049279036s ago: executing program 2 (id=1345):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x800, 0x0, 0x0, 0x7ffc0005}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18)
r3 = socket$inet(0x2, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r0}, 0x18)
memfd_create(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x40}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
openat$incfs(0xffffffffffffffff, &(0x7f00000004c0)='.log\x00', 0x20200, 0x199)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f00000007c0)={[{@resgid}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x473, &(0x7f0000000940)="$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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
syz_io_uring_setup(0x1c44, &(0x7f0000000240)={0x0, 0x59fc, 0x80, 0x3, 0xbd7f7fff}, &(0x7f0000000480), 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
pipe(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000440)=[{0x0}], 0x1)
set_tid_address(0x0)

896.157578ms ago: executing program 2 (id=1346):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xa}, 0x18)
umount2(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6770675f6167656e745f657865635f743a733030303030303030303030303030303030303030330096d46188d16916c7999063729f2547c82293f3fefba19be0819851d977ace2f361457f7e"], 0x46)
fallocate(r3, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)

784.153737ms ago: executing program 0 (id=1350):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xa}, 0x18)
umount2(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6770675f6167656e745f657865635f743a733030303030303030303030303030303030303030330096d46188d16916c7999063729f2547c82293f3fefba19be0819851d977ace2f361457f7e"], 0x46)
fallocate(r3, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)

775.145998ms ago: executing program 2 (id=1351):
r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r1 = gettid()
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x500, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES8=r3, @ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x80000000}, 0x18)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x73a8034b2c98e04e}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
open(&(0x7f0000000380)='./bus\x00', 0x143c62, 0x48)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
io_uring_setup(0x807cac, &(0x7f00000000c0)={0x0, 0x753a, 0x400, 0x2, 0x1fd})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x10000000000002fa, 0x0)

618.01594ms ago: executing program 0 (id=1352):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
gettid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

525.081698ms ago: executing program 0 (id=1353):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x7f, &(0x7f0000000940)=<r2=>0x0)
io_submit(r2, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="c3", 0x1}])
vmsplice(r1, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x10000000000002fa, 0x0)

386.811359ms ago: executing program 0 (id=1354):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x1}}}}}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000007000002f6120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], <r6=>0x0, 0xf6, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000800), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e0090bdff7a69bb000010008188e6b62aa73772cc9f1ba1f848110000005e000000000000000e007034c3405806413e11a07ad51718b545919141da50d6deb1cd286d669a8427e440972227933f8249844af560aa35447c1e3e4e00b91c41ac93dc6ea99470540fb3942ec41f3bf60e4c25fa41be25ff2c1615000000000000c20000000000000081bfcbc524edd3410fe1a5c871cee7151c92922fe80ea7091c8f0eaa10dee7e48a62f49a780a4132aab1bc957d39c12a30ab32ff9937d66fcb6056a09d5cf3563bcf9b2e38368cd136597a07", 0xd4}, {&(0x7f0000000500)="4d3a2256235facd863b9d76234a52b030ff65dd94d3dfd73c216f6063570ad0c90cedc61134a902c9825934aa2ff80a044bce924f3f237613cf0ae65a4576136acb6c61e3468609a4a90afd7db0f2f311f7b67b526a5eafac4778bd24b4d25d1c2daac41e7adbc593c03ee6509b63addaa735f37bbbf30d352f765b2db787388446eb171042acbfe522f9f21c297a481ec0a395cc9ff232a7f88bba334e6d81363e7eba49d5a05907f92ba3e05caaa721916d5b7daa2d4f4d00fdbe53c5a15dddaf068a1d26ef79828d9db55d33259d96dec1f699c64655435f67d4ebf4df94b8b3f16595f1e7019ff417dbd68f6970dd9", 0xf1}], 0x2}, 0x60040)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

316.356985ms ago: executing program 0 (id=1355):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)

315.280005ms ago: executing program 1 (id=1356):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x800, 0x0, 0x0, 0x7ffc0005}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18)
r3 = socket$inet(0x2, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r0}, 0x18)
memfd_create(0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x40}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
openat$incfs(0xffffffffffffffff, &(0x7f00000004c0)='.log\x00', 0x20200, 0x199)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f00000007c0)={[{@resgid}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x473, &(0x7f0000000940)="$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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
syz_io_uring_setup(0x1c44, &(0x7f0000000240)={0x0, 0x59fc, 0x80, 0x3, 0xbd7f7fff}, &(0x7f0000000480), 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
pipe(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000440)=[{0x0}], 0x1)
set_tid_address(0x0)

285.507677ms ago: executing program 0 (id=1357):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

239.300291ms ago: executing program 4 (id=1358):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f0000000d00)=""/209, 0xd1, <r4=>0x0, 0x0}}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@bloom_filter={0x1e, 0x80000001, 0x5, 0x2, 0x4, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x1}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x8, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, 0x2f, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xe, 0x9}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000001340)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r8 = socket(0x2c, 0x3, 0x0)
close(r7)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8])
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb)
preadv(r9, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2, 0x6, 0x800)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018ce1100", @ANYRES16=r5, @ANYBLOB="0000000000000000b70200009c1c6f14000000b703000000000000850000f26a000000bf09000000000000000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
sendto$inet6(r0, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
shutdown(r0, 0x1)

133.48638ms ago: executing program 1 (id=1359):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
set_robust_list(&(0x7f0000000640)={0x0, 0xd}, 0x18)

0s ago: executing program 1 (id=1360):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

roup 0, free 0, pa_free 3
[   86.326561][ T5280] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   86.389169][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.528976][ T5293] loop4: detected capacity change from 0 to 512
[   86.540200][ T5293] EXT4-fs (loop4): external journal device major/minor numbers have changed
[   86.582936][ T5293] EXT4-fs (loop4): failed to open journal device unknown-block(0,8) -6
[   86.606044][ T5299] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.637940][ T5293] netlink: 'syz.4.548': attribute type 4 has an invalid length.
[   86.682856][ T5299] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.787634][ T5314] loop2: detected capacity change from 0 to 256
[   86.819265][ T5299] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.821613][ T5317] netlink: 'syz.4.557': attribute type 13 has an invalid length.
[   86.864324][ T5317] 1ªî{X¹¦: refused to change device tx_queue_len
[   86.871622][ T5317] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   86.892683][ T5317] siw: device registration error -23
[   86.922305][ T5325] ref_ctr_offset mismatch. inode: 0x202 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18
[   86.936486][ T5299] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.941250][ T5327] netlink: 'syz.4.561': attribute type 13 has an invalid length.
[   86.959660][ T5327] 1ªî{X¹¦: refused to change device tx_queue_len
[   86.967524][ T5327] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   86.995883][ T5330] netlink: 'syz.0.562': attribute type 4 has an invalid length.
[   87.013787][ T4116] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.025832][   T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.053192][   T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.061933][   T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.082581][ T5334] loop2: detected capacity change from 0 to 256
[   87.163561][ T5344] loop4: detected capacity change from 0 to 1024
[   87.190653][ T5344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.206082][ T5350] loop2: detected capacity change from 0 to 256
[   87.215033][ T5344] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.569: Allocating blocks 465-513 which overlap fs metadata
[   87.230676][ T5344] EXT4-fs (loop4): pa ffff8881072ed770: logic 256, phys. 369, len 9
[   87.238780][ T5344] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   87.258119][ T5344] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   87.320267][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.333399][ T5357] lo speed is unknown, defaulting to 1000
[   87.389744][ T5365] netlink: 'syz.0.575': attribute type 4 has an invalid length.
[   87.440335][ T5367] loop2: detected capacity change from 0 to 512
[   87.460100][ T5367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.482400][ T5376] loop4: detected capacity change from 0 to 1024
[   87.485818][ T5367] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.508761][ T5376] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   87.519894][ T5376] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   87.634684][ T5376] JBD2: no valid journal superblock found
[   87.640465][ T5376] EXT4-fs (loop4): Could not load journal inode
[   87.648098][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.698765][   T29] kauditd_printk_skb: 174 callbacks suppressed
[   87.698798][   T29] audit: type=1326 audit(1756623871.135:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[   87.743054][   T29] audit: type=1326 audit(1756623871.135:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[   87.766571][   T29] audit: type=1326 audit(1756623871.175:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[   87.790419][   T29] audit: type=1326 audit(1756623871.175:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[   87.813844][   T29] audit: type=1326 audit(1756623871.175:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[   87.837640][   T29] audit: type=1326 audit(1756623871.175:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[   87.861282][   T29] audit: type=1326 audit(1756623871.175:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[   87.884712][   T29] audit: type=1326 audit(1756623871.175:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1162dcd69f code=0x7ffc0000
[   87.907917][   T29] audit: type=1326 audit(1756623871.175:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[   87.931375][   T29] audit: type=1326 audit(1756623871.175:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5381 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[   88.013436][ T5392] loop2: detected capacity change from 0 to 1024
[   88.026554][ T5383] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.053846][ T5392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.079900][ T5392] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.584: Allocating blocks 465-513 which overlap fs metadata
[   88.105232][ T5383] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.122473][ T5392] EXT4-fs (loop2): pa ffff88810729f5b0: logic 256, phys. 369, len 9
[   88.130617][ T5392] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   88.143797][ T5393] lo speed is unknown, defaulting to 1000
[   88.152821][ T5392] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   88.187547][ T5383] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.198888][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.273592][ T5399] loop2: detected capacity change from 0 to 256
[   88.314720][ T5383] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.359881][   T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.381999][   T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.461051][   T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.498886][   T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.545522][   T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.575009][   T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.603692][   T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.673255][   T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.698002][ T5409] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.785887][ T5409] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.864942][ T5409] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.932839][ T5422] __nla_validate_parse: 15 callbacks suppressed
[   88.932861][ T5422] netlink: 5 bytes leftover after parsing attributes in process `syz.1.593'.
[   88.949853][ T5409] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.956443][ T5420] loop3: detected capacity change from 0 to 1024
[   88.967551][ T5422] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[   88.976865][ T5422] 1ªî{X¹¦: entered allmulticast mode
[   88.984965][ T5420] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   88.990460][ T5422] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   88.995940][ T5420] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   89.030854][ T5420] JBD2: no valid journal superblock found
[   89.036787][ T5420] EXT4-fs (loop3): Could not load journal inode
[   89.228169][ T5429] lo speed is unknown, defaulting to 1000
[   89.262951][ T5434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.594'.
[   89.275373][ T5433] loop1: detected capacity change from 0 to 256
[   89.334513][ T5433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'.
[   89.350894][ T5439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.359993][ T5439] tipc: Disabling bearer <eth:syzkaller0>
[   89.423405][ T5443] netlink: 'syz.1.600': attribute type 13 has an invalid length.
[   89.448029][ T5443] 1ªî{X¹¦: left allmulticast mode
[   89.455910][ T5443] 1ªî{X¹¦: refused to change device tx_queue_len
[   89.463173][ T5443] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   89.492856][ T5447] loop4: detected capacity change from 0 to 512
[   89.523396][ T5447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.543111][ T5443] siw: device registration error -23
[   89.594084][ T5447] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.679702][ T5459] loop1: detected capacity change from 0 to 1024
[   89.725608][ T5459] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   89.736580][ T5459] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   89.758063][ T5457] loop2: detected capacity change from 0 to 8192
[   89.774693][ T5459] JBD2: no valid journal superblock found
[   89.780489][ T5459] EXT4-fs (loop1): Could not load journal inode
[   89.800327][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.156165][ T5482] lo speed is unknown, defaulting to 1000
[   90.313012][ T5495] loop4: detected capacity change from 0 to 256
[   90.323927][ T5493] loop3: detected capacity change from 0 to 512
[   90.348853][ T5493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.384012][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'.
[   90.394144][ T5493] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.415375][ T5503] loop1: detected capacity change from 0 to 256
[   90.480467][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'.
[   90.513039][ T5509] netlink: 5 bytes leftover after parsing attributes in process `syz.1.622'.
[   90.522691][ T5509] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[   90.534435][ T5509] 0ªî{X¹¦: entered allmulticast mode
[   90.540487][ T5509] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   90.601773][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.693579][ T5521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.716305][ T5521] tipc: Disabling bearer <eth:syzkaller0>
[   90.814987][ T5532] lo speed is unknown, defaulting to 1000
[   90.891299][ T5542] loop3: detected capacity change from 0 to 512
[   90.899734][ T5542] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   90.931971][ T5542] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6
[   90.945816][ T5542] netlink: 'syz.3.635': attribute type 4 has an invalid length.
[   90.972529][ T5547] netlink: 5 bytes leftover after parsing attributes in process `syz.2.636'.
[   90.982271][ T5547] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[   90.997736][ T5547] 1ªî{X¹¦: entered allmulticast mode
[   91.011261][ T5547] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   91.036443][ T5555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.637'.
[   91.045489][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'.
[   91.071601][ T5557] loop2: detected capacity change from 0 to 256
[   91.120938][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'.
[   91.280806][ T5573] loop2: detected capacity change from 0 to 1024
[   91.292071][ T5573] EXT4-fs: inline encryption not supported
[   91.301515][ T5573] journal_path: Non-blockdev passed as './file0'
[   91.308022][ T5573] EXT4-fs: error: could not find journal device path
[   91.429700][ T5581] loop3: detected capacity change from 0 to 512
[   91.438100][ T5581] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   91.465244][ T5581] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6
[   91.478957][ T5581] netlink: 'syz.3.649': attribute type 4 has an invalid length.
[   91.759508][   T56] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.773026][ T3420] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.792523][ T3420] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.815636][ T3420] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.894826][ T5605] netlink: 'syz.0.659': attribute type 13 has an invalid length.
[   91.909879][ T5605] 1ªî{X¹¦: refused to change device tx_queue_len
[   91.928700][ T5605] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   91.944747][ T2956] lo speed is unknown, defaulting to 1000
[   91.950848][ T2956] syz0: Port: 1 Link ACTIVE
[   92.019179][ T5617] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[   92.028131][ T5617] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   92.180953][ T5627] lo speed is unknown, defaulting to 1000
[   92.190954][ T5629] loop2: detected capacity change from 0 to 256
[   92.222516][ T5633] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[   92.242174][ T5633] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   92.541802][ T5651] netlink: 'syz.1.676': attribute type 13 has an invalid length.
[   92.560569][ T5654] bond0: entered promiscuous mode
[   92.565861][ T5654] bond_slave_0: entered promiscuous mode
[   92.571998][ T5654] bond_slave_1: entered promiscuous mode
[   92.676715][ T5651] 0ªî{X¹¦: left allmulticast mode
[   92.682740][ T5651] 0ªî{X¹¦: refused to change device tx_queue_len
[   92.728439][ T5651] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   92.744485][ T5657] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[   92.759318][ T5657] 0ªî{X¹¦: entered allmulticast mode
[   92.772339][ T5657] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   92.914610][ T5668] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[   92.921527][   T29] kauditd_printk_skb: 306 callbacks suppressed
[   92.921545][   T29] audit: type=1400 audit(1756623876.355:2957): avc:  denied  { watch watch_reads } for  pid=5666 comm="syz.2.683" path="/117/file1" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   92.922212][ T5669] process 'syz.2.683' launched './file1' with NULL argv: empty string added
[   92.928294][   T29] audit: type=1400 audit(1756623876.355:2958): avc:  denied  { execute } for  pid=5666 comm="syz.2.683" name="file1" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   92.983959][ T5668] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   93.000575][   T29] audit: type=1400 audit(1756623876.395:2959): avc:  denied  { execute_no_trans } for  pid=5666 comm="syz.2.683" path="/117/file1" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   93.109418][ T5683] loop1: detected capacity change from 0 to 512
[   93.121555][ T5681] FAULT_INJECTION: forcing a failure.
[   93.121555][ T5681] name failslab, interval 1, probability 0, space 0, times 0
[   93.124091][ T5683] EXT4-fs (loop1): external journal device major/minor numbers have changed
[   93.134292][ T5681] CPU: 0 UID: 0 PID: 5681 Comm: syz.2.688 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   93.134323][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   93.134341][ T5681] Call Trace:
[   93.134350][ T5681]  <TASK>
[   93.134363][ T5681]  __dump_stack+0x1d/0x30
[   93.134403][ T5681]  dump_stack_lvl+0xe8/0x140
[   93.134430][ T5681]  dump_stack+0x15/0x1b
[   93.134453][ T5681]  should_fail_ex+0x265/0x280
[   93.134548][ T5681]  should_failslab+0x8c/0xb0
[   93.134591][ T5681]  kmem_cache_alloc_noprof+0x50/0x310
[   93.134628][ T5681]  ? getname_flags+0x80/0x3b0
[   93.134683][ T5681]  getname_flags+0x80/0x3b0
[   93.134721][ T5681]  getname_uflags+0x21/0x30
[   93.134844][ T5681]  __x64_sys_execveat+0x5d/0x90
[   93.134877][ T5681]  x64_sys_call+0x1fec/0x2ff0
[   93.134906][ T5681]  do_syscall_64+0xd2/0x200
[   93.134945][ T5681]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   93.135053][ T5681]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   93.135094][ T5681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.135123][ T5681] RIP: 0033:0x7f1162dcebe9
[   93.135145][ T5681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.135169][ T5681] RSP: 002b:00007f1161837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[   93.135196][ T5681] RAX: ffffffffffffffda RBX: 00007f1163005fa0 RCX: 00007f1162dcebe9
[   93.135234][ T5681] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[   93.135252][ T5681] RBP: 00007f1161837090 R08: 0000000000001000 R09: 0000000000000000
[   93.135269][ T5681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.135286][ T5681] R13: 00007f1163006038 R14: 00007f1163005fa0 R15: 00007ffe6f6c1018
[   93.135313][ T5681]  </TASK>
[   93.340970][ T5683] EXT4-fs (loop1): failed to open journal device unknown-block(0,8) -6
[   93.378041][ T5695] lo speed is unknown, defaulting to 1000
[   93.435181][ T5697] netlink: 'syz.0.692': attribute type 13 has an invalid length.
[   93.448509][ T5683] netlink: 'syz.1.689': attribute type 4 has an invalid length.
[   93.477324][   T29] audit: type=1400 audit(1756623876.915:2960): avc:  denied  { connect } for  pid=5703 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   93.497022][   T29] audit: type=1400 audit(1756623876.915:2961): avc:  denied  { read append } for  pid=5703 comm="syz.1.695" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   93.510331][ T5697] 1ªî{X¹¦: left allmulticast mode
[   93.529094][ T5697] 1ªî{X¹¦: refused to change device tx_queue_len
[   93.535784][ T5704] loop1: detected capacity change from 0 to 128
[   93.537489][ T5697] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   93.559250][ T5701] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[   93.568394][ T5704] syz.1.695: attempt to access beyond end of device
[   93.568394][ T5704] loop1: rw=2049, sector=129, nr_sectors = 1 limit=128
[   93.571498][   T29] audit: type=1400 audit(1756623876.965:2962): avc:  denied  { create } for  pid=5703 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   93.581945][ T5704] Buffer I/O error on dev loop1, logical block 129, lost async page write
[   93.586110][ T5704] syz.1.695: attempt to access beyond end of device
[   93.586110][ T5704] loop1: rw=2049, sector=130, nr_sectors = 1 limit=128
[   93.624724][ T5704] Buffer I/O error on dev loop1, logical block 130, lost async page write
[   93.639860][ T5701] 1ªî{X¹¦: entered allmulticast mode
[   93.648001][ T5704] syz.1.695: attempt to access beyond end of device
[   93.648001][ T5704] loop1: rw=2049, sector=139, nr_sectors = 1 limit=128
[   93.661404][ T5704] Buffer I/O error on dev loop1, logical block 139, lost async page write
[   93.672719][ T5701] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   93.694252][ T5704] syz.1.695: attempt to access beyond end of device
[   93.694252][ T5704] loop1: rw=2049, sector=140, nr_sectors = 1 limit=128
[   93.707946][ T5704] Buffer I/O error on dev loop1, logical block 140, lost async page write
[   93.717268][ T5704] syz.1.695: attempt to access beyond end of device
[   93.717268][ T5704] loop1: rw=2049, sector=141, nr_sectors = 1 limit=128
[   93.730681][ T5704] Buffer I/O error on dev loop1, logical block 141, lost async page write
[   93.740679][ T5704] syz.1.695: attempt to access beyond end of device
[   93.740679][ T5704] loop1: rw=2049, sector=142, nr_sectors = 1 limit=128
[   93.754076][ T5704] Buffer I/O error on dev loop1, logical block 142, lost async page write
[   93.788946][ T5721] netlink: 'syz.3.700': attribute type 13 has an invalid length.
[   93.804444][ T5719] loop2: detected capacity change from 0 to 256
[   93.817025][ T5721] 1ªî{X¹¦: left allmulticast mode
[   93.823272][ T5721] 1ªî{X¹¦: refused to change device tx_queue_len
[   93.833546][ T5725] loop4: detected capacity change from 0 to 1024
[   93.834129][ T5704] syz.1.695: attempt to access beyond end of device
[   93.834129][ T5704] loop1: rw=2049, sector=143, nr_sectors = 1 limit=128
[   93.853459][ T5704] Buffer I/O error on dev loop1, logical block 143, lost async page write
[   93.863097][ T5721] siw: device registration error -23
[   93.866002][ T5704] syz.1.695: attempt to access beyond end of device
[   93.866002][ T5704] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128
[   93.881870][ T5704] Buffer I/O error on dev loop1, logical block 144, lost async page write
[   93.900232][ T5704] syz.1.695: attempt to access beyond end of device
[   93.900232][ T5704] loop1: rw=2049, sector=147, nr_sectors = 1 limit=128
[   93.913730][ T5704] Buffer I/O error on dev loop1, logical block 147, lost async page write
[   93.916590][ T5725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.922819][ T5704] syz.1.695: attempt to access beyond end of device
[   93.922819][ T5704] loop1: rw=2049, sector=148, nr_sectors = 1 limit=128
[   93.935107][ T5735] __nla_validate_parse: 8 callbacks suppressed
[   93.935156][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'.
[   93.948414][ T5704] Buffer I/O error on dev loop1, logical block 148, lost async page write
[   93.959786][   T29] audit: type=1400 audit(1756623877.395:2963): avc:  denied  { getopt } for  pid=5728 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   93.995431][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'.
[   94.002117][ T5725] FAULT_INJECTION: forcing a failure.
[   94.002117][ T5725] name failslab, interval 1, probability 0, space 0, times 0
[   94.017001][ T5725] CPU: 1 UID: 0 PID: 5725 Comm: syz.4.701 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   94.017029][ T5725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   94.017042][ T5725] Call Trace:
[   94.017050][ T5725]  <TASK>
[   94.017057][ T5725]  __dump_stack+0x1d/0x30
[   94.017095][ T5725]  dump_stack_lvl+0xe8/0x140
[   94.017189][ T5725]  dump_stack+0x15/0x1b
[   94.017216][ T5725]  should_fail_ex+0x265/0x280
[   94.017271][ T5725]  should_failslab+0x8c/0xb0
[   94.017295][ T5725]  __kmalloc_noprof+0xa5/0x3e0
[   94.017378][ T5725]  ? ext4_find_extent+0x16b/0x7a0
[   94.017400][ T5725]  ? __rcu_read_unlock+0x34/0x70
[   94.017422][ T5725]  ext4_find_extent+0x16b/0x7a0
[   94.017457][ T5725]  ? loop_queue_rq+0x5e3/0x680
[   94.017509][ T5725]  ext4_ext_map_blocks+0x11f/0x38a0
[   94.017534][ T5725]  ? css_rstat_updated+0xb7/0x240
[   94.017636][ T5725]  ? __rcu_read_unlock+0x4f/0x70
[   94.017693][ T5725]  ? __perf_event_task_sched_in+0xa5b/0xac0
[   94.017715][ T5725]  ? perf_cgroup_switch+0x10c/0x480
[   94.017733][ T5725]  ? update_load_avg+0x1da/0x820
[   94.017759][ T5725]  ? __list_add_valid_or_report+0x38/0xe0
[   94.017848][ T5725]  ? folio_mark_accessed+0x240/0x3d0
[   94.017886][ T5725]  ? folio_mark_accessed+0x240/0x3d0
[   94.017923][ T5725]  ext4_map_query_blocks+0xa8/0x480
[   94.017956][ T5725]  ext4_map_blocks+0x330/0xd00
[   94.017982][ T5725]  ? ext4_get_group_desc+0x16b/0x190
[   94.018088][ T5725]  ? __ext4_journal_start_sb+0x131/0x300
[   94.018111][ T5725]  ext4_iomap_begin+0x88d/0xe00
[   94.018146][ T5725]  ? __pfx_ext4_iomap_begin+0x10/0x10
[   94.018176][ T5725]  iomap_iter+0x332/0x730
[   94.018222][ T5725]  ? should_failslab+0x8c/0xb0
[   94.018249][ T5725]  __iomap_dio_rw+0x708/0x1250
[   94.018286][ T5725]  ? ext4_journal_check_start+0x11a/0x1b0
[   94.018308][ T5725]  iomap_dio_rw+0x40/0x90
[   94.018339][ T5725]  ext4_file_write_iter+0xad9/0xf00
[   94.018388][ T5725]  do_iter_readv_writev+0x499/0x540
[   94.018417][ T5725]  vfs_writev+0x2df/0x8b0
[   94.018470][ T5725]  __se_sys_pwritev2+0xfc/0x1c0
[   94.018498][ T5725]  __x64_sys_pwritev2+0x67/0x80
[   94.018525][ T5725]  x64_sys_call+0x2c55/0x2ff0
[   94.018546][ T5725]  do_syscall_64+0xd2/0x200
[   94.018612][ T5725]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   94.018636][ T5725]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   94.018738][ T5725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.018759][ T5725] RIP: 0033:0x7fd97330ebe9
[   94.018774][ T5725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.018810][ T5725] RSP: 002b:00007fd971d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[   94.018828][ T5725] RAX: ffffffffffffffda RBX: 00007fd973545fa0 RCX: 00007fd97330ebe9
[   94.018841][ T5725] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007
[   94.018853][ T5725] RBP: 00007fd971d6f090 R08: 0000000000000000 R09: 0000000000000003
[   94.018889][ T5725] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001
[   94.018901][ T5725] R13: 00007fd973546038 R14: 00007fd973545fa0 R15: 00007ffc52257c18
[   94.018920][ T5725]  </TASK>
[   94.329283][ T5725] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.701: Allocating blocks 465-513 which overlap fs metadata
[   94.357065][ T5725] EXT4-fs (loop4): pa ffff88810729f5b0: logic 256, phys. 369, len 9
[   94.365202][ T5725] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   94.377246][ T5725] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   94.445648][ T5741] netlink: 'syz.3.707': attribute type 13 has an invalid length.
[   94.467046][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.478352][ T5741] 1ªî{X¹¦: refused to change device tx_queue_len
[   94.543178][ T5756] netlink: 'syz.3.713': attribute type 13 has an invalid length.
[   94.562209][ T5761] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[   94.568802][ T5761] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   94.576510][ T5761] vhci_hcd vhci_hcd.0: Device attached
[   94.583392][ T5756] 1ªî{X¹¦: refused to change device tx_queue_len
[   94.599429][ T5766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.708'.
[   94.608413][ T5762] vhci_hcd: connection closed
[   94.610256][   T12] vhci_hcd: stop threads
[   94.619297][   T12] vhci_hcd: release socket
[   94.622153][ T5759] lo speed is unknown, defaulting to 1000
[   94.623716][   T12] vhci_hcd: disconnect device
[   94.645745][ T5765] loop4: detected capacity change from 0 to 512
[   94.653648][ T5765] EXT4-fs (loop4): external journal device major/minor numbers have changed
[   94.665938][ T5756] siw: device registration error -23
[   94.747754][ T5765] EXT4-fs (loop4): failed to open journal device unknown-block(0,8) -6
[   94.855359][ T5765] netlink: 'syz.4.715': attribute type 4 has an invalid length.
[   94.980491][ T5777] netlink: 5 bytes leftover after parsing attributes in process `syz.4.719'.
[   95.024082][ T5777] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[   95.033639][ T5777] 0ªî{X¹¦: entered allmulticast mode
[   95.163328][   T29] audit: type=1326 audit(1756623878.585:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725d7cebe9 code=0x7ffc0000
[   95.186742][   T29] audit: type=1326 audit(1756623878.585:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725d7cebe9 code=0x7ffc0000
[   95.210269][   T29] audit: type=1326 audit(1756623878.585:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f725d7cebe9 code=0x7ffc0000
[   95.295911][ T5792] 1ªî{X¹¦: left allmulticast mode
[   95.303032][ T5792] 1ªî{X¹¦: refused to change device tx_queue_len
[   95.411306][ T5800] loop3: detected capacity change from 0 to 512
[   95.436618][ T5800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.475963][ T5809] netlink: 5 bytes leftover after parsing attributes in process `syz.1.731'.
[   95.522766][ T5800] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.543722][ T5809] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[   95.567136][ T5809] 1ªî{X¹¦: entered allmulticast mode
[   95.573292][ T5809] net_ratelimit: 5 callbacks suppressed
[   95.573304][ T5809] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   95.605277][ T5800] EXT4-fs (loop3): shut down requested (0)
[   95.636724][ T5812] lo speed is unknown, defaulting to 1000
[   95.714559][ T5815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.730'.
[   95.889315][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.010114][ T5826] netlink: 5 bytes leftover after parsing attributes in process `syz.3.735'.
[   96.053606][ T5828] validate_nla: 1 callbacks suppressed
[   96.053626][ T5828] netlink: 'syz.0.736': attribute type 13 has an invalid length.
[   96.081373][ T5826] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[   96.112373][ T5826] 0ªî{X¹¦: entered allmulticast mode
[   96.133011][ T5826] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   96.162416][ T5828] 1ªî{X¹¦: refused to change device tx_queue_len
[   96.176240][ T5828] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   96.256341][ T5839] netlink: 5 bytes leftover after parsing attributes in process `syz.2.748'.
[   96.288788][ T5839] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[   96.346865][ T5839] 0ªî{X¹¦: entered allmulticast mode
[   96.353012][ T5839] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   96.418432][ T5849] loop3: detected capacity change from 0 to 1024
[   96.455100][ T5851] loop2: detected capacity change from 0 to 512
[   96.462964][ T5849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.493292][ T5851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.507173][ T5851] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.563614][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.627357][ T5862] netlink: 'syz.4.749': attribute type 13 has an invalid length.
[   96.649245][ T5862] 0ªî{X¹¦: left allmulticast mode
[   96.657790][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.671946][ T5862] 0ªî{X¹¦: refused to change device tx_queue_len
[   96.679324][ T5862] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   96.701638][ T5864] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.736267][ T5864] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.793839][ T5872] loop3: detected capacity change from 0 to 1024
[   96.803322][ T5878] FAULT_INJECTION: forcing a failure.
[   96.803322][ T5878] name failslab, interval 1, probability 0, space 0, times 0
[   96.818074][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: syz.2.754 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   96.818112][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   96.818193][ T5878] Call Trace:
[   96.818198][ T5878]  <TASK>
[   96.818205][ T5878]  __dump_stack+0x1d/0x30
[   96.818228][ T5878]  dump_stack_lvl+0xe8/0x140
[   96.818290][ T5878]  dump_stack+0x15/0x1b
[   96.818310][ T5878]  should_fail_ex+0x265/0x280
[   96.818337][ T5878]  should_failslab+0x8c/0xb0
[   96.818369][ T5878]  kmem_cache_alloc_noprof+0x50/0x310
[   96.818403][ T5878]  ? getname_flags+0x80/0x3b0
[   96.818484][ T5878]  getname_flags+0x80/0x3b0
[   96.818515][ T5878]  user_path_at+0x28/0x130
[   96.818545][ T5878]  do_sys_truncate+0x5c/0x130
[   96.818611][ T5878]  __x64_sys_truncate+0x31/0x40
[   96.818680][ T5878]  x64_sys_call+0x1a2f/0x2ff0
[   96.818707][ T5878]  do_syscall_64+0xd2/0x200
[   96.818783][ T5878]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   96.818848][ T5878]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   96.818956][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.818984][ T5878] RIP: 0033:0x7f1162dcebe9
[   96.819002][ T5878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.819021][ T5878] RSP: 002b:00007f1161837038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[   96.819039][ T5878] RAX: ffffffffffffffda RBX: 00007f1163005fa0 RCX: 00007f1162dcebe9
[   96.819052][ T5878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[   96.819067][ T5878] RBP: 00007f1161837090 R08: 0000000000000000 R09: 0000000000000000
[   96.819100][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.819116][ T5878] R13: 00007f1163006038 R14: 00007f1163005fa0 R15: 00007ffe6f6c1018
[   96.819140][ T5878]  </TASK>
[   96.826469][ T5864] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.019891][ T5872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.052981][ T5887] netlink: 'syz.4.755': attribute type 13 has an invalid length.
[   97.062699][ T5864] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.073237][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.086231][ T5887] 0ªî{X¹¦: refused to change device tx_queue_len
[   97.093439][ T5887] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   97.181636][   T56] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.209100][   T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.217776][ T5899] loop2: detected capacity change from 0 to 512
[   97.238569][   T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.267924][   T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.285888][ T5911] netlink: 5 bytes leftover after parsing attributes in process `syz.4.764'.
[   97.293599][ T5909] lo speed is unknown, defaulting to 1000
[   97.316083][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.324160][ T5911] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[   97.346389][ T5911] 1ªî{X¹¦: entered allmulticast mode
[   97.352392][ T5911] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   97.369372][ T5899] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.383196][ T5919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.759'.
[   97.395343][ T5917] netlink: 'syz.3.767': attribute type 13 has an invalid length.
[   97.457147][ T5921] siw: device registration error -23
[   97.464910][ T5922] loop4: detected capacity change from 0 to 1024
[   97.472280][ T5917] 0ªî{X¹¦: left allmulticast mode
[   97.480181][ T5917] 0ªî{X¹¦: refused to change device tx_queue_len
[   97.487507][ T5917] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   97.508859][ T5922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.558557][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.572387][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.662728][ T5931] netlink: 'syz.3.773': attribute type 13 has an invalid length.
[   97.702291][ T5931] 0ªî{X¹¦: refused to change device tx_queue_len
[   97.722344][ T5931] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   97.741480][ T5942] siw: device registration error -23
[   97.747077][ T5943] netlink: 'syz.2.774': attribute type 13 has an invalid length.
[   97.762568][ T5943] 0ªî{X¹¦: left allmulticast mode
[   97.790423][ T5943] 0ªî{X¹¦: refused to change device tx_queue_len
[   97.821738][ T5943] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[   97.849091][ T5947] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.888392][ T5947] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.982522][ T5950] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[   97.993214][ T5950] 1ªî{X¹¦: entered allmulticast mode
[   98.006265][ T5957] loop1: detected capacity change from 0 to 256
[   98.013444][ T5953] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[   98.024141][ T5953] 1ªî{X¹¦: entered allmulticast mode
[   98.075789][ T5947] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.086143][ T5960] netlink: 'syz.3.781': attribute type 13 has an invalid length.
[   98.111949][ T5960] 1ªî{X¹¦: left allmulticast mode
[   98.124794][ T5960] 1ªî{X¹¦: refused to change device tx_queue_len
[   98.138884][ T5965] loop2: detected capacity change from 0 to 512
[   98.167024][ T5960] siw: device registration error -23
[   98.167413][ T5965] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.185087][ T5947] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.215224][ T5972] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[   98.223435][ T5972] 0ªî{X¹¦: entered allmulticast mode
[   98.269278][ T3420] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.286825][ T3420] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.307612][ T3420] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.338851][ T4116] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.423743][ T5991] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[   98.446273][ T5983] loop3: detected capacity change from 0 to 8192
[   98.457543][ T5983] vfat: Unknown parameter 'ÿÿÿÿÿ'
[   98.688978][ T5998] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.818472][ T5998] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.988503][ T5998] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.109439][ T5998] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.176320][ T4116] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.232708][ T6017] loop3: detected capacity change from 0 to 512
[   99.242594][ T6017] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   99.266975][ T6024] loop1: detected capacity change from 0 to 1024
[   99.304972][ T4116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.317211][ T4116] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.337549][ T4116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.345945][ T6017] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6
[   99.355317][   T29] kauditd_printk_skb: 199 callbacks suppressed
[   99.355332][   T29] audit: type=1326 audit(1756623882.775:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[   99.422525][ T6017] netlink: 'syz.3.802': attribute type 4 has an invalid length.
[   99.451636][ T6036] lo speed is unknown, defaulting to 1000
[   99.481978][   T29] audit: type=1326 audit(1756623882.825:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[   99.498763][ T6042] __nla_validate_parse: 5 callbacks suppressed
[   99.498783][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.805'.
[   99.505457][   T29] audit: type=1326 audit(1756623882.825:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[   99.543991][   T29] audit: type=1326 audit(1756623882.825:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[   99.567491][   T29] audit: type=1326 audit(1756623882.825:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[   99.591712][   T29] audit: type=1326 audit(1756623882.825:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[   99.615437][   T29] audit: type=1326 audit(1756623882.825:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[   99.638005][ T6047] netlink: 5 bytes leftover after parsing attributes in process `syz.1.811'.
[   99.639211][   T29] audit: type=1326 audit(1756623882.825:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[   99.658456][ T6047] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[   99.670874][   T29] audit: type=1326 audit(1756623882.825:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[   99.700487][   T29] audit: type=1326 audit(1756623882.825:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[   99.756228][ T6040] netlink: 'syz.4.810': attribute type 13 has an invalid length.
[   99.808472][ T6040] 1ªî{X¹¦: left allmulticast mode
[   99.842226][ T6040] 1ªî{X¹¦: refused to change device tx_queue_len
[   99.927310][ T6065] netlink: 'syz.4.817': attribute type 13 has an invalid length.
[   99.943037][ T6065] 1ªî{X¹¦: refused to change device tx_queue_len
[  100.013669][ T6070] siw: device registration error -23
[  100.383905][ T6083] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  100.390513][ T6083] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  100.398141][ T6083] vhci_hcd vhci_hcd.0: Device attached
[  100.428408][ T6087] loop4: detected capacity change from 0 to 512
[  100.442928][ T6087] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  100.475122][ T6085] vhci_hcd: connection closed
[  100.475668][   T12] vhci_hcd: stop threads
[  100.484687][   T12] vhci_hcd: release socket
[  100.489112][   T12] vhci_hcd: disconnect device
[  100.517828][ T6087] EXT4-fs (loop4): failed to open journal device unknown-block(0,8) -6
[  100.556041][ T6091] netlink: 5 bytes leftover after parsing attributes in process `syz.0.824'.
[  100.565552][ T6091] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  100.576595][ T6091] 0ªî{X¹¦: entered allmulticast mode
[  100.582542][ T6091] net_ratelimit: 8 callbacks suppressed
[  100.582557][ T6091] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  100.642232][ T6096] 0ªî{X¹¦: left allmulticast mode
[  100.651807][ T6096] 0ªî{X¹¦: refused to change device tx_queue_len
[  100.677882][ T6096] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  100.723393][ T6110] netlink: 5 bytes leftover after parsing attributes in process `syz.3.831'.
[  100.734646][ T6110] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  100.745192][ T6110] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  100.843123][ T6121] netlink: 5 bytes leftover after parsing attributes in process `syz.0.838'.
[  100.854337][ T6121] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  100.862169][ T6121] 1ªî{X¹¦: entered allmulticast mode
[  100.874460][ T6121] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  100.893572][ T6126] loop4: detected capacity change from 0 to 512
[  100.898115][ T6128] loop1: detected capacity change from 0 to 512
[  100.931691][ T6126] EXT4-fs mount: 4 callbacks suppressed
[  100.931710][ T6126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.958271][ T6128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.960609][ T6126] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  100.983475][ T6128] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  101.019418][ T6126] EXT4-fs (loop4): shut down requested (0)
[  101.124983][ T6144] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.135554][ T6148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.835'.
[  101.145785][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.194970][ T6138] lo speed is unknown, defaulting to 1000
[  101.200789][ T6150] tipc: Started in network mode
[  101.205823][ T6150] tipc: Node identity 52515da35871, cluster identity 4711
[  101.213050][ T6150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.235756][ T6147] tipc: Disabling bearer <eth:syzkaller0>
[  101.274277][ T6144] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.309112][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.410904][ T6144] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.476261][ T6144] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.538925][   T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.555803][   T56] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.568415][ T6182] validate_nla: 2 callbacks suppressed
[  101.568429][ T6182] netlink: 'syz.2.855': attribute type 13 has an invalid length.
[  101.587096][ T6182] 1ªî{X¹¦: left allmulticast mode
[  101.591305][ T6180] loop4: detected capacity change from 0 to 512
[  101.599065][ T6182] 1ªî{X¹¦: refused to change device tx_queue_len
[  101.611236][ T6182] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  101.627551][   T56] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.639638][ T6180] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  101.642227][   T56] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.686696][ T6174] siw: device registration error -23
[  101.697667][ T6185] loop1: detected capacity change from 0 to 512
[  101.738414][ T6188] netlink: 'syz.2.860': attribute type 13 has an invalid length.
[  101.751401][ T6188] 1ªî{X¹¦: refused to change device tx_queue_len
[  101.779717][ T6188] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  101.802657][ T6180] EXT4-fs (loop4): failed to open journal device unknown-block(0,8) -6
[  101.811758][ T6185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.837855][ T6180] netlink: 'syz.4.858': attribute type 4 has an invalid length.
[  101.915130][ T6185] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  101.929874][ T6200] netlink: 5 bytes leftover after parsing attributes in process `syz.2.864'.
[  101.961851][ T6185] EXT4-fs (loop1): shut down requested (0)
[  101.988480][ T6204] netlink: 5 bytes leftover after parsing attributes in process `syz.0.866'.
[  101.998707][ T6200] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  102.015376][ T6200] 0ªî{X¹¦: entered allmulticast mode
[  102.021360][ T6200] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  102.037337][ T6204] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  102.053844][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.075895][ T6204] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  102.237909][ T6225] netlink: 'syz.4.875': attribute type 13 has an invalid length.
[  102.268871][ T6225] 1ªî{X¹¦: refused to change device tx_queue_len
[  102.276997][ T6225] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  102.305696][ T6232] pim6reg: entered allmulticast mode
[  102.314285][ T6232] pim6reg: left allmulticast mode
[  102.343174][ T6239] netlink: 5 bytes leftover after parsing attributes in process `syz.4.881'.
[  102.352195][ T6239] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  102.362760][ T6242] netlink: 5 bytes leftover after parsing attributes in process `syz.1.882'.
[  102.375220][ T6239] 0ªî{X¹¦: entered allmulticast mode
[  102.380909][ T6243] loop3: detected capacity change from 0 to 512
[  102.381423][ T6239] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  102.403677][ T6242] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  102.423692][ T6243] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  102.432399][ T6243] System zones: 0-2, 18-18, 34-34
[  102.440801][ T6243] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.878: bg 0: block 248: padding at end of block bitmap is not set
[  102.477791][ T6243] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.878: Failed to acquire dquot type 1
[  102.493733][ T6243] EXT4-fs (loop3): 1 truncate cleaned up
[  102.501875][ T6243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.522852][ T6243] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.575044][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.638978][ T6271] loop1: detected capacity change from 0 to 256
[  102.697137][ T6278] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  102.854287][ T6295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.869394][ T6295] tipc: Disabling bearer <eth:syzkaller0>
[  102.939973][ T6301] loop3: detected capacity change from 0 to 256
[  103.040500][ T6312] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  103.181179][ T6328] loop1: detected capacity change from 0 to 512
[  103.196755][ T6328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.213820][ T6328] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.306386][ T6329] FAULT_INJECTION: forcing a failure.
[  103.306386][ T6329] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.319934][ T6329] CPU: 1 UID: 0 PID: 6329 Comm: syz.2.915 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  103.319975][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  103.320032][ T6329] Call Trace:
[  103.320041][ T6329]  <TASK>
[  103.320051][ T6329]  __dump_stack+0x1d/0x30
[  103.320075][ T6329]  dump_stack_lvl+0xe8/0x140
[  103.320093][ T6329]  dump_stack+0x15/0x1b
[  103.320108][ T6329]  should_fail_ex+0x265/0x280
[  103.320128][ T6329]  should_fail+0xb/0x20
[  103.320172][ T6329]  should_fail_usercopy+0x1a/0x20
[  103.320235][ T6329]  _copy_to_user+0x20/0xa0
[  103.320272][ T6329]  simple_read_from_buffer+0xb5/0x130
[  103.320294][ T6329]  proc_fail_nth_read+0x10e/0x150
[  103.320370][ T6329]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  103.320400][ T6329]  vfs_read+0x1a8/0x770
[  103.320424][ T6329]  ? __rcu_read_unlock+0x4f/0x70
[  103.320530][ T6329]  ? __fget_files+0x184/0x1c0
[  103.320565][ T6329]  ksys_read+0xda/0x1a0
[  103.320590][ T6329]  __x64_sys_read+0x40/0x50
[  103.320660][ T6329]  x64_sys_call+0x27bc/0x2ff0
[  103.320687][ T6329]  do_syscall_64+0xd2/0x200
[  103.320763][ T6329]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  103.320867][ T6329]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  103.320949][ T6329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.320970][ T6329] RIP: 0033:0x7f1162dcd5fc
[  103.320988][ T6329] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  103.321011][ T6329] RSP: 002b:00007f1161816030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  103.321031][ T6329] RAX: ffffffffffffffda RBX: 00007f1163006090 RCX: 00007f1162dcd5fc
[  103.321043][ T6329] RDX: 000000000000000f RSI: 00007f11618160a0 RDI: 0000000000000007
[  103.321111][ T6329] RBP: 00007f1161816090 R08: 0000000000000000 R09: 0000000000000000
[  103.321126][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.321140][ T6329] R13: 00007f1163006128 R14: 00007f1163006090 R15: 00007ffe6f6c1018
[  103.321164][ T6329]  </TASK>
[  103.541094][ T6334] loop3: detected capacity change from 0 to 8192
[  103.551785][ T6334] vfat: Unknown parameter 'ÿÿÿÿÿ'
[  103.552952][ T6339] loop4: detected capacity change from 0 to 256
[  103.620252][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.680005][ T6348] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  103.695120][ T6346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.711501][ T6346] tipc: Disabling bearer <eth:syzkaller0>
[  103.799068][ T6358] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.894981][ T6358] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.935848][ T6358] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.006746][ T6358] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.111427][   T56] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.129512][   T56] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.151125][   T56] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.159668][   T56] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.226070][ T6402] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  104.226070][ T6402]    program syz.4.940 not setting count and/or reply_len properly
[  104.243344][ T6392] netlink: 'syz.0.938': attribute type 13 has an invalid length.
[  104.277470][ T6392] 0ªî{X¹¦: left allmulticast mode
[  104.291448][ T6392] 0ªî{X¹¦: refused to change device tx_queue_len
[  104.312179][ T6409] FAULT_INJECTION: forcing a failure.
[  104.312179][ T6409] name failslab, interval 1, probability 0, space 0, times 0
[  104.325519][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz.3.939 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  104.325546][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  104.325607][ T6409] Call Trace:
[  104.325614][ T6409]  <TASK>
[  104.325623][ T6409]  __dump_stack+0x1d/0x30
[  104.325649][ T6409]  dump_stack_lvl+0xe8/0x140
[  104.325674][ T6409]  dump_stack+0x15/0x1b
[  104.325695][ T6409]  should_fail_ex+0x265/0x280
[  104.325731][ T6409]  ? selinux_bpf_prog_load+0x36/0xf0
[  104.325771][ T6409]  should_failslab+0x8c/0xb0
[  104.325803][ T6409]  __kmalloc_cache_noprof+0x4c/0x320
[  104.325842][ T6409]  selinux_bpf_prog_load+0x36/0xf0
[  104.325870][ T6409]  security_bpf_prog_load+0x54/0xa0
[  104.325896][ T6409]  bpf_prog_load+0xe6b/0x1070
[  104.325953][ T6409]  ? security_bpf+0x2b/0x90
[  104.326003][ T6409]  __sys_bpf+0x462/0x7b0
[  104.326110][ T6409]  __x64_sys_bpf+0x41/0x50
[  104.326133][ T6409]  x64_sys_call+0x2aea/0x2ff0
[  104.326153][ T6409]  do_syscall_64+0xd2/0x200
[  104.326187][ T6409]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  104.326235][ T6409]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  104.326261][ T6409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.326282][ T6409] RIP: 0033:0x7f725d7cebe9
[  104.326316][ T6409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.326339][ T6409] RSP: 002b:00007f725c20e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  104.326396][ T6409] RAX: ffffffffffffffda RBX: 00007f725da06090 RCX: 00007f725d7cebe9
[  104.326412][ T6409] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005
[  104.326426][ T6409] RBP: 00007f725c20e090 R08: 0000000000000000 R09: 0000000000000000
[  104.326438][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.326481][ T6409] R13: 00007f725da06128 R14: 00007f725da06090 R15: 00007ffd6157d0f8
[  104.326505][ T6409]  </TASK>
[  104.546207][ T6416] __nla_validate_parse: 8 callbacks suppressed
[  104.546223][ T6416] netlink: 5 bytes leftover after parsing attributes in process `syz.0.944'.
[  104.582913][   T29] kauditd_printk_skb: 485 callbacks suppressed
[  104.582991][   T29] audit: type=1400 audit(1756623888.005:3659): avc:  denied  { create } for  pid=6398 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  104.589229][ T6413] lo speed is unknown, defaulting to 1000
[  104.600798][ T6418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'.
[  104.609090][   T29] audit: type=1400 audit(1756623888.005:3660): avc:  denied  { write } for  pid=6398 comm="syz.3.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  104.643187][   T29] audit: type=1400 audit(1756623888.005:3661): avc:  denied  { read write } for  pid=6398 comm="syz.3.939" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  104.653661][ T6416] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  104.666610][   T29] audit: type=1400 audit(1756623888.005:3662): avc:  denied  { open } for  pid=6398 comm="syz.3.939" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  104.696459][   T29] audit: type=1326 audit(1756623888.015:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725d7cebe9 code=0x7ffc0000
[  104.719862][   T29] audit: type=1326 audit(1756623888.015:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6398 comm="syz.3.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725d7cebe9 code=0x7ffc0000
[  104.745598][ T6416] 1ªî{X¹¦: entered allmulticast mode
[  104.831674][   T29] audit: type=1326 audit(1756623888.265:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[  104.855248][   T29] audit: type=1326 audit(1756623888.265:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[  104.878821][   T29] audit: type=1326 audit(1756623888.265:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[  104.902289][   T29] audit: type=1326 audit(1756623888.265:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1162dcebe9 code=0x7ffc0000
[  104.960392][ T6423] loop4: detected capacity change from 0 to 8192
[  104.967305][ T6423] vfat: Unknown parameter 'ÿÿÿÿÿ'
[  105.091323][ T6434] netlink: 64 bytes leftover after parsing attributes in process `syz.4.947'.
[  105.143103][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[  105.190462][ T6441] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.225180][ T6443] loop3: detected capacity change from 0 to 512
[  105.255943][ T6443] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  105.272137][ T6441] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.336237][ T6441] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.346017][ T6451] netlink: 'syz.0.954': attribute type 13 has an invalid length.
[  105.355973][ T6443] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6
[  105.368599][ T6451] 1ªî{X¹¦: left allmulticast mode
[  105.374811][ T6451] 1ªî{X¹¦: refused to change device tx_queue_len
[  105.406086][ T6441] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.419094][ T6443] netlink: 'syz.3.952': attribute type 4 has an invalid length.
[  105.443346][ T6454] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  105.443346][ T6454]    program syz.0.955 not setting count and/or reply_len properly
[  105.525674][   T56] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.550504][   T56] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.573691][   T56] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.598621][   T56] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.659387][ T6461] loop2: detected capacity change from 0 to 512
[  105.702027][ T6461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.714828][ T6461] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.733018][ T6461] EXT4-fs (loop2): shut down requested (0)
[  105.797165][ T6480] netlink: 'syz.4.965': attribute type 13 has an invalid length.
[  105.810339][ T6480] 1ªî{X¹¦: left allmulticast mode
[  105.825371][ T6480] 1ªî{X¹¦: refused to change device tx_queue_len
[  105.832839][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'.
[  105.851691][ T6485] loop1: detected capacity change from 0 to 512
[  105.867587][ T6480] net_ratelimit: 7 callbacks suppressed
[  105.867605][ T6480] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  105.898112][ T6485] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  105.917307][ T6480] siw: device registration error -23
[  105.976404][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.986592][ T6500] netlink: 5 bytes leftover after parsing attributes in process `syz.0.969'.
[  105.995714][ T6485] EXT4-fs (loop1): failed to open journal device unknown-block(0,8) -6
[  106.004291][ T6500] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  106.012615][ T6500] 0ªî{X¹¦: entered allmulticast mode
[  106.036666][ T6500] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  106.053533][ T6485] netlink: 'syz.1.966': attribute type 4 has an invalid length.
[  106.107300][ T6509] loop4: detected capacity change from 0 to 512
[  106.168302][ T6524] loop3: detected capacity change from 0 to 256
[  106.176886][ T6509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.189787][ T6509] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  106.203488][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'.
[  106.203866][ T6522] netlink: 'syz.0.978': attribute type 13 has an invalid length.
[  106.212472][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'.
[  106.232202][ T6522] 0ªî{X¹¦: left allmulticast mode
[  106.240076][ T6509] EXT4-fs (loop4): shut down requested (0)
[  106.247783][ T6522] 0ªî{X¹¦: refused to change device tx_queue_len
[  106.255723][ T6522] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  106.289259][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'.
[  106.354496][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.458962][ T6548] loop3: detected capacity change from 0 to 512
[  106.518717][ T6548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.536510][ T6554] netlink: 5 bytes leftover after parsing attributes in process `syz.0.989'.
[  106.556872][ T6554] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  106.565543][ T6554] 1ªî{X¹¦: entered allmulticast mode
[  106.571840][ T6554] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  106.691063][ T6548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.956986][ T6564] netlink: 'syz.0.993': attribute type 13 has an invalid length.
[  106.997392][ T6564] 1ªî{X¹¦: left allmulticast mode
[  107.018329][ T6564] 1ªî{X¹¦: refused to change device tx_queue_len
[  107.041942][ T6564] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  107.058445][ T6568] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  107.067777][ T6568] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  107.131907][ T6579] loop1: detected capacity change from 0 to 512
[  107.170519][ T6579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.192327][ T6585] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.251945][ T6579] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.279769][ T6589] loop4: detected capacity change from 0 to 512
[  107.288356][ T6585] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.291343][ T6579] EXT4-fs (loop1): shut down requested (0)
[  107.321510][ T6589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.335310][ T6589] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.352237][ T6589] EXT4-fs (loop4): shut down requested (0)
[  107.354742][ T6595] netlink: 'syz.0.1004': attribute type 13 has an invalid length.
[  107.369601][ T6595] 1ªî{X¹¦: refused to change device tx_queue_len
[  107.376786][ T6595] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  107.400665][ T6585] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.446569][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.476928][ T6585] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.503653][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.519547][ T6606] loop1: detected capacity change from 0 to 256
[  107.570178][ T6612] netlink: 'syz.4.1009': attribute type 13 has an invalid length.
[  107.581336][   T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.595546][ T6612] 1ªî{X¹¦: refused to change device tx_queue_len
[  107.610740][ T6612] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  107.658403][   T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.697021][   T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.709732][   T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.722206][ T6627] loop1: detected capacity change from 0 to 512
[  107.735467][ T6627] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  107.770667][ T6635] loop2: detected capacity change from 0 to 512
[  107.806056][ T6635] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  107.819959][ T6627] EXT4-fs (loop1): failed to open journal device unknown-block(0,8) -6
[  107.859915][ T6627] netlink: 'syz.1.1012': attribute type 4 has an invalid length.
[  107.925918][ T6635] EXT4-fs (loop2): failed to open journal device unknown-block(0,8) -6
[  107.986367][ T6658] loop4: detected capacity change from 0 to 256
[  108.009017][ T6635] netlink: 'syz.2.1015': attribute type 4 has an invalid length.
[  108.038156][ T6662] netlink: 'syz.3.1025': attribute type 13 has an invalid length.
[  108.064275][ T6665] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.119218][ T6662] 0ªî{X¹¦: left allmulticast mode
[  108.128433][ T6662] 0ªî{X¹¦: refused to change device tx_queue_len
[  108.154321][ T6662] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  108.224573][ T6665] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.266794][ T6665] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.322769][ T6678] FAULT_INJECTION: forcing a failure.
[  108.322769][ T6678] name failslab, interval 1, probability 0, space 0, times 0
[  108.335739][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.4.1028 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  108.335769][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  108.335786][ T6678] Call Trace:
[  108.335794][ T6678]  <TASK>
[  108.335804][ T6678]  __dump_stack+0x1d/0x30
[  108.335830][ T6678]  dump_stack_lvl+0xe8/0x140
[  108.335855][ T6678]  dump_stack+0x15/0x1b
[  108.335895][ T6678]  should_fail_ex+0x265/0x280
[  108.335915][ T6678]  ? __pfx_cond_bools_destroy+0x10/0x10
[  108.335946][ T6678]  should_failslab+0x8c/0xb0
[  108.336047][ T6678]  kmem_cache_alloc_noprof+0x50/0x310
[  108.336076][ T6678]  ? hashtab_duplicate+0xfe/0x360
[  108.336146][ T6678]  ? __pfx_cond_bools_destroy+0x10/0x10
[  108.336181][ T6678]  hashtab_duplicate+0xfe/0x360
[  108.336223][ T6678]  ? __pfx_cond_bools_copy+0x10/0x10
[  108.336273][ T6678]  cond_policydb_dup+0xd2/0x4e0
[  108.336312][ T6678]  security_set_bools+0xa0/0x340
[  108.336466][ T6678]  sel_commit_bools_write+0x1ea/0x270
[  108.336494][ T6678]  ? __pfx_sel_commit_bools_write+0x10/0x10
[  108.336604][ T6678]  vfs_write+0x269/0x960
[  108.336656][ T6678]  ? __rcu_read_unlock+0x4f/0x70
[  108.336683][ T6678]  ? __fget_files+0x184/0x1c0
[  108.336717][ T6678]  ksys_write+0xda/0x1a0
[  108.336802][ T6678]  __x64_sys_write+0x40/0x50
[  108.336830][ T6678]  x64_sys_call+0x27fe/0x2ff0
[  108.336853][ T6678]  do_syscall_64+0xd2/0x200
[  108.336880][ T6678]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  108.336906][ T6678]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  108.337003][ T6678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.337029][ T6678] RIP: 0033:0x7fd97330ebe9
[  108.337044][ T6678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.337062][ T6678] RSP: 002b:00007fd971d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  108.337081][ T6678] RAX: ffffffffffffffda RBX: 00007fd973545fa0 RCX: 00007fd97330ebe9
[  108.337179][ T6678] RDX: 0000000000000003 RSI: 0000200000000800 RDI: 0000000000000003
[  108.337255][ T6678] RBP: 00007fd971d6f090 R08: 0000000000000000 R09: 0000000000000000
[  108.337267][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.337281][ T6678] R13: 00007fd973546038 R14: 00007fd973545fa0 R15: 00007ffc52257c18
[  108.337300][ T6678]  </TASK>
[  108.342481][ T6662] siw: device registration error -23
[  108.366955][ T6673] lo speed is unknown, defaulting to 1000
[  108.606770][ T6665] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.705159][ T4116] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.723776][ T4116] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.735989][ T4116] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.755351][ T4116] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.776441][ T6697] loop4: detected capacity change from 0 to 256
[  108.887359][ T6706] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.974145][ T6711] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  108.982551][ T6711] 0ªî{X¹¦: entered allmulticast mode
[  109.022803][ T6711] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  109.044233][ T6706] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.119569][ T6726] loop4: detected capacity change from 0 to 512
[  109.130463][ T6706] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.227657][ T6726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.258619][ T6726] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.271476][ T6706] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.409962][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.594039][ T6735] netlink: 'syz.0.1047': attribute type 4 has an invalid length.
[  109.605946][   T36] lo speed is unknown, defaulting to 1000
[  109.611722][   T36] syz0: Port: 1 Link DOWN
[  109.698881][   T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.736534][ T4116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.745057][   T29] kauditd_printk_skb: 143 callbacks suppressed
[  109.745073][   T29] audit: type=1326 audit(1756623893.175:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97330ebe9 code=0x7ffc0000
[  109.774924][   T29] audit: type=1326 audit(1756623893.175:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97330ebe9 code=0x7ffc0000
[  109.798480][   T29] audit: type=1326 audit(1756623893.175:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97330ebe9 code=0x7ffc0000
[  109.822146][   T29] audit: type=1326 audit(1756623893.175:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97330ebe9 code=0x7ffc0000
[  109.845861][   T29] audit: type=1326 audit(1756623893.175:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97330ebe9 code=0x7ffc0000
[  109.855976][ T4116] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.869840][   T29] audit: type=1326 audit(1756623893.175:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97330ebe9 code=0x7ffc0000
[  109.889699][ T4116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.901237][   T29] audit: type=1326 audit(1756623893.175:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97330ebe9 code=0x7ffc0000
[  109.901268][   T29] audit: type=1326 audit(1756623893.175:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97330ebe9 code=0x7ffc0000
[  109.975177][ T6752] __nla_validate_parse: 6 callbacks suppressed
[  109.975192][ T6752] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1055'.
[  110.005743][ T6752] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  110.044191][ T6757] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1057'.
[  110.056229][ T6757] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  110.062639][   T29] audit: type=1326 audit(1756623893.355:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97330ebe9 code=0x7ffc0000
[  110.086210][   T29] audit: type=1326 audit(1756623893.355:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.4.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97330ebe9 code=0x7ffc0000
[  110.110656][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'.
[  110.212106][ T6770] netlink: 'syz.2.1061': attribute type 13 has an invalid length.
[  110.226507][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1063'.
[  110.240857][ T6770] 0ªî{X¹¦: left allmulticast mode
[  110.254080][ T6770] 0ªî{X¹¦: refused to change device tx_queue_len
[  110.262855][ T6779] loop1: detected capacity change from 0 to 256
[  110.282972][ T6770] siw: device registration error -23
[  110.290316][ T6781] netlink: 'syz.0.1066': attribute type 13 has an invalid length.
[  110.299469][ T6775] FAULT_INJECTION: forcing a failure.
[  110.299469][ T6775] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  110.312727][ T6775] CPU: 1 UID: 0 PID: 6775 Comm: syz.4.1063 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  110.312793][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  110.312805][ T6775] Call Trace:
[  110.312810][ T6775]  <TASK>
[  110.312819][ T6775]  __dump_stack+0x1d/0x30
[  110.312846][ T6775]  dump_stack_lvl+0xe8/0x140
[  110.312868][ T6775]  dump_stack+0x15/0x1b
[  110.312992][ T6775]  should_fail_ex+0x265/0x280
[  110.313067][ T6775]  should_fail+0xb/0x20
[  110.313084][ T6775]  should_fail_usercopy+0x1a/0x20
[  110.313107][ T6775]  _copy_from_user+0x1c/0xb0
[  110.313212][ T6775]  ___sys_sendmsg+0xc1/0x1d0
[  110.313252][ T6775]  __x64_sys_sendmsg+0xd4/0x160
[  110.313329][ T6775]  x64_sys_call+0x191e/0x2ff0
[  110.313351][ T6775]  do_syscall_64+0xd2/0x200
[  110.313379][ T6775]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  110.313475][ T6775]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  110.313502][ T6775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.313585][ T6775] RIP: 0033:0x7fd97330ebe9
[  110.313600][ T6775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.313622][ T6775] RSP: 002b:00007fd971d6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.313714][ T6775] RAX: ffffffffffffffda RBX: 00007fd973545fa0 RCX: 00007fd97330ebe9
[  110.313726][ T6775] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  110.313739][ T6775] RBP: 00007fd971d6f090 R08: 0000000000000000 R09: 0000000000000000
[  110.313751][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.313763][ T6775] R13: 00007fd973546038 R14: 00007fd973545fa0 R15: 00007ffc52257c18
[  110.313783][ T6775]  </TASK>
[  110.486275][ T6781] 1ªî{X¹¦: refused to change device tx_queue_len
[  110.502835][   T10] lo speed is unknown, defaulting to 1000
[  110.508737][   T10] syz0: Port: 1 Link ACTIVE
[  110.524701][ T6790] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1068'.
[  110.534284][ T6790] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  110.545221][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'.
[  110.558529][ T6794] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.631390][ T6794] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.648244][ T6803] loop1: detected capacity change from 0 to 256
[  110.699094][ T6794] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.750707][ T6794] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.764592][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'.
[  110.775332][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'.
[  110.818622][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1079'.
[  110.932911][ T6830] netlink: 'syz.4.1082': attribute type 13 has an invalid length.
[  110.956071][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'.
[  110.956080][ T6830] 0ªî{X¹¦: left allmulticast mode
[  110.970481][ T6830] 0ªî{X¹¦: refused to change device tx_queue_len
[  110.977648][ T6830] net_ratelimit: 5 callbacks suppressed
[  110.977664][ T6830] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  111.041917][ T6845] loop1: detected capacity change from 0 to 256
[  111.100107][ T6851] loop3: detected capacity change from 0 to 256
[  111.360989][ T6886] random: crng reseeded on system resumption
[  111.519118][ T6892] lo speed is unknown, defaulting to 1000
[  112.032458][ T6896] loop1: detected capacity change from 0 to 256
[  112.295041][ T6912] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  112.320181][ T6912] 0ªî{X¹¦: entered allmulticast mode
[  112.338905][ T6912] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  112.430021][ T6919] netlink: 'syz.0.1114': attribute type 13 has an invalid length.
[  112.440732][ T6919] 0ªî{X¹¦: left allmulticast mode
[  112.455237][ T6919] 0ªî{X¹¦: refused to change device tx_queue_len
[  112.462319][ T6919] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  112.531379][ T6929] tipc: Started in network mode
[  112.536538][ T6929] tipc: Node identity f201439afd19, cluster identity 4711
[  112.543818][ T6929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.553167][ T6929] tipc: Disabling bearer <eth:syzkaller0>
[  112.643826][ T6934] netlink: 'syz.0.1120': attribute type 13 has an invalid length.
[  112.658532][ T6934] 0ªî{X¹¦: refused to change device tx_queue_len
[  112.668012][ T6934] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  112.774197][ T6946] loop4: detected capacity change from 0 to 512
[  112.783420][ T6946] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  112.819706][ T6946] EXT4-fs (loop4): failed to open journal device unknown-block(0,8) -6
[  112.851171][ T6946] netlink: 'syz.4.1124': attribute type 4 has an invalid length.
[  112.890197][ T6951] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  112.899182][ T6951] 1ªî{X¹¦: entered allmulticast mode
[  112.906760][ T6951] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  112.949147][ T6953] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[  112.957513][ T6953] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  113.008463][ T6955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.017772][ T6955] tipc: Disabling bearer <eth:syzkaller0>
[  113.219751][ T6967] netlink: 'syz.1.1133': attribute type 13 has an invalid length.
[  113.235710][ T6967] 1ªî{X¹¦: left allmulticast mode
[  113.241907][ T6967] 1ªî{X¹¦: refused to change device tx_queue_len
[  113.250583][ T6967] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  113.268834][ T6969] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.303287][ T6971] loop3: detected capacity change from 0 to 256
[  113.347403][ T6969] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.359753][ T6977] netlink: 'syz.1.1136': attribute type 13 has an invalid length.
[  113.381032][ T6977] 1ªî{X¹¦: refused to change device tx_queue_len
[  113.390188][ T6977] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  113.419650][ T6977] siw: device registration error -23
[  113.429647][ T6982] loop3: detected capacity change from 0 to 512
[  113.438484][ T6969] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.460097][ T6982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.485772][ T6982] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.506248][ T6969] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.554678][ T6431] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.566444][ T6431] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.590509][ T6431] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.606911][ T6431] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.687629][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.707604][ T7000] loop4: detected capacity change from 0 to 512
[  113.715474][ T7000] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  113.734836][ T7005] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  113.758163][ T7008] netlink: 'syz.3.1146': attribute type 13 has an invalid length.
[  113.768058][ T7005] 1ªî{X¹¦: entered allmulticast mode
[  113.774107][ T7005] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  113.778265][ T7000] EXT4-fs (loop4): failed to open journal device unknown-block(0,8) -6
[  113.799010][ T7008] 0ªî{X¹¦: refused to change device tx_queue_len
[  113.814791][ T7008] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  113.856660][ T7000] netlink: 'syz.4.1143': attribute type 4 has an invalid length.
[  113.920124][ T7019] netlink: 'syz.4.1150': attribute type 13 has an invalid length.
[  113.950741][ T7019] 0ªî{X¹¦: left allmulticast mode
[  113.970488][ T7019] 0ªî{X¹¦: refused to change device tx_queue_len
[  114.026306][ T7058] loop3: detected capacity change from 0 to 256
[  114.155816][ T4116] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.220075][ T4116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.304749][ T4116] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.343874][ T4116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.367472][ T7074] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  114.392517][ T7074] 1ªî{X¹¦: entered allmulticast mode
[  114.471366][ T7078] netlink: 'syz.3.1161': attribute type 13 has an invalid length.
[  114.482056][ T7078] 1ªî{X¹¦: left allmulticast mode
[  114.504313][ T7078] 1ªî{X¹¦: refused to change device tx_queue_len
[  114.572956][ T7085] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.636400][ T7091] loop3: detected capacity change from 0 to 512
[  114.643839][ T7091] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  114.670629][ T7091] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6
[  114.689873][ T7085] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.745732][ T7091] netlink: 'syz.3.1165': attribute type 4 has an invalid length.
[  114.780015][ T7094] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.823163][ T7085] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.864003][ T7094] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.905413][ T7085] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.923916][ T7094] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.929615][ T7108] loop3: detected capacity change from 0 to 512
[  114.942765][ T7108] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  114.986068][ T7108] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6
[  115.007182][ T7094] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.030334][ T7114] 0ªî{X¹¦: refused to change device tx_queue_len
[  115.095687][   T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.104258][   T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.135380][   T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.148140][   T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.180061][ T7131] loop4: detected capacity change from 0 to 512
[  115.213347][ T7134] loop1: detected capacity change from 0 to 256
[  115.229343][ T7131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.254469][ T7136] __nla_validate_parse: 21 callbacks suppressed
[  115.254488][ T7136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1182'.
[  115.271074][ T7131] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  115.277568][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'.
[  115.304991][ T7131] EXT4-fs (loop4): shut down requested (0)
[  115.349584][ T7146] 1ªî{X¹¦: refused to change device tx_queue_len
[  115.367407][ T7151] 1ªî{X¹¦: left allmulticast mode
[  115.373410][ T7151] 1ªî{X¹¦: refused to change device tx_queue_len
[  115.417687][   T29] kauditd_printk_skb: 131 callbacks suppressed
[  115.417704][   T29] audit: type=1326 audit(1756623898.855:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea642ebe9 code=0x7ffc0000
[  115.451531][ T7159] 1ªî{X¹¦: refused to change device tx_queue_len
[  115.451937][   T29] audit: type=1326 audit(1756623898.895:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea642ebe9 code=0x7ffc0000
[  115.482073][   T29] audit: type=1326 audit(1756623898.895:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea642ebe9 code=0x7ffc0000
[  115.505637][   T29] audit: type=1326 audit(1756623898.895:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea642ebe9 code=0x7ffc0000
[  115.530336][   T29] audit: type=1326 audit(1756623898.925:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea642ebe9 code=0x7ffc0000
[  115.554057][   T29] audit: type=1326 audit(1756623898.925:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea642ebe9 code=0x7ffc0000
[  115.577527][   T29] audit: type=1326 audit(1756623898.925:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea642ebe9 code=0x7ffc0000
[  115.601569][   T29] audit: type=1326 audit(1756623898.925:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea642ebe9 code=0x7ffc0000
[  115.625087][   T29] audit: type=1326 audit(1756623898.945:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea642ebe9 code=0x7ffc0000
[  115.649175][   T29] audit: type=1326 audit(1756623898.945:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.0.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea642ebe9 code=0x7ffc0000
[  115.689346][ T7169] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.761730][ T7169] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.793768][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'.
[  115.826367][ T7169] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.886520][ T7169] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.948105][ T3420] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.964199][ T3420] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.976461][ T7056] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.990914][ T7056] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.995714][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1203'.
[  116.062579][ T7198] lo speed is unknown, defaulting to 1000
[  116.072960][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.181939][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'.
[  116.271340][ T7215] loop4: detected capacity change from 0 to 512
[  116.327080][ T7215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.331448][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'.
[  116.359772][ T7215] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.399835][ T7215] EXT4-fs (loop4): shut down requested (0)
[  116.728841][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'.
[  116.918448][ T7276] loop3: detected capacity change from 0 to 256
[  116.969204][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1219'.
[  117.145502][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.195278][ T7284] loop4: detected capacity change from 0 to 512
[  117.203034][ T7284] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  117.229986][ T7284] EXT4-fs (loop4): failed to open journal device unknown-block(0,8) -6
[  117.406990][ T7297] loop4: detected capacity change from 0 to 8192
[  117.416628][ T7297] vfat: Unknown parameter 'ÿÿÿÿÿ'
[  117.497865][ T7299] lo speed is unknown, defaulting to 1000
[  117.886362][ T7317] loop1: detected capacity change from 0 to 512
[  117.904447][ T7317] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  117.932636][ T7317] EXT4-fs (loop1): failed to open journal device unknown-block(0,8) -6
[  117.974757][ T7317] validate_nla: 6 callbacks suppressed
[  117.974772][ T7317] netlink: 'syz.1.1234': attribute type 4 has an invalid length.
[  118.034365][ T7321] loop1: detected capacity change from 0 to 256
[  118.093522][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'.
[  118.190064][ T7042] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.205829][ T7042] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.235204][ T7042] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.243612][ T7042] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.260182][ T7327] loop4: detected capacity change from 0 to 512
[  118.271978][ T7327] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  118.298240][ T7331] loop1: detected capacity change from 0 to 512
[  118.311739][ T7327] EXT4-fs (loop4): failed to open journal device unknown-block(0,8) -6
[  118.347619][ T7331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.356408][ T7327] netlink: 'syz.4.1238': attribute type 4 has an invalid length.
[  118.368118][ T7331] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.407535][ T7337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1240'.
[  118.430920][ T7331] EXT4-fs (loop1): shut down requested (0)
[  118.493650][ T7347] loop2: detected capacity change from 0 to 512
[  118.502457][ T7350] loop4: detected capacity change from 0 to 256
[  118.524653][ T7347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.539621][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.567038][ T7347] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.598623][ T7356] netlink: 'syz.0.1247': attribute type 4 has an invalid length.
[  118.616658][ T5009] lo speed is unknown, defaulting to 1000
[  118.622616][ T5009] syz0: Port: 1 Link DOWN
[  118.650305][ T7358] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.718998][ T7358] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.808634][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.854552][ T7371] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.882388][ T7379] loop2: detected capacity change from 0 to 256
[  118.908323][ T7358] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.972026][ T7374] lo speed is unknown, defaulting to 1000
[  119.011023][ T7371] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.022144][ T7384] loop2: detected capacity change from 0 to 512
[  119.035068][ T7384] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  119.061623][ T7358] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.101208][ T7384] EXT4-fs (loop2): failed to open journal device unknown-block(0,8) -6
[  119.170305][ T7371] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.233928][ T7384] netlink: 'syz.2.1254': attribute type 4 has an invalid length.
[  119.243133][ T7371] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.357262][ T7249] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.377012][ T7249] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.391868][ T7249] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.400374][ T7249] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.540907][ T7042] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.586716][ T7042] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.626927][ T7042] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.660909][ T7042] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.681612][ T7417] loop3: detected capacity change from 0 to 256
[  119.801415][ T7423] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  119.801415][ T7423]    program syz.2.1266 not setting count and/or reply_len properly
[  120.050904][ T7439] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.123608][ T7439] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.216927][ T7439] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.263608][ T7449] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.285951][ T7439] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.328307][ T7463] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  120.328307][ T7463]    program syz.4.1281 not setting count and/or reply_len properly
[  120.350756][ T7449] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.396234][ T7449] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.436487][ T7449] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.459981][   T29] kauditd_printk_skb: 91 callbacks suppressed
[  120.459993][   T29] audit: type=1400 audit(1756623903.895:4054): avc:  denied  { read write } for  pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  120.490418][   T29] audit: type=1400 audit(1756623903.895:4055): avc:  denied  { open } for  pid=3304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  120.515679][   T29] audit: type=1400 audit(1756623903.905:4056): avc:  denied  { ioctl } for  pid=3304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  120.541343][   T29] audit: type=1400 audit(1756623903.945:4057): avc:  denied  { prog_load } for  pid=7468 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  120.560438][   T29] audit: type=1400 audit(1756623903.945:4058): avc:  denied  { bpf } for  pid=7468 comm="syz.4.1283" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  120.581173][   T29] audit: type=1400 audit(1756623903.955:4059): avc:  denied  { create } for  pid=7468 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  120.599430][ T7472] loop4: detected capacity change from 0 to 128
[  120.601752][   T29] audit: type=1400 audit(1756623903.955:4060): avc:  denied  { write } for  pid=7468 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  120.628472][   T29] audit: type=1400 audit(1756623903.955:4061): avc:  denied  { read } for  pid=7468 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  120.651574][   T29] audit: type=1400 audit(1756623903.985:4062): avc:  denied  { map_create } for  pid=7470 comm="syz.4.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  120.667085][ T7472] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  120.670839][   T29] audit: type=1400 audit(1756623903.985:4063): avc:  denied  { perfmon } for  pid=7470 comm="syz.4.1284" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  120.683851][ T7472] ext4 filesystem being mounted at /305/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  120.748395][ T7249] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.757622][ T7471] FAULT_INJECTION: forcing a failure.
[  120.757622][ T7471] name failslab, interval 1, probability 0, space 0, times 0
[  120.767315][ T7249] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.773127][ T7471] CPU: 0 UID: 0 PID: 7471 Comm: syz.4.1284 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  120.773196][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  120.773213][ T7471] Call Trace:
[  120.773222][ T7471]  <TASK>
[  120.773231][ T7471]  __dump_stack+0x1d/0x30
[  120.773259][ T7471]  dump_stack_lvl+0xe8/0x140
[  120.773285][ T7471]  dump_stack+0x15/0x1b
[  120.773316][ T7471]  should_fail_ex+0x265/0x280
[  120.773356][ T7471]  should_failslab+0x8c/0xb0
[  120.773390][ T7471]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  120.773458][ T7471]  ? sidtab_sid2str_get+0xa0/0x130
[  120.773491][ T7471]  kmemdup_noprof+0x2b/0x70
[  120.773527][ T7471]  sidtab_sid2str_get+0xa0/0x130
[  120.773565][ T7471]  security_sid_to_context_core+0x1eb/0x2e0
[  120.773599][ T7471]  security_sid_to_context+0x27/0x40
[  120.773628][ T7471]  avc_audit_post_callback+0x9d/0x520
[  120.773665][ T7471]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  120.773741][ T7471]  common_lsm_audit+0x1b8/0x230
[  120.773853][ T7471]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  120.773891][ T7471]  slow_avc_audit+0x104/0x140
[  120.773963][ T7471]  avc_has_perm+0x13a/0x180
[  120.774000][ T7471]  may_create+0x1a9/0x2b0
[  120.774033][ T7471]  selinux_inode_create+0x22/0x30
[  120.774074][ T7471]  security_inode_create+0x7a/0xc0
[  120.774144][ T7471]  path_openat+0xa91/0x2170
[  120.774174][ T7471]  do_filp_open+0x109/0x230
[  120.774202][ T7471]  do_sys_openat2+0xa6/0x110
[  120.774312][ T7471]  __x64_sys_openat+0xf2/0x120
[  120.774429][ T7471]  x64_sys_call+0x2e9c/0x2ff0
[  120.774498][ T7471]  do_syscall_64+0xd2/0x200
[  120.774536][ T7471]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  120.774644][ T7471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.774672][ T7471] RIP: 0033:0x7fd97330ebe9
[  120.774699][ T7471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.774724][ T7471] RSP: 002b:00007fd971d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  120.774754][ T7471] RAX: ffffffffffffffda RBX: 00007fd973545fa0 RCX: 00007fd97330ebe9
[  120.774771][ T7471] RDX: 0000000000000040 RSI: 000020000000c380 RDI: ffffffffffffff9c
[  120.774825][ T7471] RBP: 00007fd971d6f090 R08: 0000000000000000 R09: 0000000000000000
[  120.774842][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  120.774857][ T7471] R13: 00007fd973546038 R14: 00007fd973545fa0 R15: 00007ffc52257c18
[  120.774884][ T7471]  </TASK>
[  121.025280][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.038573][ T7476] __nla_validate_parse: 4 callbacks suppressed
[  121.038587][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1286'.
[  121.045280][ T7249] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.062186][ T7249] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.220633][ T7489] lo speed is unknown, defaulting to 1000
[  121.292330][ T7494] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1285'.
[  121.418704][ T7498] loop2: detected capacity change from 0 to 512
[  121.446531][ T7498] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  121.594156][ T7498] EXT4-fs (loop2): failed to open journal device unknown-block(0,8) -6
[  121.784686][ T7505] netlink: 'syz.2.1292': attribute type 13 has an invalid length.
[  121.802199][ T7505] 0ªî{X¹¦: refused to change device tx_queue_len
[  121.831736][ T7505] net_ratelimit: 7 callbacks suppressed
[  121.831751][ T7505] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  122.282962][ T7517] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  122.282962][ T7517]    program syz.2.1297 not setting count and/or reply_len properly
[  122.331437][ T3391] hid (null): bogus close delimiter
[  122.338034][ T3391] hid-generic 0006:0004:099A.0001: unexpected long global item
[  122.346159][ T3391] hid-generic 0006:0004:099A.0001: probe with driver hid-generic failed with error -22
[  122.396969][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1299'.
[  122.448375][ T7526] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1300'.
[  122.469542][ T7526] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  122.484791][ T7526] 1ªî{X¹¦: entered allmulticast mode
[  122.490965][ T7526] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  122.560729][ T7535] loop2: detected capacity change from 0 to 512
[  122.586457][ T7535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.605493][ T7535] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.627279][ T7535] EXT4-fs (loop2): shut down requested (0)
[  122.649988][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.684471][ T7538] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.838994][ T7538] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.886149][ T7538] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.904356][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1309'.
[  123.088126][ T7538] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.298679][ T3420] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.321041][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'.
[  123.358440][ T3420] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.387022][ T7562] netlink: 'syz.1.1310': attribute type 3 has an invalid length.
[  123.414241][ T3420] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.422654][ T3420] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.508253][ T7580] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1314'.
[  123.518723][ T7580] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  123.527395][ T7580] 1ªî{X¹¦: entered allmulticast mode
[  123.540320][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'.
[  123.549994][ T7580] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  123.629098][ T7577] loop1: detected capacity change from 0 to 8192
[  123.640177][ T7577] vfat: Unknown parameter 'ÿÿÿÿÿ'
[  123.648854][ T7585] loop2: detected capacity change from 0 to 512
[  123.674561][ T3420] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.700863][ T7241] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.718757][ T7589] loop4: detected capacity change from 0 to 512
[  123.726374][ T7585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.739273][ T7241] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.750823][ T7589] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  123.768184][ T7040] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.784221][ T7585] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.813673][ T7589] EXT4-fs (loop4): failed to open journal device unknown-block(0,8) -6
[  123.832594][ T7600] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  123.832594][ T7600]    program syz.0.1319 not setting count and/or reply_len properly
[  123.966173][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.997980][ T7611] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  123.997980][ T7611]    program syz.3.1325 not setting count and/or reply_len properly
[  124.046051][ T7614] random: crng reseeded on system resumption
[  124.077186][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'.
[  124.162366][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'.
[  124.324180][ T7628] netlink: 'syz.0.1329': attribute type 13 has an invalid length.
[  124.344038][ T7628] 1ªî{X¹¦: refused to change device tx_queue_len
[  124.351192][ T7628] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  124.367185][ T5009] lo speed is unknown, defaulting to 1000
[  124.373009][ T5009] syz0: Port: 1 Link ACTIVE
[  124.379531][ T7631] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.437713][ T7633] loop1: detected capacity change from 0 to 512
[  124.472158][ T7633] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  124.486279][ T7631] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.542412][ T7641] loop2: detected capacity change from 0 to 512
[  124.551670][ T7633] EXT4-fs (loop1): failed to open journal device unknown-block(0,8) -6
[  124.561678][ T7639] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.612996][ T7631] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.663175][ T7641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.678717][ T7639] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.689016][ T7641] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  124.720782][ T7631] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.760944][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.796064][ T7639] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.797718][ T7649] loop2: detected capacity change from 0 to 512
[  124.810586][ T7651] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  124.810586][ T7651]    program syz.1.1335 not setting count and/or reply_len properly
[  124.856097][ T7649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.870288][ T7649] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.882854][ T7639] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.950233][ T3420] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.963827][ T3420] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.987046][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.996449][ T3420] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.010910][ T3420] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.041162][ T7665] loop2: detected capacity change from 0 to 256
[  125.156934][ T3383] hid (null): bogus close delimiter
[  125.162992][ T3383] hid-generic 0006:0004:099A.0002: unexpected long global item
[  125.172621][ T3383] hid-generic 0006:0004:099A.0002: probe with driver hid-generic failed with error -22
[  125.189602][ T7678] loop2: detected capacity change from 0 to 512
[  125.198431][ T7678] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  125.230209][ T7678] EXT4-fs (loop2): failed to open journal device unknown-block(0,8) -6
[  125.281004][ T7684] loop2: detected capacity change from 0 to 512
[  125.305000][ T7684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.317776][ T7684] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.426265][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.499235][ T7698] random: crng reseeded on system resumption
[  125.820338][   T29] kauditd_printk_skb: 128 callbacks suppressed
[  125.820356][   T29] audit: type=1400 audit(1756623909.255:4192): avc:  denied  { setopt } for  pid=7704 comm="syz.0.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  125.853655][ T7705] netlink: 'syz.0.1354': attribute type 10 has an invalid length.
[  125.898090][ T7709] loop1: detected capacity change from 0 to 512
[  125.905482][ T7709] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  125.938320][ T7709] EXT4-fs (loop1): failed to open journal device unknown-block(0,8) -6
[  125.995332][   T29] audit: type=1326 audit(1756623909.425:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.1.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[  126.018872][   T29] audit: type=1326 audit(1756623909.425:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.1.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[  126.042482][   T29] audit: type=1326 audit(1756623909.435:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.1.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[  126.057818][ T7715] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  126.057818][ T7715]    program syz.4.1358 not setting count and/or reply_len properly
[  126.066484][   T29] audit: type=1326 audit(1756623909.435:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.1.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[  126.107086][   T29] audit: type=1326 audit(1756623909.435:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.1.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[  126.130739][   T29] audit: type=1326 audit(1756623909.435:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.1.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[  126.154361][   T29] audit: type=1326 audit(1756623909.435:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.1.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[  126.177915][   T29] audit: type=1326 audit(1756623909.435:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.1.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[  126.201788][ T5009] ==================================================================
[  126.209902][ T5009] BUG: KCSAN: data-race in kick_pool / wq_worker_running
[  126.217024][ T5009] 
[  126.219436][ T5009] read-write to 0xffff888237c29d64 of 4 bytes by task 2956 on cpu 0:
[  126.227496][ T5009]  wq_worker_running+0x95/0x120
[  126.232451][ T5009]  schedule_timeout+0xb7/0x170
[  126.237227][ T5009]  msleep+0x50/0x90
[  126.241296][ T5009]  nsim_fib_event_work+0x1ebc/0x21a0
[  126.246840][ T5009]  process_scheduled_works+0x4ce/0x9d0
[  126.252318][ T5009]  worker_thread+0x582/0x770
[  126.256918][ T5009]  kthread+0x486/0x510
[  126.260984][ T5009]  ret_from_fork+0xda/0x150
[  126.265503][ T5009]  ret_from_fork_asm+0x1a/0x30
[  126.270265][ T5009] 
[  126.272585][ T5009] read to 0xffff888237c29d64 of 4 bytes by task 5009 on cpu 1:
[  126.280121][ T5009]  kick_pool+0x49/0x2d0
[  126.284290][ T5009]  __queue_work+0x8cb/0xb50
[  126.288789][ T5009]  queue_work_on+0xd1/0x160
[  126.293287][ T5009]  process_srcu+0x999/0xbc0
[  126.297796][ T5009]  process_scheduled_works+0x4ce/0x9d0
[  126.303257][ T5009]  worker_thread+0x582/0x770
[  126.307852][ T5009]  kthread+0x486/0x510
[  126.311919][ T5009]  ret_from_fork+0xda/0x150
[  126.316416][ T5009]  ret_from_fork_asm+0x1a/0x30
[  126.321178][ T5009] 
[  126.323497][ T5009] value changed: 0x00000000 -> 0x00000001
[  126.329204][ T5009] 
[  126.331536][ T5009] Reported by Kernel Concurrency Sanitizer on:
[  126.337680][ T5009] CPU: 1 UID: 0 PID: 5009 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  126.347483][ T5009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  126.357542][ T5009] Workqueue: rcu_gp process_srcu
[  126.362488][ T5009] ==================================================================
[  126.403170][   T29] audit: type=1326 audit(1756623909.435:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7716 comm="syz.1.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8df3c9ebe9 code=0x7ffc0000
[  127.709494][ T7042] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.721359][ T3420] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.733006][ T7042] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.744702][ T7042] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0