last executing test programs:

3m57.850338049s ago: executing program 2 (id=3):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x58, &(0x7f00000001c0)=<r2=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
write(r0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00')
fchdir(r3)
ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000040)={0xffffffff80000000})
connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

3m57.532380895s ago: executing program 2 (id=9):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8a0602)
unshare(0x26020400)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0xe)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040))
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

3m57.462731811s ago: executing program 2 (id=10):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'vcan0\x00'}}, 0x1e)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000300)=0xd, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="724aad4b723dc6e0c61c4989b2fca1f4c6c084132a80094cf74021cd3e2c0c78300100008000000000738da2a65f6dc8511fdc5ca7f0f3c4a99e3a7df66adbe57e872e41c2d950e53c8252e162df2ddb466177959fa86df0ffd942034db1f2"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080)=r5, 0x12)
r8 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
io_setup(0x1, &(0x7f0000000200)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4, r8, 0x0, 0x0, 0x5}])
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000060000000100000000100000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000079e4f3d91f8c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r11}, 0x3d)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r12}, 0x3d)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)

3m57.331999501s ago: executing program 2 (id=11):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a00fffe0900010073797a3100000000400004803c0001800a00010072616e67650000002c0002800c00048005000100000000000c00038005000100ef000000080001400000000008000240000000010900020073797a32000000001400000011000100000000000000004530c27f4c12692bf3043643f5000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003940)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="000002000000000000f2ffffff000000000000000081c1dc0a0000000a9870f1a643e4a81feee571dc6d2b82f2974d5973cd33a318a448f1cc5ad2d0d0b8095c4b2157cc2454d60704656f0fa1a2c91075dafd4970ca4c55744405519832720c9d930e34125f"], 0x38}}, 0x4040)
mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt_,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8042, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003a80)=@newtfilter={0x194, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xa00d292c39cc5774}}, [@filter_kind_options=@f_flower={{0xb}, {0x164, 0x2, [@TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_OPTS={0x158, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x7f}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xd}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xd19}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x51}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x98}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}]}]}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0)
fcntl$setlease(r8, 0x400, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r10=>0x0})
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000010c0)={'ip6tnl0\x00', &(0x7f0000001040)={'syztnl2\x00', <r12=>r10, 0x2f, 0x7, 0x2, 0x7, 0x1, @private0, @remote, 0x1, 0x10, 0x81, 0xf}})
sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="a3bbdb32bd8ee877bfb6e9ff39e6fd5b54ce92b9bef6f61a4e83153ffd9ffd0107f9af2399c55885b2ff82eace6d38574521e51137fb0a1aa0dfd0c872d421b2e86f164916e6cc05bfc700f38165040eaba2c27c26172100951cca313baa21da1636aac9c27ad6d202c52323faf3abcea0513a7e030d5fb74c6bc15caf6210379286fb95d1508811760b53bea871bb21461f0a0c8fdac23639662276c637d5c6c14ab651758ee4054b0fb355ba75e48c1b07572024aca31f0f8c387376716295f0", 0xc1}, {&(0x7f0000000800)="68e09f418b13729419bb2d0f176c724669d51a6048498d328f9c189a41079c1c2794261cc9324e0d0e8c3cf4ea7f4f1427cee8d887b7f995cb30d36fc8017379a999835d38ba1df66417d7cf5c963c645406aa3e3bbb4398fba800be7cf0a261c386481d803d78e5bc500df051bace7c6b4ee21c43aa18e0c00d4da333dc19091cc664d846c9dcd98822a9e6915cae6601e5b489c675ad78fdbc4fdd4fbf620245f0b6f97e5996996fe7015ddb2d6bc74bc77e892a93935bf280cd3d6921b950243adba1b03e78d32d0060fb37b8d73d5cce79c78f458ff5b2b69398d3dd2c6dfed7e876f7769372857619c851d7a3b6cf8279e9132b1f9b9a", 0xf9}], 0x2}}, {{&(0x7f0000003a00)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)="df6243184df80fb73b1f246c634182518fa67cdd79d8d94ae92bd6738af5f57a84d27361955a2c8ec456bd9960ffdcd88f1cf5d793dcfd49c93772b8ddee66b9419261ef9045920fd1b6cfc55358495a3760ca56e9b9ef2ddea082eaad", 0x5d}, {&(0x7f00000002c0)="ffd58537c5fc8bb7c28d6b80e8b5", 0xe}], 0x2, &(0x7f0000000900)=[{0x18, 0x10e, 0x2, "c0db4c6f3f90"}, {0x18, 0x115, 0x3, "d1b3e05c83e34ca1"}, {0x88, 0x104, 0x0, "e65efb18a3abe27820f83b0a047d939894386ce908578a51048da34d3188ac7e61c92ad7135e4e33f14b2f557b808006eba74fb2486a4e02ed2329d4398e8f38115ab6c53e3b955953841fd77e93c1a7ce1ca6512ffefba06631a5547bae364e1a8e46a9a18b3d666c938af4c03281c31cf2cb95"}, {0x40, 0x103, 0x1, "0cb23d73d5c687e908b39b802291f9e9512cca40461c2ab20ae91194106671ef1a75c165aa244df7b788"}, {0x10, 0x110, 0xffffffad}, {0x80, 0x6, 0x6, "1376694ecc3c9c528f0a8e26e90f1d3d9989a840dc2153ed91b1d48bc0ba8ef74253448d74d2c6a18d20d439b80056a77c43ae588fd4cba3fe4eb8a9fa25c818f734533fe3ddd2e372a028992f8348708e5fba95944e443ba641598b41f57855e4465d3ac22507bc5370c090"}, {0x88, 0x112, 0x0, "5750b7b0079b445d598f0d503544a519b504d3d8b29baf3b0836ceaa9415fe9d989f433a1855d72a5b16b61d042c5d6ac3ec2eaf2f7e0f4292409a5c8312c3458e8aa76e2ca4feab54f11d52c7cc2ac07c0aedc36058f7bb6ddcc245d646b2f2f4e8df9b127798256b6ec84592911ec0e1828c62faa73b"}, {0x80, 0x88, 0x49c3c5e1, "293f313ae8b13e2c914af7b4f9b0605175c92c83dcbea31ce52c4614759c7835649a740412b71d5b1ca1727c807c5608912420ba6bd0d1703a6407aec4ea575847f296eebd60bdd61047201a5db3d005886e4e7e11722f951d96cc97c2115140aa83dd7fb97e8d343f"}], 0x290}}, {{&(0x7f0000000bc0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000c40)="3fb90471c651b7edfd7dffa32f5de9dc23ab27f1106df83db613f19dd6b23486aaee304df24b23226632e74e3ff776bd90da4e3f95e970be94839f255cb6ae6f518f7be0b72b8da35b6b7270e160f736dab9fce9ad250596fb40cf9b321a2dada033c1fcefe730ccc892888411dc0c457807b719a63940f488151975918cbf261227e1dea9dd8a9f9ad09e1887a6f8fa66ade8bd9bab024e2cb347b015d0f816fe9179127cedf338361a3179e26c164ec7111d9bc75d84c631ddf7637847547c659210666e03133b2f2c367c95875cbf376553301cf21fea4d87aeef80cc30183f8e042d", 0xe4}, {&(0x7f0000000d40)="bb9287dc7d625a321f27cc9f782ab9a11a184327ce11601f47dd81c7f38f7f9a22ece3ea14b0b3b3dd72608d3e2ac6a85e6a402b573203288ddb7263d1ec36351034eb663181b48417f84b16ca7c769493b1c6ec7ce28e3bb164d233d9818b62c5a2dae0d9e781be6bc2c14f0cbc58b9cb1371397d5f59b847ed8bc1982e0a7f94a44c7514414bd0328079e65cab2bef679a72269d82af74ab89b3200cf1d09457aaa61946d2fc50ab54c25660edec70cb3af753b0dbcc3582a2d4d98dbc4700f36b7f7a13dbd54d03", 0xc9}, {&(0x7f0000000e40)="d10a375bcffb7cf1782cd561fe2e63249534ecc9f38e777089823828d609c88db7a2f40f9d30a6289e0e225b7fb433ce7c6f4e2c079b8cb34039788029c9a0df7af6fa4ea57a36a4c1aaa86fa8bc9f0104139fbeb4d2369f436f83dd9fc333895918af3905f2be532579b86278c7c9b9d530c1b565be28173c9f521e8540ab77eb403ab44683638084c74e4c47284a8cc04d59f54e123ffb2b483dd90aa4cca0f8e5ac36f16b2916c1c62366fd24c633165d7346b649131568da4936dcf2157dd105264736a896ea4cc675d17a20b1c6d9a8cf4d569981c16694f86d0586d7f3b6f6618e28da49cc75fc806ba13bd0a20e8b", 0xf2}], 0x3, &(0x7f0000000f40)=[{0x98, 0x84, 0xfff, "b3c1ddfb343b1bac2e0882ed37c5bde1b93a04236283000354381bd905e67dcace74e15208a8ec0215415f3bfeeaa736952c94aa6dcebeb045071dc12c9cf16a27729c59bbe23dc911328f7ebb42b35c68e93384c0abaf872ec1f737b9d93ac9629765f092ca9a178bc3ff4331d499f85c2bea6832283ae8add5789add1af9d6c750ab03ed6d"}, {0x58, 0x115, 0x4, "b509f647ce5fe1e2dffa6d7313c8c3b67aef740e91390d0c8c6884b68c6bbf30777fce23d4563ec7757a01d85eb2045edd05d2b0f6756a486c03d7114e55e669073b377c210e"}], 0xf0}}, {{&(0x7f0000001100)=@xdp={0x2c, 0x4, r12, 0x9}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001180)="f8cea1c17f", 0x5}, {&(0x7f00000011c0)="8ac095062aadb1286508d935f6189e5e359240ad13bd94c3b92e00b124db5c8fbf259add6f6eb62c8af46702531c50b49a090bbe8b3bec6bc91b0f5bc7490b08542ccdac976924f457478fa0ae511088f835fef4bfcf4103ae707d72218c8b4ea2291315ccd65638a34744317d7c8f690848e915c4d8dfb185c0", 0x7a}, {&(0x7f0000001240)="b77fd7f2c8a21787351f926b91d90db10a9b8a8918bdc64027a4bc82bbdfa2938fba4d92b61552f7c99d458a753e17b247e1ceda4e9d78b396217749915b1a7ce9d85db910f496a139d3adfa90b653d80510c5a60c0518ce3d13d868fe1933f616d2ca795bb52df7ca395aff3c2057efb57c1fce6b7b80dce9cf29", 0x7b}], 0x3, &(0x7f0000001300)=[{0x78, 0x107, 0x7, "d610b2d12f7b08f7906c7f8ac65f548ddd6f8f249943f5e22520214c6c58fe8fccf898e71bb201b478147869c50b18a83ee3977e939c5405695eb0ef98f4b3f52068811636e9cd0b0c5029c981c9bf17bfdbc14d122acc6abf839f07b477b15127b97488"}, {0x18, 0x116, 0x6, "4edf2f"}, {0x50, 0x10c, 0x19, "1c830e2104ca1ab7e91c10288cf772cfe39bed4e85cb9558fff1a5b9d907e79d5d960cf6309a03501ac185728927c1a57ed80972b912531caf4b"}], 0xe0}}, {{&(0x7f0000001400)=@l2tp6={0xa, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0xe13}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001480)="d5784a548a0de19ff86160944092307146069c591bc21efbe58526f0a6252cf51e41f55a9061f8798ea62b976bb360ffcb1b57560e9fa5d0875a876f25c396401e10c6126c439352da245b25b38a7a679b759a377da5d3856742f81cf7ebfe8643a1af2276b58a1304cf4b64eced3f481826604fb8f869678786dae95f87f36cc8", 0x81}, {&(0x7f0000001540)="274821e4091db93248618b6fe5eb73a38820400856e00ca8213972bc955bf8af913865fb9abcda99b8f9a8befb8dcde52913b0651c31e1233f7c7a051142dd1325f9ad43b642d23ce6921d664ef9df0a81c23c4d10c12c51d4bb4baf5fab5d59984d2cc8b3a8b7ae6f7d7f3588dc9cb07c46635160c955a2d82f492e1511ab3638ffb62b37cf910094bba2132692fa06342da1715945f316aa928afa0e8b901297337465dcb360758e1fd9c317968b87b5aadde151ec5f3b8c02559ad27916e70c6278abe14c009375", 0xc9}, {&(0x7f0000001640)="53f778c52ba03aa924a59db7dae18144a1f674d658d49488018611639877c8e8566c2e55f73b4c75536ed773e88c511558cbf78fcbc0f0f9d40710a148b314d1dc580bdb0d1c2b46052b6a268a46f058677ed28f558ad5b91cce4ad2b439e2b0a02dd98c4be53dce5a4aac728d6beec9267ca304cef71ebdb645fb62ecff933ae0d390f03ef2636cc7564a86b497e3441fc2824e27adbc8d9b93478855229a7a1d1ad4936b789635094355f1cbf38ba03952f7549a98578bdd583b2585741c98b4e1a7043529a56f053fb72f5d2bc89944c195", 0xd3}, {&(0x7f0000001740)="b213fb81079995829cfcb320dfacc1e358b3154239c72febc804da0731a96f4f8ccf452a2377fd85f7d4d977d808ed2efebdb3c924f5f662bf684c9e4c03d30d3f320b843add490b52c74a3e4f909977d07a0e2777b789c56de7294cc7beb7efb4db1c7f064227488c1d31b022062e719177545c773664dff433e1a36a781fa16e066a61501db005ae8ccd02b64f34290f3cfb14eb41beb3bf25524f4f5041d6f9429da5ae9860ccb307ef87cc5bfc375fa644912f5be9e06c5c21229cb7395fd66c8a808992e83f06c93093660b6f67b6126da73b68c2c7df2fd615ca65cbd07331f1e3dc0deb74b1862d073720674afe73bdbf7c7b", 0xf6}, {&(0x7f0000001840)="2eda91f4ccfde36c5cb1d77b9dc17a91169223cc160d5d43c3d527d3db55e031fba8107978faeeac0b5ccdf1a944ae2150e176b8adf0d2a0ed999bccfca647b30ce585ae1008a359368c45c9b8b19876e6fa47a48130747e9978fe9be470d3066053db50e7c40edcad2d6e9d05d76389847db4d37d6994d105c7", 0x7a}, {&(0x7f00000018c0)="447ce25e9647982e68a61c72c354efec74f7b2482a5a689618594a93ab08182bff31494f8342d90e24c9b110c30c7884b9869b169280a5478b8e4b4db074199625b2e20cd3e616971cec3134ad5432770efeb148b52dfdaad364a5dc98f4a614d8d9976e470222bb954420d2e1b77af0a1a4787f5dafa2164b099ece7b9e566a79da3dd802d10b06188508b4b9b821687a36", 0x92}], 0x6}}, {{&(0x7f0000001a00)=@pppoe={0x18, 0x0, {0x3, @multicast, 'nicvf0\x00'}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001a80)="72f3c4c9eadf571caf28feef5b4e167ca3e4f09123", 0x15}, {&(0x7f0000001ac0)="bfbd9cd04f5ba3d8ca5246475e7e45d5c05271c3df68ed8c89e43aad135e75437426e47931baa79092c577e288791b7f9830670cd0b981338812cb1cc2f2f06736ccf1a067648cae5e42cdf5641630eaf2b8183b50bcd66f50855d6663cf3be749e54f335fffe7775d3ba3588c5618e5e6623651f9938dd2d37285f543bf383ac40249266ec5625a3f5c37406967ccb7b740dfb2d014bcf5ec4408ad638590258b9756033293ec20a51c4b426b103ee812", 0xb1}, {&(0x7f0000001b80)="656570fd5256e4a5801ce7cdf938a361c9cbcfad00e3ec444b3b732937b7372de12d5fce2c083e772c4c46e8130b49e6935b7d9e22bb9195cedab43c8d456f3b6def443f20e15b7adc5786938571f0dd1f3264e0e26fb464c215992cbfaa314e567c62dbf9329d45ba1b3dc1506352ebf1bafae25987c7a60ac436f1e135a17590c4de73a69f", 0x86}, {&(0x7f0000001c40)="5da1ee5bed11980879cafaab820178281ebfe1117b7b13f148db445c4e146de2fdb1fde698ffcc483542857f5829b79cf01504a0fa7ec51a59468cf88db022f20555b3c956363cb24c6fdeba978162a2702ed6409b65d3abeb7935d8a8f1084630e3874afbbcc210665c552454eb252027da8011ff8e094b5ded54b7be7696d516185713118862d6e8a7490b771f96b643286051b2bf3f775c4c75f48c713792fcb08dc05c6a", 0xa6}, {&(0x7f0000001d00)="13766649f570acdaa0785f2209fa2f48897a49f61f377266ce5b50661e07a9b5f266fbb5257b4dbe0f01832716685d7ce207f62d7953323db3f09738846f26594d6ee211b8a5f973d45e2acb998c46f3257c1417e917dabdc0932115da60266ad951676b690d9afd7a501659dd6de71ef56edf9b13242d78cf7e9fad4bca6e9421a696a39672ec27d2724f575cdf3436c2cb69b9063c151233892b8474b080c1ead8517070389c0d85ede4306307f6337ff7f185b4", 0xb5}, {&(0x7f0000001dc0)="d864a2323ccd37379ad878a59d561f761bd53f62370c7fe6d5acda81bb4ff55b0f24666133ed0932d44b905a1703ecedfbfeb94a6281f664bb7abc916c6256ee7eed629bd82d04dab68bd22cccdb9f5eb467cd9f0e3a2ef6ab00ba6ef658f63cff2c0fb6253c8e1b682e9794388a48b04fe0b169ed846c19b245bce05ba698348b08392789e0332d29e2eae272c48fa666ea", 0x92}], 0x6, &(0x7f0000001f00)=[{0x70, 0xff, 0x80000000, "e76a73b22ce8c3924737a6acb7f18ff94ed9905147506aa9fa33c2e646652190ffc20637fc9f4cffd8de9400d63ac7a48e28d1fba247d1701ad833e8518e29e923d5a1424e992e181b53316010014c0315beccfa05755f359078742b"}, {0x90, 0x88, 0x0, "c12e2b79f2fddc611374e9df1e452d16127cf7278c137f54d073016e3f2e7f42c16c55040438583f0a60b01fe4264d474fbecdd8417d090841a0c555f08714ce654275123df30ed384c4be88c86e84187e0f8f34c334130b82e5fe6389621fa18a4bcf55a6931680d0bd112b9dc071997c701fed0e2b0da1600763f23accc36d"}, {0xd0, 0x118, 0x7ff, "f866013c7fa31e6e5c1a04c13f33274711e89f1bb0fc8ec36c9235be92b8bc0a746ee275713ddb3d57de1f1ec0ea49b5f897fafd43d0a5af593e330474221327d96f95798153f60557e73213edb73bc7ac4022fb9540532c90d8e2c5628813ef6f2e8941beaa2d333c493bcdc2df242b992d206f4fb19cfce182c514108e133ab864b18a76300dc78d172b54319213972ae9b4c237b8129abdffffa72743c359ca1e62b5058dd50f0a404e6a73938b359395a70e3128103d4979"}, {0x1010, 0x3a, 0x5, "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"}, {0x90, 0x114, 0x0, "ad4005235a798d28784b42ceab718e901045784936aed30ade4c2583433c863d34a539c4ab01f4d5e1bb9b41d17d404188c21c13b7b145a222ce04bfb382130feb5e102c6d48a238c1463e2f4bae80bc1198f1952438ac7794a9e1b2f0620d24099b49324adec989677cda9f15a88e5271d126d7d8af1b13ecd10558af40b50f"}, {0x88, 0x107, 0x4, "dd2f08ef5ef07e8bf252a32355400ebb4782acd2827f19d0c43dcce8a4c77c1478a6eaa5640a45832a4bc6a1c25d315352bb8d93e6f2957a2575f5c13d9af4096dac69e7a3c222f80d2e96780fb8d51b66225285b749e13aaeefff716063bbd0e2392ff75507f3c37c393f192b39c7506e4d1a58f3"}], 0x12f8}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003200)="65bcdfc7ea0a8cdfd1", 0x9}, {&(0x7f0000003240)="f508880f839181d283e933250f4be732fc032a279ead7ada5826486783a41f5edf9568f5b7484c24799669994ca086c75d87049b4736d2072d297f514dfcf35778e71ec117b23209f2d35f0c347976712d0faa1ff1fa8748001b573b86217aa5190dd83109e61299bbc7", 0x6a}, {&(0x7f00000032c0)="43b84967bdf55e1f5ae76e86a54f34e2ededfc0b40d10b923a", 0x19}], 0x3, &(0x7f0000003340)=[{0x90, 0x119, 0x1, "8100188b92a57e6a89197fe916e0f8655adf2317203e3ce200f25ce14825967905105d5703ab039fca4a740085b80bded34c8450a107dbdf1bf1076dc8a526fa92d8e23df238685191fb8941eab7b99c53350ca60a963702d70f518090d8260f8abb72cb34ff337e9353309638d170a7f4b697833931069148537389e6f40a"}, {0x48, 0x109, 0x40, "0fae9573c92b47a760824424db0ee628d42886e0e6513480435961fe486682ddcce81c1f1c65d0344b800c09d992bccda9345c9c41974e3f"}, {0xd0, 0x1, 0x3, "e9774559f3fbd9d36e835e93c1c4561fdeddb9da25dec8cd35fc99cd2f5acc7a667b74a6a4c17cb5734558d147f2d84b0c38ad19adcbfb3352dc67600723108f8c544db72d78ad3473576ecd973d88856012434423688b93fadd518b8e45cdb36efc6f28212449280804b3df8059e994d523acd45b2710c57e37e3cf7ae285f8baf7ca1de819f1f83abb1523137ba312aef58684f7fd88ba823c22a83b1a9603bb24ecb04c18a31f87bac1117a46c6115e46666832508b8da7dd7079"}, {0xf8, 0x116, 0x1, "6b6107f37667b09b194a5d85723b8cab6230657e54d364ed1b97a5c01fff7c6d4894c8ae18a05a2810df259c298122b0fb358b98e9aaf73d389e3de5abc529d011ae6780e68f1d82f885bf149fe4066ed631fab6eae238e12235b447d27123710242649e96e66eb6222a026a17bbdc76c9aadff397a6ce3b4a51322bf9c5cce0d5ed07b1e89cd97d943e9e37743fb2b5c1ae4fca93f5ee11e3a19338434c2b3601465b4bcd6acf478e3570635b8e820993d0cd573896cd6d56f4d4a72e3f0e473bbde230be4acd717d43223a78ca3673ab9676a4442fa3fd91840a144f65a70f1dc6f6653d15"}, {0xb8, 0x113, 0x9, "1b4f2327840b867bcc7e1c3c1ab2ec83f1936886f9618059dd3ba8eeb57a1d3bd8a4ca588572f1f285d103f9d8a84732b5f86867556424e47ef4beb54adb7247a247c846426cd1f161e24fcc91df19a6ea2d3b1ce03c1e80232ca900d5d95b6f70e3d3497838c82c308ef98940e78b66f01b56d5c5d10a0c09a9159b9807f267cb6440ac0518c33a9e3e4a1ed0e8f028f6d5b4b9855474786fa6ed74c24804f85e21af"}], 0x358}}], 0x7, 0x840)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r10, {0xa, 0xb}, {0x5, 0xfff3}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa1f8ffffffb702000008000000b703000000000000850000000600000085000000070000009500"/96], 0x0, 0x8, 0xffffffffffffff2a, 0x0, 0x40f00, 0x0, '\x00', r10, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0x10, 0x3, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r13}, 0x10)

3m56.535788125s ago: executing program 2 (id=17):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x3}, 0x18)

3m56.525099056s ago: executing program 32 (id=17):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x3}, 0x18)

4.826416439s ago: executing program 1 (id=2926):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x805}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0xd8, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4309, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x4ccc}, {0x7f}, {}, {0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x3d8, 0x0, 0x7}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

4.640862934s ago: executing program 1 (id=2932):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000018c0)={0x38, 0x18, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x28, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic, @typed={0x4, 0xe9}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x1}, 0x0)

4.581979969s ago: executing program 1 (id=2934):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@init_itable}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000003c0)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000080))
syz_open_pts(r3, 0x2000)
io_setup(0x1, &(0x7f0000002500)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000380)="a3", 0x1}])
close_range(r2, 0xffffffffffffffff, 0x0)

4.417734462s ago: executing program 1 (id=2941):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0xfe, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1")
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0x10000, 0x19, "88bd91aa90758062b5fffd9272e301aa98af75"})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setreuid(0x0, 0xee00)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ustat(0x3, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_getoverrun(0x0)
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9c020000160001000000000000000000fe880000000000000000000000000101fc0100000000000000000000000000010000000000000002000080200c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010002000032000000ffffffff0000000000000000000000000008000000000000000000000000000000000000080000000c000000000000000800000000000000000000000000000000000000000000000f00400000000000ffffffffffffffff03000000000000000a0000000000000001000000ffffffff000000001f0000000400000028bd70000000000002000700000000000000000000000000feffffff080018000600000010000a002dbd70002cbd70000300000028001a00fe8000000000000000000000000000bbe00000010000000000000000000000000000048991"], 0x29c}}, 0x0)

4.089082909s ago: executing program 1 (id=2943):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x805}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0xd8, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4309, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x4ccc}, {0x7f}, {}, {0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x3d8, 0x0, 0x7}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

4.035713313s ago: executing program 1 (id=2944):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f00000001c0)=[{0xffff, 0x2, 0x5, 0x6}, {0xf141, 0x3, 0x9, 0x9}, {0x40, 0x4, 0xf, 0x4}, {0xff47, 0x6, 0x5, 0x5}]}, 0x10)
r2 = io_uring_setup(0x77bb, &(0x7f0000001400)={0x0, 0xab40, 0x2, 0xf7fffffe, 0x209})
io_uring_enter(r2, 0x800000, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000440)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x26, 0x8, 0x62}, 0x2c)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3, 0x675d}, 0x8)

3.494663747s ago: executing program 3 (id=2955):
socket$packet(0x11, 0xa, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xe}, {0xe, 0x6}, {0xc, 0xffe0}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$kcm(0x2, 0xa, 0x73)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1, @ANYBLOB="0454a6bdaafdeccdc4569cc536133cf5ee7e3be0ea7f01d43ae35ec1492eb73eda42060b80e6287b5a097f0453beaa21221eb99bad227160a99891d2527ccdd54b2a6777da92f0b64f83a27bc691ced1feb017e3af854191533bbce947628050cadbb93dde01eb8373379fb6f7e7d75c6f503092d0ff9cdcb64191b41cbbcf37079a6cab45c92ad8461b5ff9476effcc063aa89ef13876442fdd2588a93ebee3ab8145ceeb7f0ba99dd17c712abb4c", @ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000900000000000000000000000000000013000000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e000000e69effff000014000200000001020000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="0300000001000000040000000b00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff071c16110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.940408342s ago: executing program 3 (id=2960):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x10}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='t'])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r5=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x50)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r7, r6}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)

2.808714383s ago: executing program 0 (id=2961):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000010000800000000000cb"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
syslog(0x2, &(0x7f0000000200)=""/4096, 0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}})
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x3ffff)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff000)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)

2.360295379s ago: executing program 3 (id=2965):
socket$packet(0x11, 0xa, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xe}, {0xe, 0x6}, {0xc, 0xffe0}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$kcm(0x2, 0xa, 0x73)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000900000000000000000000000000000013000000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e000000e69effff000014000200000001020000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="0300000001000000040000000b00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff071c16110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
creat(&(0x7f00000000c0)='./file0\x00', 0x122)

2.302592664s ago: executing program 5 (id=2967):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a18329bd700000000000050000000c0099000000000000000000100017800500030003000000000080002d465ec4d9675bc34d7ac2d252fc5261c4c28b7f4fd3058ae716aafd4fb76e120a95ac21678a80646f0012"], 0x30}}, 0x0)

2.120695538s ago: executing program 5 (id=2968):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8)

1.966268301s ago: executing program 0 (id=2969):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6)
read$nci(r0, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{0xfd, 0xfffffffd, 0xb1, "4bdf03a471f5f569f3f8bd77df465999c34b2494c8f043a5343e7f231cf38b50b8032b018c7d80f65685037415f6005643309a13522402525e678a9229fc10f75ff0bf0a65d16f6498cc9b553cf77959f04091a31b16500bbc0bce234285ec883a11c0e44b9790c2e6af137eb25a6b2802c3e173c184550b7167a49996394c9cac19082cdb3d57bb3d51a5b0717c5627cfc54ad39f97cc12eb7c38acf28adb4a4ad505ae39eb9ef7f7d991295000000000"}}}, 0xc5)
read$nci(r0, 0x0, 0x0)
write$nci(r0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0xa000200)
semget$private(0x0, 0x4000, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0)
unshare(0x20060400)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010023010000340200000600000008000100", @ANYBLOB="08000300"], 0x24}}, 0x0)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
write$nci(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="40020000004d304489c9d66c2438471a25aeb7d3c95ad7af54610010dbc8e2b60eb757db90ba5cb2dc0c37760b64c24e8a2373c0ac3cbb96f518bdae9a45c76a522edc2dec34174c4c7865c5d912a29edb35e3c90a9948c31c27f1e28d3345be1d609d6f7c1b2327235c57d63bc0be113b3c02c3ad354ee6e1793c24dcdfc06fd1ea8a803ebb589940ab4500"/153], 0x5)
write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5)
read$nci(r0, &(0x7f0000000840)=""/100, 0x64)

1.925152634s ago: executing program 3 (id=2970):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000019c40)='./file0\x00', 0x18000, &(0x7f00000015c0)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRES8=0x0, @ANYRES64, @ANYBLOB="d9dac80f79c1e0bb9745b3313cc4d3f22839c25a5bb8fd4009cea400b4e45854165d888860c736ecf5b4beac2633eb13667ccf0f638a99efa46113adcbb7a50138e3628a5f8b9073d0dedc51eddbc784f54fa2d251795eccb140df19e35c3774cf21f98ed2c7da4bd7d328cd0445403b", @ANYRESHEX, @ANYBLOB="8a57754ab1cf85fb8ad5138b0ba0e619b6d2433356a00d196c4034fd6ef843ffd82d6692ccd2ff059e10062644f5304eb2db809a251b7c3e32b696c57f81dc172b89abc824f5b4faf989dd02f35f439eb2c905fae9c4203b03f41b42fd718a3c9bda0f2e5b4449eb635ed3ffea97854f3b8701ab2db06e4da7724a794896b5ffc977adf35b7d360dbcfe1e34238293615486c44deefeaa235239bc10df444e13424774bd796126107ae9e8fa22ebd0fe6e156fa89d7eb1a0c8459e922dd897a90cfa01598db6e52ee22d0f7cea379ac638540fbd983adeea5f566f34e0acec9f9ab23191848ebade11567b45f4"], 0x8, 0x2eb, &(0x7f0000019940)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
syz_open_dev$sg(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]})
fstat(0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000019240), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000197c0)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019780)={&(0x7f0000019280)=ANY=[@ANYBLOB="dc040000", @ANYRES16=r3, @ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x8004}, 0x4000001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000006800010003001000fdffff7f00000000000000000c0002000100000015abd3040b0002"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
fdatasync(r4)
pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.777741387s ago: executing program 5 (id=2971):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000019c40)='./file0\x00', 0x18000, &(0x7f00000015c0)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64, @ANYBLOB="d9dac80f79c1e0bb9745b3313cc4d3f22839c25a5bb8fd4009cea400b4e45854165d888860c736ecf5b4beac2633eb13667ccf0f638a99efa46113adcbb7a50138e3628a5f8b9073d0dedc51eddbc784f54fa2d251795eccb140df19e35c3774cf21f98ed2c7da4bd7d328cd0445403b", @ANYRESHEX, @ANYBLOB="8a57754ab1cf85fb8ad5138b0ba0e619b6d2433356a00d196c4034fd6ef843ffd82d6692ccd2ff059e10062644f5304eb2db809a251b7c3e32b696c57f81dc172b89abc824f5b4faf989dd02f35f439eb2c905fae9c4203b03f41b42fd718a3c9bda0f2e5b4449eb635ed3ffea97854f3b8701ab2db06e4da7724a794896b5ffc977adf35b7d360dbcfe1e34238293615486c44deefeaa235239bc10df444e13424774bd796126107ae9e8fa22ebd0fe6e156fa89d7eb1a0c8459e922dd897a90cfa01598db6e52ee22d0f7cea379ac638540fbd983adeea5f566f34e0acec9f9ab23191848ebade11567b45f4"], 0x8, 0x2eb, &(0x7f0000019940)="$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")
syz_open_dev$sg(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]})
fstat(0xffffffffffffffff, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000197c0)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019780)={&(0x7f0000019280)=ANY=[@ANYBLOB="dc040000", @ANYRES16, @ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x8004}, 0x4000001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000006800010003001000fdffff7f00000000000000000c0002000100000015abd3040b0002"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
fdatasync(r2)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.629751979s ago: executing program 4 (id=2972):
timer_create(0x3, 0x0, &(0x7f0000000340)=<r0=>0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x40800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum64={0x8, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x6, 0x1, 0x2}]}]}}, &(0x7f00000012c0)=""/154, 0x32, 0x9a, 0x1, 0xfe6e}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r3}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x10)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r5, 0x10c, 0x5, 0x0, &(0x7f0000000080)=0x4)
timer_gettime(r0, &(0x7f00000002c0))
preadv2(r1, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000580)=""/83, 0x53}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/146, 0x92}], 0x7, 0x5, 0x400, 0xe)

1.348075561s ago: executing program 5 (id=2973):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000010000800000000000cbcd290000009500000001000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syslog(0x2, &(0x7f0000000200)=""/4096, 0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}})
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7ffff000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))

1.337690912s ago: executing program 4 (id=2974):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
close_range(r0, 0xffffffffffffffff, 0x0)

1.308590435s ago: executing program 4 (id=2975):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0xfffd, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

1.282832287s ago: executing program 4 (id=2976):
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close_range(r1, 0xffffffffffffffff, 0x0)

1.255983819s ago: executing program 4 (id=2977):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x10}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='t'])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x50)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)

1.050547386s ago: executing program 3 (id=2978):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000008, &(0x7f0000000080), 0x0, 0x52e, &(0x7f0000000f00)="$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")
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x65, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0xf}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, {}, {0xb, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0xfffffff7, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x0, 0xffffffff}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffc, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x6}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xe68}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03"], 0x34}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3348cd842591e5ae7221c5cf665a7d6704000013220003714cf90e9de010be98b35d40734e39a4ff816ba9af195d212cf99db1b0db6f661438804b6c5cb29ad74980deb8ecdc8354fc618ebfd65473", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000007}, 0x20004004)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001240)={r5, r9, 0x25, 0xc, @val=@perf_event={0x1}}, 0x18)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000240)={0x3, 0x1, 0x1, 0x0, 0xd2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080))
r12 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r12, 0x4b47, &(0x7f0000000000)={0x4, 0x25, 0x2})

1.041299586s ago: executing program 0 (id=2979):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xc, 0x80)
ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'})
r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil)
shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01ff400000009175ad00070000020900010073797a310000000014000000020a0100000000000000000000000004200000"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
r7 = gettid()
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
tkill(r7, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)

863.020501ms ago: executing program 5 (id=2980):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8)

613.663231ms ago: executing program 0 (id=2981):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&')

572.819924ms ago: executing program 3 (id=2982):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000019c40)='./file0\x00', 0x18000, &(0x7f00000015c0)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64, @ANYBLOB="d9dac80f79c1e0bb9745b3313cc4d3f22839c25a5bb8fd4009cea400b4e45854165d888860c736ecf5b4beac2633eb13667ccf0f638a99efa46113adcbb7a50138e3628a5f8b9073d0dedc51eddbc784f54fa2d251795eccb140df19e35c3774cf21f98ed2c7da4bd7d328cd0445403b", @ANYRESHEX, @ANYBLOB="8a57754ab1cf85fb8ad5138b0ba0e619b6d2433356a00d196c4034fd6ef843ffd82d6692ccd2ff059e10062644f5304eb2db809a251b7c3e32b696c57f81dc172b89abc824f5b4faf989dd02f35f439eb2c905fae9c4203b03f41b42fd718a3c9bda0f2e5b4449eb635ed3ffea97854f3b8701ab2db06e4da7724a794896b5ffc977adf35b7d360dbcfe1e34238293615486c44deefeaa235239bc10df444e13424774bd796126107ae9e8fa22ebd0fe6e156fa89d7eb1a0c8459e922dd897a90cfa01598db6e52ee22d0f7cea379ac638540fbd983adeea5f566f34e0acec9f9ab23191848ebade11567b45f4"], 0x8, 0x2eb, &(0x7f0000019940)="$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")
syz_open_dev$sg(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]})
fstat(0xffffffffffffffff, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000197c0)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019780)={&(0x7f0000019280)=ANY=[@ANYBLOB="dc040000", @ANYRES16, @ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x8004}, 0x4000001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000006800010003001000fdffff7f00000000000000000c0002000100000015abd3040b0002"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
fdatasync(r2)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

529.388428ms ago: executing program 0 (id=2983):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01030000000000000000320000000c009900000000000000000005001801"], 0x40}}, 0x0)

481.964991ms ago: executing program 0 (id=2984):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000010000800000000000cbcd290000009500000001000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syslog(0x2, &(0x7f0000000200)=""/4096, 0x1000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}})
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))

301.526286ms ago: executing program 4 (id=2985):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x805}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0xd8, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4309, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x4ccc}, {0x7f}, {}, {0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x3d8, 0x0, 0x7}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

0s ago: executing program 5 (id=2986):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000018c0)={0x38, 0x18, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x28, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @typed={0x4, 0xe9}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

          6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  209.759944][T11491] Tainted: [W]=WARN
[  209.760008][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  209.760024][T11491] Call Trace:
[  209.760031][T11491]  <TASK>
[  209.760041][T11491]  __dump_stack+0x1d/0x30
[  209.760077][T11491]  dump_stack_lvl+0xe8/0x140
[  209.760178][T11491]  dump_stack+0x15/0x1b
[  209.760197][T11491]  should_fail_ex+0x265/0x280
[  209.760253][T11491]  should_fail+0xb/0x20
[  209.760288][T11491]  should_fail_usercopy+0x1a/0x20
[  209.760382][T11491]  _copy_from_user+0x1c/0xb0
[  209.760414][T11491]  ___sys_sendmsg+0xc1/0x1d0
[  209.760478][T11491]  __x64_sys_sendmsg+0xd4/0x160
[  209.760604][T11491]  x64_sys_call+0x191e/0x2ff0
[  209.760629][T11491]  do_syscall_64+0xd2/0x200
[  209.760659][T11491]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  209.760704][T11491]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  209.760730][T11491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.760755][T11491] RIP: 0033:0x7f58c08eebe9
[  209.760771][T11491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.760793][T11491] RSP: 002b:00007f58bf34f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.760884][T11491] RAX: ffffffffffffffda RBX: 00007f58c0b15fa0 RCX: 00007f58c08eebe9
[  209.760899][T11491] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006
[  209.760913][T11491] RBP: 00007f58bf34f090 R08: 0000000000000000 R09: 0000000000000000
[  209.760926][T11491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  209.760940][T11491] R13: 00007f58c0b16038 R14: 00007f58c0b15fa0 R15: 00007ffc24bd9a48
[  209.760965][T11491]  </TASK>
[  209.946920][T11489] loop5: detected capacity change from 0 to 8192
[  210.007633][T11494] siw: device registration error -23
[  210.070895][T11499] loop5: detected capacity change from 0 to 256
[  210.112950][T11499] binfmt_misc: register: failed to install interpreter file ./file0
[  210.122935][T11501] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  210.260696][T11508] Falling back ldisc for ttyS3.
[  210.488883][T11522] loop3: detected capacity change from 0 to 128
[  210.505912][T11517] siw: device registration error -23
[  210.721624][T11522] lo speed is unknown, defaulting to 1000
[  210.742929][T11525] syz.3.2165: attempt to access beyond end of device
[  210.742929][T11525] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128
[  210.854275][T11525] syz.3.2165: attempt to access beyond end of device
[  210.854275][T11525] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[  210.874609][T11525] syz.3.2165: attempt to access beyond end of device
[  210.874609][T11525] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[  210.886312][T11522] lo speed is unknown, defaulting to 1000
[  211.074772][T11525] syz.3.2165: attempt to access beyond end of device
[  211.074772][T11525] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  211.100205][T11525] syz.3.2165: attempt to access beyond end of device
[  211.100205][T11525] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  211.134672][T11525] syz.3.2165: attempt to access beyond end of device
[  211.134672][T11525] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[  211.148750][T11525] syz.3.2165: attempt to access beyond end of device
[  211.148750][T11525] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[  211.163667][T11525] syz.3.2165: attempt to access beyond end of device
[  211.163667][T11525] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[  211.207516][T11525] syz.3.2165: attempt to access beyond end of device
[  211.207516][T11525] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[  211.235485][T11525] syz.3.2165: attempt to access beyond end of device
[  211.235485][T11525] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[  211.251786][T11525] syz.3.2165: attempt to access beyond end of device
[  211.251786][T11525] loop3: rw=2049, sector=313, nr_sectors = 8 limit=128
[  211.266430][T11525] syz.3.2165: attempt to access beyond end of device
[  211.266430][T11525] loop3: rw=2049, sector=329, nr_sectors = 8 limit=128
[  211.281858][T11525] syz.3.2165: attempt to access beyond end of device
[  211.281858][T11525] loop3: rw=2049, sector=345, nr_sectors = 8 limit=128
[  211.365741][T11541] loop3: detected capacity change from 0 to 1024
[  211.378718][T11541] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  211.410811][T11542] loop5: detected capacity change from 0 to 512
[  211.430814][T11542] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  211.435886][T11544] loop3: detected capacity change from 0 to 512
[  211.456084][T11544] EXT4-fs: Ignoring removed oldalloc option
[  211.469282][T11544] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  211.479135][T11542] EXT4-fs (loop5): 1 truncate cleaned up
[  211.479526][T11542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.507191][T11544] EXT4-fs (loop3): 1 truncate cleaned up
[  211.514784][T11544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.536921][T11544] netlink: 'syz.3.2172': attribute type 10 has an invalid length.
[  211.544810][T11544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2172'.
[  211.559532][T11544] team0: Port device geneve1 added
[  211.566596][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2173'.
[  211.576078][T11544] syz.3.2172 (11544) used greatest stack depth: 9984 bytes left
[  211.599771][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.727622][T11554] siw: device registration error -23
[  211.935144][T11571] lo speed is unknown, defaulting to 1000
[  211.972733][T11571] lo speed is unknown, defaulting to 1000
[  212.109748][T11580] lo speed is unknown, defaulting to 1000
[  212.145614][T11580] lo speed is unknown, defaulting to 1000
[  212.188747][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.204096][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'.
[  212.240833][T11581] vlan0: entered promiscuous mode
[  212.320650][T11586] $Hÿ: renamed from bond0 (while UP)
[  212.331391][T11586] $Hÿ: entered promiscuous mode
[  212.336490][T11586] bond_slave_0: entered promiscuous mode
[  212.342297][T11586] bond_slave_1: entered promiscuous mode
[  212.457313][T11557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  212.621917][T11594] loop3: detected capacity change from 0 to 128
[  212.678094][T11597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2187'.
[  212.762833][T11594] lo speed is unknown, defaulting to 1000
[  212.836108][T11594] lo speed is unknown, defaulting to 1000
[  213.170009][T11616] lo speed is unknown, defaulting to 1000
[  213.204872][T11616] lo speed is unknown, defaulting to 1000
[  213.394917][T11619] loop5: detected capacity change from 0 to 512
[  213.423640][T11619] EXT4-fs (loop5): too many log groups per flexible block group
[  213.431407][T11619] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  213.451035][T11619] EXT4-fs (loop5): mount failed
[  213.616916][T11632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2198'.
[  213.674917][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2199'.
[  213.742421][T11641] loop3: detected capacity change from 0 to 512
[  213.751065][T11641] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  213.804038][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2202'.
[  213.820085][T11641] EXT4-fs (loop3): 1 truncate cleaned up
[  213.834209][T11641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.853311][T11641] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  214.013464][T11655] Falling back ldisc for ttyS3.
[  214.019918][   T29] kauditd_printk_skb: 512 callbacks suppressed
[  214.019942][   T29] audit: type=1326 audit(1755695879.617:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  214.061690][   T29] audit: type=1326 audit(1755695879.617:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  214.085411][   T29] audit: type=1326 audit(1755695879.617:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19aef6d550 code=0x7ffc0000
[  214.085914][T11661] loop5: detected capacity change from 0 to 128
[  214.109083][   T29] audit: type=1326 audit(1755695879.647:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  214.109119][   T29] audit: type=1326 audit(1755695879.647:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  214.162425][   T29] audit: type=1326 audit(1755695879.647:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  214.185958][   T29] audit: type=1326 audit(1755695879.647:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  214.209484][   T29] audit: type=1326 audit(1755695879.647:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  214.233096][   T29] audit: type=1326 audit(1755695879.647:7952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  214.256661][   T29] audit: type=1326 audit(1755695879.647:7953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11658 comm="syz.1.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  214.318848][T11661] FAT-fs (loop5): Directory bread(block 32) failed
[  214.325841][T11661] FAT-fs (loop5): Directory bread(block 33) failed
[  214.334449][T11661] FAT-fs (loop5): Directory bread(block 34) failed
[  214.345907][T11661] FAT-fs (loop5): Directory bread(block 35) failed
[  214.392232][T11661] FAT-fs (loop5): Directory bread(block 36) failed
[  214.412501][T11661] FAT-fs (loop5): Directory bread(block 37) failed
[  214.419340][T11661] FAT-fs (loop5): Directory bread(block 38) failed
[  214.426114][T11661] FAT-fs (loop5): Directory bread(block 39) failed
[  214.433076][T11661] FAT-fs (loop5): Directory bread(block 40) failed
[  214.439701][T11661] FAT-fs (loop5): Directory bread(block 41) failed
[  214.476001][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.486183][T11661] FAT-fs (loop5): Filesystem has been set read-only
[  214.493116][T11661] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  214.799336][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2213'.
[  215.170803][T11695] loop3: detected capacity change from 0 to 128
[  215.197299][T11695] FAT-fs (loop3): Directory bread(block 32) failed
[  215.212520][T11695] FAT-fs (loop3): Directory bread(block 33) failed
[  215.219369][T11695] FAT-fs (loop3): Directory bread(block 34) failed
[  215.234477][T11695] FAT-fs (loop3): Directory bread(block 35) failed
[  215.253119][T11695] FAT-fs (loop3): Directory bread(block 36) failed
[  215.259805][T11695] FAT-fs (loop3): Directory bread(block 37) failed
[  215.283688][T11695] FAT-fs (loop3): Directory bread(block 38) failed
[  215.304119][T11700] siw: device registration error -23
[  215.312036][T11695] FAT-fs (loop3): Directory bread(block 39) failed
[  215.332696][T11695] FAT-fs (loop3): Directory bread(block 40) failed
[  215.339570][T11695] FAT-fs (loop3): Directory bread(block 41) failed
[  215.398944][T11695] FAT-fs (loop3): Filesystem has been set read-only
[  215.408984][T11695] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  215.765225][T11719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2224'.
[  215.977224][T11734] loop3: detected capacity change from 0 to 512
[  215.994206][T11734] EXT4-fs (loop3): too many log groups per flexible block group
[  216.001968][T11734] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  216.044071][T11734] EXT4-fs (loop3): mount failed
[  216.120467][T11742] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2228'.
[  216.295316][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2231'.
[  216.505527][T11759] lo speed is unknown, defaulting to 1000
[  216.539385][T11759] lo speed is unknown, defaulting to 1000
[  216.740038][T11767] loop3: detected capacity change from 0 to 128
[  216.765797][T11767] FAT-fs (loop3): Directory bread(block 32) failed
[  216.789602][T11767] FAT-fs (loop3): Directory bread(block 33) failed
[  216.806637][T11767] FAT-fs (loop3): Directory bread(block 34) failed
[  216.823439][T11767] FAT-fs (loop3): Directory bread(block 35) failed
[  216.838486][T11767] FAT-fs (loop3): Directory bread(block 36) failed
[  216.882865][T11772] hub 9-0:1.0: USB hub found
[  216.888515][T11772] hub 9-0:1.0: 8 ports detected
[  216.943350][T11767] FAT-fs (loop3): Directory bread(block 37) failed
[  216.949951][T11767] FAT-fs (loop3): Directory bread(block 38) failed
[  216.961068][T11767] FAT-fs (loop3): Directory bread(block 39) failed
[  216.992648][T11767] FAT-fs (loop3): Directory bread(block 40) failed
[  217.000176][T11767] FAT-fs (loop3): Directory bread(block 41) failed
[  217.027488][T11767] bio_check_eod: 137 callbacks suppressed
[  217.027507][T11767] syz.3.2234: attempt to access beyond end of device
[  217.027507][T11767] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128
[  217.063344][T11767] FAT-fs (loop3): Filesystem has been set read-only
[  217.077509][T11774] lo speed is unknown, defaulting to 1000
[  217.094298][T11767] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  217.140420][T11774] lo speed is unknown, defaulting to 1000
[  217.331334][T11795] loop3: detected capacity change from 0 to 1024
[  217.339938][T11795] EXT4-fs: Ignoring removed nobh option
[  217.345585][T11795] EXT4-fs: inline encryption not supported
[  217.365730][T11795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.553889][T11794] lo speed is unknown, defaulting to 1000
[  217.588936][T11794] lo speed is unknown, defaulting to 1000
[  218.146918][T11821] loop5: detected capacity change from 0 to 128
[  218.178371][T11821] FAT-fs (loop5): Directory bread(block 32) failed
[  218.185579][T11821] FAT-fs (loop5): Directory bread(block 33) failed
[  218.192375][T11821] FAT-fs (loop5): Directory bread(block 34) failed
[  218.201731][T11821] FAT-fs (loop5): Directory bread(block 35) failed
[  218.208803][T11821] FAT-fs (loop5): Directory bread(block 36) failed
[  218.216691][T11821] FAT-fs (loop5): Directory bread(block 37) failed
[  218.223416][T11821] FAT-fs (loop5): Directory bread(block 38) failed
[  218.230166][T11821] FAT-fs (loop5): Directory bread(block 39) failed
[  218.264181][T11821] FAT-fs (loop5): Directory bread(block 40) failed
[  218.276551][T11827] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  218.284102][T11821] FAT-fs (loop5): Directory bread(block 41) failed
[  218.285480][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.332930][T11821] syz.5.2250: attempt to access beyond end of device
[  218.332930][T11821] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128
[  218.356854][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'.
[  218.358196][T11821] FAT-fs (loop5): Filesystem has been set read-only
[  218.382961][T11821] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  218.384962][T11835] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  218.434670][T11834] Falling back ldisc for ttyS3.
[  218.600765][T11840] loop5: detected capacity change from 0 to 128
[  218.642400][T11842] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  218.646456][T11837] lo speed is unknown, defaulting to 1000
[  218.684676][T11837] lo speed is unknown, defaulting to 1000
[  218.781661][T11840] lo speed is unknown, defaulting to 1000
[  218.787555][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2258'.
[  218.799864][T11846] syz.5.2256: attempt to access beyond end of device
[  218.799864][T11846] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128
[  218.829310][T11842] Falling back ldisc for ttyS3.
[  218.874617][T11846] syz.5.2256: attempt to access beyond end of device
[  218.874617][T11846] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[  218.895445][T11846] syz.5.2256: attempt to access beyond end of device
[  218.895445][T11846] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[  218.963715][T11846] syz.5.2256: attempt to access beyond end of device
[  218.963715][T11846] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128
[  219.003201][T11840] lo speed is unknown, defaulting to 1000
[  219.026118][T11846] syz.5.2256: attempt to access beyond end of device
[  219.026118][T11846] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128
[  219.092789][T11846] syz.5.2256: attempt to access beyond end of device
[  219.092789][T11846] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128
[  219.111598][T11863] siw: device registration error -23
[  219.145408][T11846] syz.5.2256: attempt to access beyond end of device
[  219.145408][T11846] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128
[  219.204225][   T29] kauditd_printk_skb: 248 callbacks suppressed
[  219.204240][   T29] audit: type=1326 audit(1755695884.794:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  219.204330][   T29] audit: type=1326 audit(1755695884.794:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11839 comm="syz.5.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  219.204409][T11846] syz.5.2256: attempt to access beyond end of device
[  219.204409][T11846] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128
[  219.282950][T11873] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  219.298063][T11878] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2266'.
[  219.466322][T11884] loop5: detected capacity change from 0 to 512
[  219.515917][T11884] EXT4-fs (loop5): too many log groups per flexible block group
[  219.523661][T11884] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  219.532058][T11884] EXT4-fs (loop5): mount failed
[  219.568027][T11889] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  219.666633][   T29] audit: type=1400 audit(1755695885.254:8204): avc:  denied  { mount } for  pid=11900 comm="syz.5.2275" name="/" dev="configfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  219.696859][   T29] audit: type=1400 audit(1755695885.294:8205): avc:  denied  { accept } for  pid=11900 comm="syz.5.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  219.725164][T11899] Falling back ldisc for ttyS3.
[  219.745514][   T29] audit: type=1400 audit(1755695885.344:8206): avc:  denied  { listen } for  pid=11900 comm="syz.5.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  219.783088][T11890] lo speed is unknown, defaulting to 1000
[  219.818993][T11890] lo speed is unknown, defaulting to 1000
[  219.916619][   T29] audit: type=1400 audit(1755695885.514:8207): avc:  denied  { read write } for  pid=11909 comm="syz.1.2277" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  219.941040][   T29] audit: type=1400 audit(1755695885.514:8208): avc:  denied  { open } for  pid=11909 comm="syz.1.2277" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  220.023468][T11913] loop3: detected capacity change from 0 to 256
[  220.049422][T11915] binfmt_misc: register: failed to install interpreter file ./file0
[  220.060019][T11913] binfmt_misc: register: failed to install interpreter file ./file0
[  220.096929][T11917] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  220.223293][T11923] loop5: detected capacity change from 0 to 512
[  220.230167][T11921] Falling back ldisc for ttyS3.
[  220.236183][T11923] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  220.249910][T11923] EXT4-fs (loop5): 1 truncate cleaned up
[  220.257219][T11923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.279829][T11923] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  220.405584][T11929] Falling back ldisc for ttyS3.
[  220.563152][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.595011][T11939] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2283'.
[  220.617441][T11938] loop5: detected capacity change from 0 to 128
[  220.632546][   T29] audit: type=1326 audit(1755695886.224:8209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.5.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  220.656277][   T29] audit: type=1326 audit(1755695886.224:8210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.5.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  220.711159][   T29] audit: type=1326 audit(1755695886.254:8211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11937 comm="syz.5.2286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  220.764078][T11945] lo speed is unknown, defaulting to 1000
[  220.821471][T11945] lo speed is unknown, defaulting to 1000
[  220.965196][T11960] loop5: detected capacity change from 0 to 512
[  220.982925][T11960] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  221.035207][T11960] EXT4-fs (loop5): 1 truncate cleaned up
[  221.043098][T11960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.064466][T11960] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  221.135568][T11960] Falling back ldisc for ttyS3.
[  221.344237][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.472069][T11973] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2292'.
[  221.483733][T11972] loop3: detected capacity change from 0 to 1024
[  221.496248][T11972] EXT4-fs: Ignoring removed orlov option
[  221.578268][T11972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.727781][T11981] loop5: detected capacity change from 0 to 512
[  221.758738][T11981] EXT4-fs (loop5): too many log groups per flexible block group
[  221.766712][T11981] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  221.774243][T11981] EXT4-fs (loop5): mount failed
[  221.989530][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.039438][T11993] lo speed is unknown, defaulting to 1000
[  222.221543][T11993] lo speed is unknown, defaulting to 1000
[  222.439745][T12043] FAULT_INJECTION: forcing a failure.
[  222.439745][T12043] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.452956][T12043] CPU: 1 UID: 0 PID: 12043 Comm: syz.1.2309 Tainted: G        W           6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  222.453073][T12043] Tainted: [W]=WARN
[  222.453080][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  222.453092][T12043] Call Trace:
[  222.453099][T12043]  <TASK>
[  222.453109][T12043]  __dump_stack+0x1d/0x30
[  222.453185][T12043]  dump_stack_lvl+0xe8/0x140
[  222.453218][T12043]  dump_stack+0x15/0x1b
[  222.453234][T12043]  should_fail_ex+0x265/0x280
[  222.453290][T12043]  should_fail+0xb/0x20
[  222.453337][T12043]  should_fail_usercopy+0x1a/0x20
[  222.453360][T12043]  _copy_from_user+0x1c/0xb0
[  222.453387][T12043]  ___sys_sendmsg+0xc1/0x1d0
[  222.453478][T12043]  __x64_sys_sendmsg+0xd4/0x160
[  222.453531][T12043]  x64_sys_call+0x191e/0x2ff0
[  222.453555][T12043]  do_syscall_64+0xd2/0x200
[  222.453583][T12043]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  222.453605][T12043]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  222.453683][T12043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.453709][T12043] RIP: 0033:0x7f19aef6ebe9
[  222.453779][T12043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.453800][T12043] RSP: 002b:00007f19ad9d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.453823][T12043] RAX: ffffffffffffffda RBX: 00007f19af195fa0 RCX: 00007f19aef6ebe9
[  222.453837][T12043] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003
[  222.453902][T12043] RBP: 00007f19ad9d7090 R08: 0000000000000000 R09: 0000000000000000
[  222.453997][T12043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.454011][T12043] R13: 00007f19af196038 R14: 00007f19af195fa0 R15: 00007ffd44e9d938
[  222.454039][T12043]  </TASK>
[  223.023985][T12012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  223.121108][T12083] loop3: detected capacity change from 0 to 128
[  223.184536][T12087] loop5: detected capacity change from 0 to 1024
[  223.193209][T12087] EXT4-fs: Ignoring removed orlov option
[  223.210509][T12087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.282684][T12083] lo speed is unknown, defaulting to 1000
[  223.303606][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2324'.
[  223.323523][T12083] lo speed is unknown, defaulting to 1000
[  223.430140][ T4832] bio_check_eod: 98 callbacks suppressed
[  223.430156][ T4832] kworker/u8:17: attempt to access beyond end of device
[  223.430156][ T4832] loop3: rw=1, sector=153, nr_sectors = 8 limit=128
[  223.460254][ T4832] kworker/u8:17: attempt to access beyond end of device
[  223.460254][ T4832] loop3: rw=1, sector=169, nr_sectors = 8 limit=128
[  223.499190][ T4832] kworker/u8:17: attempt to access beyond end of device
[  223.499190][ T4832] loop3: rw=1, sector=185, nr_sectors = 8 limit=128
[  223.545784][ T4832] kworker/u8:17: attempt to access beyond end of device
[  223.545784][ T4832] loop3: rw=1, sector=201, nr_sectors = 8 limit=128
[  223.559444][T12101] lo speed is unknown, defaulting to 1000
[  223.586679][ T4832] kworker/u8:17: attempt to access beyond end of device
[  223.586679][ T4832] loop3: rw=1, sector=217, nr_sectors = 8 limit=128
[  223.627190][ T4832] kworker/u8:17: attempt to access beyond end of device
[  223.627190][ T4832] loop3: rw=1, sector=233, nr_sectors = 8 limit=128
[  223.650419][T12101] lo speed is unknown, defaulting to 1000
[  223.659384][ T4832] kworker/u8:17: attempt to access beyond end of device
[  223.659384][ T4832] loop3: rw=1, sector=249, nr_sectors = 8 limit=128
[  223.684621][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.703247][ T4832] kworker/u8:17: attempt to access beyond end of device
[  223.703247][ T4832] loop3: rw=1, sector=265, nr_sectors = 8 limit=128
[  223.723810][T12106] tipc: Can't bind to reserved service type 2
[  223.743685][ T4832] kworker/u8:17: attempt to access beyond end of device
[  223.743685][ T4832] loop3: rw=1, sector=281, nr_sectors = 8 limit=128
[  223.796924][ T4832] kworker/u8:17: attempt to access beyond end of device
[  223.796924][ T4832] loop3: rw=1, sector=297, nr_sectors = 8 limit=128
[  223.827706][T12106] loop5: detected capacity change from 0 to 8192
[  223.835037][T12106] vfat: Unknown parameter 'GPL'
[  223.892085][T12108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12108 comm=syz.0.2328
[  223.962902][T12123] netlink: 'syz.5.2327': attribute type 4 has an invalid length.
[  224.050859][T12130] rtc_cmos 00:00: Alarms can be up to one day in the future
[  224.661907][ T3366] rtc_cmos 00:00: Alarms can be up to one day in the future
[  224.669519][ T3366] rtc_cmos 00:00: Alarms can be up to one day in the future
[  224.677100][ T3366] rtc_cmos 00:00: Alarms can be up to one day in the future
[  224.684813][ T3366] rtc_cmos 00:00: Alarms can be up to one day in the future
[  224.692133][ T3366] rtc rtc0: __rtc_set_alarm: err=-22
[  224.849100][   T29] kauditd_printk_skb: 229 callbacks suppressed
[  224.849115][   T29] audit: type=1326 audit(1755695890.442:8441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  224.881296][   T29] audit: type=1326 audit(1755695890.452:8442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  224.904846][   T29] audit: type=1326 audit(1755695890.452:8443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  224.928462][   T29] audit: type=1326 audit(1755695890.452:8444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  224.951918][   T29] audit: type=1326 audit(1755695890.452:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  224.975571][   T29] audit: type=1326 audit(1755695890.452:8446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19aef70b07 code=0x7ffc0000
[  224.999105][   T29] audit: type=1326 audit(1755695890.452:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f19aef70a7c code=0x7ffc0000
[  225.022603][   T29] audit: type=1326 audit(1755695890.452:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f19aef709b4 code=0x7ffc0000
[  225.046005][   T29] audit: type=1326 audit(1755695890.452:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f19aef709b4 code=0x7ffc0000
[  225.069481][   T29] audit: type=1326 audit(1755695890.452:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.1.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f19aef6d84a code=0x7ffc0000
[  225.103117][T12162] lo speed is unknown, defaulting to 1000
[  225.145095][T12164] loop5: detected capacity change from 0 to 1024
[  225.152076][T12164] EXT4-fs: Ignoring removed orlov option
[  225.165427][T12162] lo speed is unknown, defaulting to 1000
[  225.193458][T12164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.436572][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'.
[  225.500060][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.587375][T12198] FAULT_INJECTION: forcing a failure.
[  225.587375][T12198] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.588680][T12201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2353'.
[  225.600625][T12198] CPU: 1 UID: 0 PID: 12198 Comm: syz.3.2352 Tainted: G        W           6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  225.600674][T12198] Tainted: [W]=WARN
[  225.600704][T12198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  225.600721][T12198] Call Trace:
[  225.600729][T12198]  <TASK>
[  225.600740][T12198]  __dump_stack+0x1d/0x30
[  225.600769][T12198]  dump_stack_lvl+0xe8/0x140
[  225.600865][T12198]  dump_stack+0x15/0x1b
[  225.600934][T12198]  should_fail_ex+0x265/0x280
[  225.601059][T12198]  should_fail+0xb/0x20
[  225.601101][T12198]  should_fail_usercopy+0x1a/0x20
[  225.601128][T12198]  _copy_from_user+0x1c/0xb0
[  225.601206][T12198]  __sys_bpf+0x178/0x7b0
[  225.601260][T12198]  __x64_sys_bpf+0x41/0x50
[  225.601295][T12198]  x64_sys_call+0x2aea/0x2ff0
[  225.601325][T12198]  do_syscall_64+0xd2/0x200
[  225.601431][T12198]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  225.601466][T12198]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  225.601499][T12198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.601567][T12198] RIP: 0033:0x7efdf443ebe9
[  225.601589][T12198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.601615][T12198] RSP: 002b:00007efdf2ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  225.601641][T12198] RAX: ffffffffffffffda RBX: 00007efdf4665fa0 RCX: 00007efdf443ebe9
[  225.601659][T12198] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012
[  225.601677][T12198] RBP: 00007efdf2ea7090 R08: 0000000000000000 R09: 0000000000000000
[  225.601714][T12198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.601731][T12198] R13: 00007efdf4666038 R14: 00007efdf4665fa0 R15: 00007ffca01192b8
[  225.601763][T12198]  </TASK>
[  225.795615][T12201] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12201 comm=syz.0.2353
[  225.995439][T12207] lo speed is unknown, defaulting to 1000
[  226.030610][T12207] lo speed is unknown, defaulting to 1000
[  226.232157][T12219] lo speed is unknown, defaulting to 1000
[  226.247063][T12225] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  226.318187][T12219] lo speed is unknown, defaulting to 1000
[  226.373948][T12192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  226.497968][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2362'.
[  226.528081][T12231] Falling back ldisc for ttyS3.
[  226.624208][T12246] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  226.801764][T12253] lo speed is unknown, defaulting to 1000
[  226.871435][T12253] lo speed is unknown, defaulting to 1000
[  227.060303][T12246] Falling back ldisc for ttyS3.
[  227.318759][T12260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24082 sclass=netlink_route_socket pid=12260 comm=syz.3.2368
[  227.505020][T12270] loop5: detected capacity change from 0 to 1024
[  227.519416][T12270] EXT4-fs: Ignoring removed nobh option
[  227.525051][T12270] EXT4-fs: inline encryption not supported
[  227.570110][T12272] loop3: detected capacity change from 0 to 128
[  227.577036][T12270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.602703][T12272] FAT-fs (loop3): Directory bread(block 32) failed
[  227.615846][T12272] FAT-fs (loop3): Directory bread(block 33) failed
[  227.660332][T12272] FAT-fs (loop3): Directory bread(block 34) failed
[  227.667401][T12272] FAT-fs (loop3): Directory bread(block 35) failed
[  227.674097][T12272] FAT-fs (loop3): Directory bread(block 36) failed
[  227.685108][T12272] FAT-fs (loop3): Directory bread(block 37) failed
[  227.691987][T12272] FAT-fs (loop3): Directory bread(block 38) failed
[  227.699518][T12272] FAT-fs (loop3): Directory bread(block 39) failed
[  227.706230][T12272] FAT-fs (loop3): Directory bread(block 40) failed
[  227.720644][T12272] FAT-fs (loop3): Directory bread(block 41) failed
[  227.762241][T12272] FAT-fs (loop3): Filesystem has been set read-only
[  227.770077][T12272] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  227.780497][T12272] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  227.811904][T12270] lo speed is unknown, defaulting to 1000
[  227.848499][T12270] lo speed is unknown, defaulting to 1000
[  227.986138][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2375'.
[  228.024316][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.071969][T12295] loop3: detected capacity change from 0 to 128
[  228.337242][T12308] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  228.439142][T12295] bio_check_eod: 4379 callbacks suppressed
[  228.439162][T12295] syz.3.2378: attempt to access beyond end of device
[  228.439162][T12295] loop3: rw=0, sector=513, nr_sectors = 8 limit=128
[  228.468884][T12295] syz.3.2378: attempt to access beyond end of device
[  228.468884][T12295] loop3: rw=0, sector=513, nr_sectors = 8 limit=128
[  228.489639][T12295] syz.3.2378: attempt to access beyond end of device
[  228.489639][T12295] loop3: rw=0, sector=513, nr_sectors = 8 limit=128
[  228.536878][T12295] syz.3.2378: attempt to access beyond end of device
[  228.536878][T12295] loop3: rw=0, sector=513, nr_sectors = 8 limit=128
[  228.553602][T12295] syz.3.2378: attempt to access beyond end of device
[  228.553602][T12295] loop3: rw=0, sector=513, nr_sectors = 8 limit=128
[  228.574982][T12315] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  228.589451][T12295] syz.3.2378: attempt to access beyond end of device
[  228.589451][T12295] loop3: rw=0, sector=513, nr_sectors = 8 limit=128
[  228.589813][T12308] Falling back ldisc for ttyS3.
[  228.604646][T12295] syz.3.2378: attempt to access beyond end of device
[  228.604646][T12295] loop3: rw=0, sector=513, nr_sectors = 8 limit=128
[  228.680851][T12295] syz.3.2378: attempt to access beyond end of device
[  228.680851][T12295] loop3: rw=0, sector=513, nr_sectors = 8 limit=128
[  228.696637][T12323] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2384'.
[  228.724773][T12323] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2384'.
[  228.753424][T12295] syz.3.2378: attempt to access beyond end of device
[  228.753424][T12295] loop3: rw=0, sector=513, nr_sectors = 8 limit=128
[  228.819393][T12295] syz.3.2378: attempt to access beyond end of device
[  228.819393][T12295] loop3: rw=0, sector=513, nr_sectors = 8 limit=128
[  228.902801][T12315] Falling back ldisc for ttyS3.
[  228.984374][T12333] loop5: detected capacity change from 0 to 1024
[  228.996455][T12336] loop3: detected capacity change from 0 to 512
[  229.016059][T12333] EXT4-fs: Ignoring removed nobh option
[  229.020541][T12336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  229.021723][T12333] EXT4-fs: inline encryption not supported
[  229.060768][T12336] EXT4-fs (loop3): 1 truncate cleaned up
[  229.071007][T12333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.085370][T12336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.122723][T12336] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  229.299744][T12348] Falling back ldisc for ttyS3.
[  229.321031][T12352] FAULT_INJECTION: forcing a failure.
[  229.321031][T12352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.334320][T12352] CPU: 0 UID: 0 PID: 12352 Comm: syz.0.2391 Tainted: G        W           6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  229.334440][T12352] Tainted: [W]=WARN
[  229.334447][T12352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  229.334460][T12352] Call Trace:
[  229.334466][T12352]  <TASK>
[  229.334475][T12352]  __dump_stack+0x1d/0x30
[  229.334504][T12352]  dump_stack_lvl+0xe8/0x140
[  229.334561][T12352]  dump_stack+0x15/0x1b
[  229.334580][T12352]  should_fail_ex+0x265/0x280
[  229.334692][T12352]  should_fail+0xb/0x20
[  229.334780][T12352]  should_fail_usercopy+0x1a/0x20
[  229.334805][T12352]  _copy_from_user+0x1c/0xb0
[  229.334839][T12352]  ___sys_sendmsg+0xc1/0x1d0
[  229.334912][T12352]  __x64_sys_sendmsg+0xd4/0x160
[  229.335043][T12352]  x64_sys_call+0x191e/0x2ff0
[  229.335068][T12352]  do_syscall_64+0xd2/0x200
[  229.335104][T12352]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  229.335147][T12352]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  229.335170][T12352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.335195][T12352] RIP: 0033:0x7fb8f155ebe9
[  229.335213][T12352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.335269][T12352] RSP: 002b:00007fb8effc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.335290][T12352] RAX: ffffffffffffffda RBX: 00007fb8f1785fa0 RCX: 00007fb8f155ebe9
[  229.335303][T12352] RDX: 0000000000044080 RSI: 00002000000003c0 RDI: 0000000000000003
[  229.335318][T12352] RBP: 00007fb8effc7090 R08: 0000000000000000 R09: 0000000000000000
[  229.335407][T12352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.335421][T12352] R13: 00007fb8f1786038 R14: 00007fb8f1785fa0 R15: 00007ffdf7267be8
[  229.335444][T12352]  </TASK>
[  229.343842][T12333] lo speed is unknown, defaulting to 1000
[  229.553856][T12333] lo speed is unknown, defaulting to 1000
[  229.603715][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.680399][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2393'.
[  229.816114][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.927694][T12368] loop5: detected capacity change from 0 to 1024
[  230.001411][T12368] EXT4-fs: Ignoring removed orlov option
[  230.076020][T12368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.116916][T12373] siw: device registration error -23
[  230.252428][T12383] loop3: detected capacity change from 0 to 128
[  230.275522][T12383] FAT-fs (loop3): Directory bread(block 32) failed
[  230.291097][T12384] siw: device registration error -23
[  230.299363][   T29] kauditd_printk_skb: 206 callbacks suppressed
[  230.299380][   T29] audit: type=1326 audit(1755695895.889:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  230.302751][T12383] FAT-fs (loop3): Directory bread(block 33) failed
[  230.307291][   T29] audit: type=1326 audit(1755695895.899:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  230.356101][T12383] FAT-fs (loop3): Directory bread(block 34) failed
[  230.399042][   T29] audit: type=1326 audit(1755695895.959:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  230.422774][   T29] audit: type=1326 audit(1755695895.959:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  230.432829][T12383] FAT-fs (loop3): Directory bread(block 35) failed
[  230.446306][   T29] audit: type=1326 audit(1755695895.959:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  230.446351][   T29] audit: type=1326 audit(1755695895.959:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  230.499815][   T29] audit: type=1326 audit(1755695895.959:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  230.523430][   T29] audit: type=1326 audit(1755695895.959:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58c08f0b07 code=0x7ffc0000
[  230.546876][   T29] audit: type=1326 audit(1755695895.959:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f58c08f0a7c code=0x7ffc0000
[  230.570300][   T29] audit: type=1326 audit(1755695895.959:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.4.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f58c08f09b4 code=0x7ffc0000
[  230.593934][T12383] FAT-fs (loop3): Directory bread(block 36) failed
[  230.601347][T12383] FAT-fs (loop3): Directory bread(block 37) failed
[  230.607921][T12383] FAT-fs (loop3): Directory bread(block 38) failed
[  230.614488][T12383] FAT-fs (loop3): Directory bread(block 39) failed
[  230.630195][T12383] FAT-fs (loop3): Directory bread(block 40) failed
[  230.637048][T12383] FAT-fs (loop3): Directory bread(block 41) failed
[  230.677355][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.709597][T12383] FAT-fs (loop3): Filesystem has been set read-only
[  230.716619][T12383] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  230.746036][T12395] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  230.760144][T12383] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  230.949692][T12397] lo speed is unknown, defaulting to 1000
[  230.971160][T12400] Falling back ldisc for ttyS3.
[  230.986584][T12397] lo speed is unknown, defaulting to 1000
[  231.038643][T12413] loop3: detected capacity change from 0 to 512
[  231.045595][T12413] EXT4-fs: Ignoring removed bh option
[  231.052262][T12413] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  231.062832][T12413] EXT4-fs (loop3): 1 truncate cleaned up
[  231.070141][T12413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.120183][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.148888][T12416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2411'.
[  231.193879][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2413'.
[  231.221213][T12422] bridge0: entered promiscuous mode
[  231.234651][T12425] siw: device registration error -23
[  231.240235][T12422] macsec1: entered allmulticast mode
[  231.245672][T12422] bridge0: entered allmulticast mode
[  231.261682][T12422] bridge0: port 3(macsec1) entered blocking state
[  231.268208][T12422] bridge0: port 3(macsec1) entered disabled state
[  231.308236][T12422] bridge0: left allmulticast mode
[  231.313483][T12422] bridge0: left promiscuous mode
[  231.353204][T12432] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  231.539832][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'.
[  231.704244][T12449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2425'.
[  231.779754][T12456] loop5: detected capacity change from 0 to 128
[  232.020565][T12475] FAULT_INJECTION: forcing a failure.
[  232.020565][T12475] name failslab, interval 1, probability 0, space 0, times 0
[  232.033454][T12475] CPU: 0 UID: 0 PID: 12475 Comm: syz.4.2434 Tainted: G        W           6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  232.033497][T12475] Tainted: [W]=WARN
[  232.033504][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  232.033516][T12475] Call Trace:
[  232.033524][T12475]  <TASK>
[  232.033533][T12475]  __dump_stack+0x1d/0x30
[  232.033610][T12475]  dump_stack_lvl+0xe8/0x140
[  232.033630][T12475]  dump_stack+0x15/0x1b
[  232.033647][T12475]  should_fail_ex+0x265/0x280
[  232.033758][T12475]  should_failslab+0x8c/0xb0
[  232.033854][T12475]  kmem_cache_alloc_noprof+0x50/0x310
[  232.033883][T12475]  ? audit_log_start+0x365/0x6c0
[  232.033921][T12475]  audit_log_start+0x365/0x6c0
[  232.033967][T12475]  audit_seccomp+0x48/0x100
[  232.034047][T12475]  ? __seccomp_filter+0x68c/0x10d0
[  232.034122][T12475]  __seccomp_filter+0x69d/0x10d0
[  232.034155][T12475]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  232.034184][T12475]  ? vfs_write+0x75e/0x8e0
[  232.034216][T12475]  __secure_computing+0x82/0x150
[  232.034298][T12475]  syscall_trace_enter+0xcf/0x1e0
[  232.034329][T12475]  do_syscall_64+0xac/0x200
[  232.034362][T12475]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  232.034448][T12475]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  232.034475][T12475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.034501][T12475] RIP: 0033:0x7f58c08eebe9
[  232.034518][T12475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.034540][T12475] RSP: 002b:00007f58bf34f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  232.034569][T12475] RAX: ffffffffffffffda RBX: 00007f58c0b15fa0 RCX: 00007f58c08eebe9
[  232.034584][T12475] RDX: 0000000000000008 RSI: 0000200000000000 RDI: ffffffffffffffff
[  232.034599][T12475] RBP: 00007f58bf34f090 R08: 0000000000000000 R09: 0000000000000000
[  232.034631][T12475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.034644][T12475] R13: 00007f58c0b16038 R14: 00007f58c0b15fa0 R15: 00007ffc24bd9a48
[  232.034704][T12475]  </TASK>
[  232.620668][T12484] binfmt_misc: register: failed to install interpreter file ./file0
[  232.868240][T12502] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2444'.
[  232.879124][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2444'.
[  232.937557][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'.
[  233.089275][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'.
[  233.157988][T12519] lo speed is unknown, defaulting to 1000
[  233.225010][T12519] lo speed is unknown, defaulting to 1000
[  233.676881][T12524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2453'.
[  233.817646][T12543] loop5: detected capacity change from 0 to 512
[  233.843392][T12543] EXT4-fs (loop5): too many log groups per flexible block group
[  233.851194][T12543] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  233.859464][T12543] EXT4-fs (loop5): mount failed
[  233.946297][T12549] siw: device registration error -23
[  233.978582][T12552] binfmt_misc: register: failed to install interpreter file ./file0
[  234.114095][T12562] loop5: detected capacity change from 0 to 512
[  234.132064][T12562] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  234.155822][T12562] EXT4-fs (loop5): 1 truncate cleaned up
[  234.169204][T12562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.199383][T12562] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  234.382377][T12562] Falling back ldisc for ttyS3.
[  234.397300][T12574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2468'.
[  234.528095][T12579] loop3: detected capacity change from 0 to 128
[  234.570013][T12579] FAT-fs (loop3): Directory bread(block 32) failed
[  234.578260][T12579] FAT-fs (loop3): Directory bread(block 33) failed
[  234.586547][T12579] FAT-fs (loop3): Directory bread(block 34) failed
[  234.598605][T12579] FAT-fs (loop3): Directory bread(block 35) failed
[  234.608029][T12579] FAT-fs (loop3): Directory bread(block 36) failed
[  234.614896][T12579] FAT-fs (loop3): Directory bread(block 37) failed
[  234.625959][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.635818][T12579] FAT-fs (loop3): Directory bread(block 38) failed
[  234.646245][T12579] FAT-fs (loop3): Directory bread(block 39) failed
[  234.655315][T12579] FAT-fs (loop3): Directory bread(block 40) failed
[  234.663809][T12579] FAT-fs (loop3): Directory bread(block 41) failed
[  234.690271][T12579] bio_check_eod: 7714 callbacks suppressed
[  234.690286][T12579] syz.3.2469: attempt to access beyond end of device
[  234.690286][T12579] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128
[  234.712686][T12579] FAT-fs (loop3): Filesystem has been set read-only
[  234.719824][T12579] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  234.925504][T12610] loop5: detected capacity change from 0 to 512
[  234.937431][T12610] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  234.967777][T12610] EXT4-fs (loop5): 1 truncate cleaned up
[  234.974537][T12610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.035569][T12610] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  235.183029][T12621] Falling back ldisc for ttyS3.
[  235.342837][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.395432][   T29] kauditd_printk_skb: 325 callbacks suppressed
[  235.395462][   T29] audit: type=1400 audit(1755695900.986:8990): avc:  denied  { connect } for  pid=12626 comm="syz.5.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  235.452878][   T29] audit: type=1400 audit(1755695901.026:8991): avc:  denied  { ioctl } for  pid=12626 comm="syz.5.2482" path="socket:[38997]" dev="sockfs" ino=38997 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  235.488981][   T29] audit: type=1400 audit(1755695901.076:8992): avc:  denied  { accept } for  pid=12629 comm="syz.0.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  235.517547][T12634] loop5: detected capacity change from 0 to 1024
[  235.526870][T12634] EXT4-fs: Ignoring removed nobh option
[  235.532468][T12634] EXT4-fs: inline encryption not supported
[  235.556392][T12632] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  235.598033][T12634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.733091][T12645] Falling back ldisc for ttyS3.
[  235.778335][T12630] SELinux:  Context @ is not valid (left unmapped).
[  235.785295][   T29] audit: type=1400 audit(1755695901.376:8993): avc:  denied  { relabelto } for  pid=12629 comm="+}[@" name="cgroup.controllers" dev="tmpfs" ino=2613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@"
[  235.812481][   T29] audit: type=1400 audit(1755695901.376:8994): avc:  denied  { associate } for  pid=12629 comm="+}[@" name="cgroup.controllers" dev="tmpfs" ino=2613 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@"
[  235.842520][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.904634][   T29] audit: type=1326 audit(1755695901.496:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  235.909328][T12653] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12653 comm=syz.5.2488
[  235.962134][   T29] audit: type=1326 audit(1755695901.496:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  235.985669][   T29] audit: type=1326 audit(1755695901.496:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  236.009231][   T29] audit: type=1326 audit(1755695901.496:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  236.032749][   T29] audit: type=1326 audit(1755695901.496:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.5.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  236.077738][T12658] loop5: detected capacity change from 0 to 1024
[  236.091986][T12658] EXT4-fs: Ignoring removed nobh option
[  236.097795][T12658] EXT4-fs: inline encryption not supported
[  236.117095][T12658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.312777][T12658] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2491: Allocating blocks 497-513 which overlap fs metadata
[  236.327516][T12658] EXT4-fs (loop5): pa ffff888106e2f3f0: logic 256, phys. 385, len 8
[  236.335563][T12658] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  236.371438][T12668] siw: device registration error -23
[  236.490692][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.556074][T12688] loop5: detected capacity change from 0 to 512
[  236.565427][T12688] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  236.596838][T12688] EXT4-fs (loop5): 1 truncate cleaned up
[  236.602918][T12688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.639586][T12688] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  236.740060][T12705] __nla_validate_parse: 1 callbacks suppressed
[  236.740080][T12705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2501'.
[  236.823422][T12688] Falling back ldisc for ttyS3.
[  237.127489][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.261444][T12715] loop5: detected capacity change from 0 to 128
[  237.275912][T12715] FAT-fs (loop5): Directory bread(block 32) failed
[  237.283349][T12715] FAT-fs (loop5): Directory bread(block 33) failed
[  237.291528][T12715] FAT-fs (loop5): Directory bread(block 34) failed
[  237.299112][T12715] FAT-fs (loop5): Directory bread(block 35) failed
[  237.307593][T12715] FAT-fs (loop5): Directory bread(block 36) failed
[  237.315135][T12715] FAT-fs (loop5): Directory bread(block 37) failed
[  237.322163][T12715] FAT-fs (loop5): Directory bread(block 38) failed
[  237.330797][T12715] FAT-fs (loop5): Directory bread(block 39) failed
[  237.337805][T12715] FAT-fs (loop5): Directory bread(block 40) failed
[  237.346635][T12715] FAT-fs (loop5): Directory bread(block 41) failed
[  237.360815][T12681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  237.428677][T12715] syz.5.2506: attempt to access beyond end of device
[  237.428677][T12715] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128
[  237.444988][T12717] siw: device registration error -23
[  237.457427][T12715] FAT-fs (loop5): Filesystem has been set read-only
[  237.464525][T12720] mmap: syz.3.2507 (12720) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  237.479960][T12715] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  237.491371][T12722] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  237.560338][T12725] loop3: detected capacity change from 0 to 1024
[  237.567990][T12725] EXT4-fs: Ignoring removed orlov option
[  237.578738][T12725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.716808][T12737] siw: device registration error -23
[  237.857292][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.114630][T12769] siw: device registration error -23
[  238.290910][T12783] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  238.405783][T12788] Falling back ldisc for ttyS3.
[  238.425323][T12731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  238.498123][T12795] loop5: detected capacity change from 0 to 1024
[  238.505683][T12795] EXT4-fs: Ignoring removed nobh option
[  238.511322][T12795] EXT4-fs: inline encryption not supported
[  238.539343][T12795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.591535][T12799] lo speed is unknown, defaulting to 1000
[  238.638261][T12799] lo speed is unknown, defaulting to 1000
[  238.657914][T12803] siw: device registration error -23
[  238.924781][T12820] lo speed is unknown, defaulting to 1000
[  238.967711][T12820] lo speed is unknown, defaulting to 1000
[  239.247698][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2534'.
[  239.454611][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.482021][T12849] loop5: detected capacity change from 0 to 1024
[  239.489649][T12849] EXT4-fs: Ignoring removed nobh option
[  239.495267][T12849] EXT4-fs: Ignoring removed bh option
[  239.516839][T12849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.546358][T12849] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  239.554266][T12813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  239.561450][T12849] EXT4-fs (loop5): Remounting filesystem read-only
[  239.650158][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.914727][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2545'.
[  240.423877][   T29] kauditd_printk_skb: 106 callbacks suppressed
[  240.423900][   T29] audit: type=1400 audit(1755695906.004:9106): avc:  denied  { connect } for  pid=12868 comm="syz.5.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  240.449910][   T29] audit: type=1400 audit(1755695906.004:9107): avc:  denied  { name_connect } for  pid=12868 comm="syz.5.2542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  240.485910][T12861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  240.496056][T12904] netlink: 'syz.0.2549': attribute type 1 has an invalid length.
[  240.503905][T12904] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2549'.
[  240.654584][T12923] loop3: detected capacity change from 0 to 512
[  240.669277][T12923] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  240.703110][T12923] EXT4-fs (loop3): 1 truncate cleaned up
[  240.711262][T12923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.730148][T12923] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  240.817603][T12927] siw: device registration error -23
[  240.855887][T12950] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2558'.
[  240.895384][T12941] Falling back ldisc for ttyS3.
[  240.969487][T12955] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2560'.
[  240.997093][   T29] audit: type=1326 audit(1755695906.584:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  241.023599][   T29] audit: type=1326 audit(1755695906.584:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  241.047159][   T29] audit: type=1326 audit(1755695906.584:9110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  241.070752][   T29] audit: type=1326 audit(1755695906.584:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f58c08eec23 code=0x7ffc0000
[  241.094062][   T29] audit: type=1326 audit(1755695906.584:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f58c08eec23 code=0x7ffc0000
[  241.117399][   T29] audit: type=1326 audit(1755695906.584:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  241.141051][   T29] audit: type=1326 audit(1755695906.584:9114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  241.164634][   T29] audit: type=1326 audit(1755695906.584:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  241.190546][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.297607][T12966] loop3: detected capacity change from 0 to 512
[  241.318049][T12966] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  241.353226][T12966] EXT4-fs (loop3): 1 truncate cleaned up
[  241.362912][T12966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.381108][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2566'.
[  241.389645][T12966] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  241.546946][T12977] Falling back ldisc for ttyS3.
[  241.584361][T12984] loop5: detected capacity change from 0 to 128
[  241.741026][T12988] lo speed is unknown, defaulting to 1000
[  241.776982][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.816108][T12984] syz.5.2571: attempt to access beyond end of device
[  241.816108][T12984] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128
[  241.839343][T12998] netlink: 'syz.3.2573': attribute type 1 has an invalid length.
[  241.847165][T12998] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2573'.
[  241.864147][T12984] syz.5.2571: attempt to access beyond end of device
[  241.864147][T12984] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[  241.903266][T12991] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2574'.
[  241.916993][T12984] syz.5.2571: attempt to access beyond end of device
[  241.916993][T12984] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[  241.960644][T12984] syz.5.2571: attempt to access beyond end of device
[  241.960644][T12984] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128
[  241.976885][T12984] syz.5.2571: attempt to access beyond end of device
[  241.976885][T12984] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128
[  241.992432][T12984] syz.5.2571: attempt to access beyond end of device
[  241.992432][T12984] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128
[  241.994429][T12988] lo speed is unknown, defaulting to 1000
[  242.007560][T12984] syz.5.2571: attempt to access beyond end of device
[  242.007560][T12984] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128
[  242.086646][T12984] syz.5.2571: attempt to access beyond end of device
[  242.086646][T12984] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128
[  242.179802][T12984] syz.5.2571: attempt to access beyond end of device
[  242.179802][T12984] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128
[  242.207287][T12984] syz.5.2571: attempt to access beyond end of device
[  242.207287][T12984] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128
[  242.310531][T13024] FAULT_INJECTION: forcing a failure.
[  242.310531][T13024] name failslab, interval 1, probability 0, space 0, times 0
[  242.323319][T13024] CPU: 0 UID: 0 PID: 13024 Comm: syz.5.2584 Tainted: G        W           6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  242.323357][T13024] Tainted: [W]=WARN
[  242.323411][T13024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  242.323425][T13024] Call Trace:
[  242.323487][T13024]  <TASK>
[  242.323495][T13024]  __dump_stack+0x1d/0x30
[  242.323518][T13024]  dump_stack_lvl+0xe8/0x140
[  242.323538][T13024]  dump_stack+0x15/0x1b
[  242.323554][T13024]  should_fail_ex+0x265/0x280
[  242.323641][T13024]  should_failslab+0x8c/0xb0
[  242.323668][T13024]  kmem_cache_alloc_noprof+0x50/0x310
[  242.323732][T13024]  ? audit_log_start+0x365/0x6c0
[  242.323823][T13024]  audit_log_start+0x365/0x6c0
[  242.323928][T13024]  audit_seccomp+0x48/0x100
[  242.323961][T13024]  ? __seccomp_filter+0x68c/0x10d0
[  242.323987][T13024]  __seccomp_filter+0x69d/0x10d0
[  242.324010][T13024]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  242.324060][T13024]  ? vfs_write+0x75e/0x8e0
[  242.324100][T13024]  __secure_computing+0x82/0x150
[  242.324129][T13024]  syscall_trace_enter+0xcf/0x1e0
[  242.324156][T13024]  do_syscall_64+0xac/0x200
[  242.324231][T13024]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  242.324259][T13024]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  242.324352][T13024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.324380][T13024] RIP: 0033:0x7f01ca86ebe9
[  242.324397][T13024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.324415][T13024] RSP: 002b:00007f01c92d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  242.324433][T13024] RAX: ffffffffffffffda RBX: 00007f01caa95fa0 RCX: 00007f01ca86ebe9
[  242.324445][T13024] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000006
[  242.324466][T13024] RBP: 00007f01c92d7090 R08: 0000000000000000 R09: 0000000000000000
[  242.324479][T13024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.324491][T13024] R13: 00007f01caa96038 R14: 00007f01caa95fa0 R15: 00007ffdc1d884d8
[  242.324513][T13024]  </TASK>
[  242.642374][T13030] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  242.786927][T13030] Falling back ldisc for ttyS3.
[  243.047295][T13056] loop3: detected capacity change from 0 to 512
[  243.058787][T13056] EXT4-fs (loop3): too many log groups per flexible block group
[  243.066744][T13056] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  243.088303][T13056] EXT4-fs (loop3): mount failed
[  243.165988][T13062] netlink: 420 bytes leftover after parsing attributes in process `syz.3.2592'.
[  243.665877][T13078] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  243.685398][T13070] capability: warning: `syz.3.2596' uses 32-bit capabilities (legacy support in use)
[  243.806964][T13078] Falling back ldisc for ttyS3.
[  243.829319][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2604'.
[  243.981524][T13100] binfmt_misc: register: failed to install interpreter file ./file0
[  244.442003][T13118] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  244.545259][T13118] Falling back ldisc for ttyS3.
[  244.676324][T13134] loop5: detected capacity change from 0 to 512
[  244.688222][T13134] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  244.694616][T13138] loop3: detected capacity change from 0 to 128
[  244.713207][T13134] EXT4-fs (loop5): 1 truncate cleaned up
[  244.737794][T13134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.832014][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2624'.
[  244.864337][T13134] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  244.880758][T13145] FAULT_INJECTION: forcing a failure.
[  244.880758][T13145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  244.893955][T13145] CPU: 1 UID: 0 PID: 13145 Comm: syz.4.2625 Tainted: G        W           6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  244.894048][T13145] Tainted: [W]=WARN
[  244.894055][T13145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  244.894067][T13145] Call Trace:
[  244.894072][T13145]  <TASK>
[  244.894078][T13145]  __dump_stack+0x1d/0x30
[  244.894101][T13145]  dump_stack_lvl+0xe8/0x140
[  244.894124][T13145]  dump_stack+0x15/0x1b
[  244.894214][T13145]  should_fail_ex+0x265/0x280
[  244.894251][T13145]  should_fail+0xb/0x20
[  244.894297][T13145]  should_fail_usercopy+0x1a/0x20
[  244.894314][T13145]  _copy_from_user+0x1c/0xb0
[  244.894341][T13145]  ___sys_sendmsg+0xc1/0x1d0
[  244.894396][T13145]  __x64_sys_sendmsg+0xd4/0x160
[  244.894495][T13145]  x64_sys_call+0x191e/0x2ff0
[  244.894523][T13145]  do_syscall_64+0xd2/0x200
[  244.894548][T13145]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  244.894610][T13145]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  244.894636][T13145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.894656][T13145] RIP: 0033:0x7f58c08eebe9
[  244.894670][T13145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.894691][T13145] RSP: 002b:00007f58bf34f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  244.894712][T13145] RAX: ffffffffffffffda RBX: 00007f58c0b15fa0 RCX: 00007f58c08eebe9
[  244.894725][T13145] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  244.894743][T13145] RBP: 00007f58bf34f090 R08: 0000000000000000 R09: 0000000000000000
[  244.894753][T13145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.894763][T13145] R13: 00007f58c0b16038 R14: 00007f58c0b15fa0 R15: 00007ffc24bd9a48
[  244.894784][T13145]  </TASK>
[  245.092021][T13138] lo speed is unknown, defaulting to 1000
[  245.222717][T13138] lo speed is unknown, defaulting to 1000
[  245.237693][T13134] Falling back ldisc for ttyS3.
[  245.346387][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.561446][T13160] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  245.588828][T13164] loop5: detected capacity change from 0 to 1024
[  245.596210][T13164] EXT4-fs: Ignoring removed nobh option
[  245.601955][T13164] EXT4-fs: inline encryption not supported
[  245.627876][T13160] Falling back ldisc for ttyS3.
[  245.651064][T13164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.807863][   T29] kauditd_printk_skb: 307 callbacks suppressed
[  245.807914][   T29] audit: type=1326 audit(1755695911.381:9419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  245.837860][   T29] audit: type=1326 audit(1755695911.381:9420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  245.881028][   T29] audit: type=1326 audit(1755695911.451:9421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  245.904453][   T29] audit: type=1326 audit(1755695911.451:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  245.928087][   T29] audit: type=1326 audit(1755695911.451:9423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  245.951608][   T29] audit: type=1326 audit(1755695911.451:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  245.975151][   T29] audit: type=1326 audit(1755695911.451:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58c08f0b07 code=0x7ffc0000
[  245.998711][   T29] audit: type=1326 audit(1755695911.451:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f58c08f0a7c code=0x7ffc0000
[  246.022268][   T29] audit: type=1326 audit(1755695911.451:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f58c08f09b4 code=0x7ffc0000
[  246.046252][   T29] audit: type=1326 audit(1755695911.451:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.4.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f58c08f09b4 code=0x7ffc0000
[  246.620476][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.753499][T13210] loop3: detected capacity change from 0 to 1024
[  246.903002][T13218] loop5: detected capacity change from 0 to 512
[  246.921715][T13215] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  246.930113][T13210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  246.942684][T13210] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.973656][T13218] EXT4-fs (loop5): too many log groups per flexible block group
[  246.981454][T13218] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  246.992855][T13210] netlink: 'syz.3.2643': attribute type 10 has an invalid length.
[  247.010961][T13218] EXT4-fs (loop5): mount failed
[  247.026016][T13210] team0: Port device dummy0 added
[  247.047387][T13210] netlink: 'syz.3.2643': attribute type 1 has an invalid length.
[  247.089227][T13224] Falling back ldisc for ttyS3.
[  247.153977][T13227] netlink: 420 bytes leftover after parsing attributes in process `syz.5.2647'.
[  247.167124][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  247.242749][T13226] lo speed is unknown, defaulting to 1000
[  247.375741][T13226] lo speed is unknown, defaulting to 1000
[  247.930085][T13264] loop3: detected capacity change from 0 to 512
[  247.937717][T13264] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  247.952056][T13264] EXT4-fs (loop3): 1 truncate cleaned up
[  247.958372][T13264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.975891][T13264] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  248.089739][T13267] Falling back ldisc for ttyS3.
[  248.131948][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.279840][T13281] loop3: detected capacity change from 0 to 1024
[  248.287392][T13281] EXT4-fs: Ignoring removed orlov option
[  248.292068][T13279] lo speed is unknown, defaulting to 1000
[  248.305073][T13281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.340965][T13279] lo speed is unknown, defaulting to 1000
[  248.844091][T13304] loop5: detected capacity change from 0 to 1024
[  248.852726][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.859143][T13304] EXT4-fs: Ignoring removed nobh option
[  248.867319][T13304] EXT4-fs: inline encryption not supported
[  248.899136][T13304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.060740][T13317] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2679'.
[  249.231521][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.266650][T13323] siw: device registration error -23
[  249.299341][T13329] loop5: detected capacity change from 0 to 256
[  249.336790][T13329] binfmt_misc: register: failed to install interpreter file ./file0
[  249.404249][T13337] loop3: detected capacity change from 0 to 128
[  249.423531][T13338] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  249.588279][T13337] bio_check_eod: 190 callbacks suppressed
[  249.588293][T13337] syz.3.2686: attempt to access beyond end of device
[  249.588293][T13337] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128
[  249.600496][T13342] Falling back ldisc for ttyS3.
[  249.630988][T13337] syz.3.2686: attempt to access beyond end of device
[  249.630988][T13337] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[  249.683577][T13337] syz.3.2686: attempt to access beyond end of device
[  249.683577][T13337] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[  249.723496][T13337] syz.3.2686: attempt to access beyond end of device
[  249.723496][T13337] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  249.740751][T13337] syz.3.2686: attempt to access beyond end of device
[  249.740751][T13337] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  249.755055][T13337] syz.3.2686: attempt to access beyond end of device
[  249.755055][T13337] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[  249.769985][T13337] syz.3.2686: attempt to access beyond end of device
[  249.769985][T13337] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[  249.794640][T13337] syz.3.2686: attempt to access beyond end of device
[  249.794640][T13337] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[  249.808606][T13337] syz.3.2686: attempt to access beyond end of device
[  249.808606][T13337] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[  249.822483][T13337] syz.3.2686: attempt to access beyond end of device
[  249.822483][T13337] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[  249.887121][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2690'.
[  249.973748][T13354] siw: device registration error -23
[  250.099522][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2693'.
[  250.277804][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'.
[  250.514747][T13375] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2701'.
[  250.562507][T13386] loop5: detected capacity change from 0 to 512
[  250.571119][T13386] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  250.599868][T13386] EXT4-fs (loop5): 1 truncate cleaned up
[  250.630660][T13386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.647326][T13388] Falling back ldisc for ttyS3.
[  250.692446][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2706'.
[  250.861695][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2709'.
[  250.946710][T13400] lo speed is unknown, defaulting to 1000
[  250.959929][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2712'.
[  251.004670][T13400] lo speed is unknown, defaulting to 1000
[  251.249299][T13421] netlink: 412 bytes leftover after parsing attributes in process `syz.0.2715'.
[  251.347426][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.416487][   T29] kauditd_printk_skb: 198 callbacks suppressed
[  251.416504][   T29] audit: type=1326 audit(1755695916.998:9627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.5.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  251.446232][   T29] audit: type=1326 audit(1755695916.998:9628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.5.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01ca86d550 code=0x7ffc0000
[  251.483330][   T29] audit: type=1326 audit(1755695917.058:9629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.5.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  251.506865][   T29] audit: type=1326 audit(1755695917.058:9630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.5.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  251.530428][   T29] audit: type=1326 audit(1755695917.058:9631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.5.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  251.553956][   T29] audit: type=1326 audit(1755695917.058:9632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.5.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  251.577542][   T29] audit: type=1326 audit(1755695917.058:9633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.5.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  251.601073][   T29] audit: type=1326 audit(1755695917.068:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.5.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  251.677226][   T29] audit: type=1326 audit(1755695917.208:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.5.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  251.700813][   T29] audit: type=1326 audit(1755695917.208:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.5.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ca86ebe9 code=0x7ffc0000
[  251.730819][T13432] Falling back ldisc for ttyS3.
[  251.859225][T13438] loop3: detected capacity change from 0 to 1024
[  251.888885][T13438] EXT4-fs: Ignoring removed nobh option
[  251.894608][T13438] EXT4-fs: inline encryption not supported
[  251.933594][T13438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.952931][T13443] loop5: detected capacity change from 0 to 128
[  252.171539][T13438] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2722: Allocating blocks 497-513 which overlap fs metadata
[  252.185985][T13438] EXT4-fs (loop3): pa ffff888106dc3c40: logic 256, phys. 385, len 8
[  252.191792][T13443] lo speed is unknown, defaulting to 1000
[  252.194255][T13438] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  252.281137][T13443] lo speed is unknown, defaulting to 1000
[  252.327554][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.485293][T13462] loop3: detected capacity change from 0 to 512
[  252.511156][T13462] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  252.533623][T13463] __nla_validate_parse: 1 callbacks suppressed
[  252.533644][T13463] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2730'.
[  252.544972][T13462] EXT4-fs (loop3): 1 truncate cleaned up
[  252.545397][T13462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.589379][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2729'.
[  252.803512][T13475] Falling back ldisc for ttyS3.
[  252.915991][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2735'.
[  253.279448][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.957538][T13491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  254.103125][T13534] loop3: detected capacity change from 0 to 1024
[  254.110246][T13534] EXT4-fs: Ignoring removed orlov option
[  254.130590][T13534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.362991][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.395985][T13544] loop3: detected capacity change from 0 to 1024
[  254.405625][T13544] EXT4-fs: Ignoring removed orlov option
[  254.426595][T13544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.503046][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.529304][T13553] loop5: detected capacity change from 0 to 256
[  254.542981][T13553] binfmt_misc: register: failed to install interpreter file ./file0
[  254.999286][T13576] loop3: detected capacity change from 0 to 1024
[  255.007149][T13576] EXT4-fs: Ignoring removed orlov option
[  255.018695][T13576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.288821][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.547271][T13596] loop3: detected capacity change from 0 to 512
[  255.563897][T13596] EXT4-fs (loop3): too many log groups per flexible block group
[  255.571798][T13596] EXT4-fs (loop3): failed to initialize mballoc (-12)
[  255.578922][T13596] EXT4-fs (loop3): mount failed
[  255.621882][T13601] loop5: detected capacity change from 0 to 1024
[  255.630325][T13601] EXT4-fs: Ignoring removed orlov option
[  255.638087][T13601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.652926][T13603] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2769'.
[  255.729944][T13564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  255.903031][T13620] loop3: detected capacity change from 0 to 1024
[  255.910523][T13622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2775'.
[  255.928274][T13620] EXT4-fs: Ignoring removed orlov option
[  255.944750][T13620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.984955][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.122804][T13640] loop5: detected capacity change from 0 to 512
[  256.130257][T13640] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  256.166572][T13640] EXT4-fs (loop5): 1 truncate cleaned up
[  256.173673][T13640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.207411][T13640] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  256.337953][T13655] Falling back ldisc for ttyS3.
[  256.367006][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.394995][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.409879][T13660] netlink: 'syz.5.2786': attribute type 4 has an invalid length.
[  256.422507][ T3366] lo speed is unknown, defaulting to 1000
[  256.428295][ T3366] syz0: Port: 1 Link DOWN
[  256.431359][T13662] loop3: detected capacity change from 0 to 1024
[  256.434522][T13660] netlink: 'syz.5.2786': attribute type 4 has an invalid length.
[  256.441033][T13662] EXT4-fs: Ignoring removed nobh option
[  256.452353][T13662] EXT4-fs: inline encryption not supported
[  256.454861][ T3366] lo speed is unknown, defaulting to 1000
[  256.464099][ T3366] syz0: Port: 1 Link ACTIVE
[  256.475333][T13662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.477225][T13660] IPv6: sit1: Disabled Multicast RS
[  256.497819][   T29] kauditd_printk_skb: 169 callbacks suppressed
[  256.497832][   T29] audit: type=1400 audit(1755695922.076:9806): avc:  denied  { mounton } for  pid=13659 comm="syz.5.2786" path="/530/file0" dev="tmpfs" ino=2878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  256.527102][T13660] 9pnet_fd: Insufficient options for proto=fd
[  256.620151][T13662] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2787: Allocating blocks 497-513 which overlap fs metadata
[  256.634545][T13662] EXT4-fs (loop3): pa ffff888106e2f4d0: logic 256, phys. 385, len 8
[  256.642587][T13662] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  256.706022][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.023585][T13647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  257.041196][   T29] audit: type=1326 audit(1755695922.616:9807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f19aef709b4 code=0x7ffc0000
[  257.064740][   T29] audit: type=1326 audit(1755695922.616:9808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f19aef709b4 code=0x7ffc0000
[  257.088325][   T29] audit: type=1326 audit(1755695922.616:9809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f19aef6d84a code=0x7ffc0000
[  257.111848][   T29] audit: type=1326 audit(1755695922.616:9810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  257.135478][   T29] audit: type=1326 audit(1755695922.616:9811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  257.239322][T13689] loop5: detected capacity change from 0 to 1024
[  257.293994][T13689] EXT4-fs: Ignoring removed orlov option
[  257.328073][T13694] siw: device registration error -23
[  257.336929][T13689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.365087][T13700] loop3: detected capacity change from 0 to 1024
[  257.372664][T13700] EXT4-fs: Ignoring removed orlov option
[  257.383386][T13700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.581872][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.614145][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.615956][T13715] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  257.914586][T13733] Falling back ldisc for ttyS3.
[  257.960059][T13744] netlink: 356 bytes leftover after parsing attributes in process `syz.1.2813'.
[  258.664065][T13772] loop5: detected capacity change from 0 to 1024
[  258.685201][T13772] EXT4-fs: Ignoring removed nobh option
[  258.690856][T13772] EXT4-fs: inline encryption not supported
[  258.736948][T13772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.046327][T13778] siw: device registration error -23
[  259.094775][T13789] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  259.123101][   T29] audit: type=1326 audit(1755695924.694:9812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13792 comm="syz.4.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  259.146689][   T29] audit: type=1326 audit(1755695924.694:9813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13792 comm="syz.4.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  259.170101][   T29] audit: type=1326 audit(1755695924.694:9814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13792 comm="syz.4.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  259.193734][   T29] audit: type=1326 audit(1755695924.694:9815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13792 comm="syz.4.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58c08eebe9 code=0x7ffc0000
[  259.266850][T13789] Falling back ldisc for ttyS3.
[  259.777099][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.128544][T13837] loop5: detected capacity change from 0 to 512
[  260.166977][T13837] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  260.216106][T13837] EXT4-fs (loop5): 1 truncate cleaned up
[  260.222313][T13837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.231486][T13845] loop3: detected capacity change from 0 to 1024
[  260.252923][T13845] EXT4-fs: Ignoring removed nobh option
[  260.258597][T13845] EXT4-fs: inline encryption not supported
[  260.415291][T13837] Falling back ldisc for ttyS3.
[  260.434693][T13845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.579045][T13851] binfmt_misc: register: failed to install interpreter file ./file0
[  260.599653][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.755497][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.957299][T13881] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  261.115678][T13881] Falling back ldisc for ttyS3.
[  261.533354][T13913] vlan2: entered allmulticast mode
[  261.538636][T13913] bridge_slave_0: entered allmulticast mode
[  261.638143][ T4832] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.667654][ T4832] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.689023][T13925] loop5: detected capacity change from 0 to 1024
[  261.697990][T13925] EXT4-fs: Ignoring removed orlov option
[  261.707044][T13904] lo speed is unknown, defaulting to 1000
[  261.717795][ T4832] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.736522][T13925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.760920][T13904] lo speed is unknown, defaulting to 1000
[  261.791942][T13928] siw: device registration error -23
[  261.816944][ T4832] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.913790][T13904] chnl_net:caif_netlink_parms(): no params data found
[  261.945959][ T4832] bridge_slave_1: left allmulticast mode
[  261.951740][ T4832] bridge_slave_1: left promiscuous mode
[  261.957445][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.066067][ T4832] bridge_slave_0: left allmulticast mode
[  262.071862][ T4832] bridge_slave_0: left promiscuous mode
[  262.077607][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.238593][ T4832] team0: Port device geneve1 removed
[  262.314971][T13949] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  262.329130][ T4832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.369014][ T4832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.407787][ T4832] bond0 (unregistering): Released all slaves
[  262.437449][ T4832] bond1 (unregistering): Released all slaves
[  262.466688][ T4832] bond2 (unregistering): Released all slaves
[  262.547418][ T4832] IPVS: stopping master sync thread 12432 ...
[  262.573843][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.588084][   T29] kauditd_printk_skb: 105 callbacks suppressed
[  262.588102][   T29] audit: type=1326 audit(1755695928.163:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  262.617977][   T29] audit: type=1326 audit(1755695928.163:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  262.643063][   T29] audit: type=1326 audit(1755695928.163:9923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  262.666410][   T29] audit: type=1326 audit(1755695928.163:9924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  262.676289][T13951] Falling back ldisc for ttyS3.
[  262.689930][   T29] audit: type=1326 audit(1755695928.173:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  262.718313][   T29] audit: type=1326 audit(1755695928.173:9926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aef6ebe9 code=0x7ffc0000
[  262.741870][   T29] audit: type=1326 audit(1755695928.183:9927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19aef70b07 code=0x7ffc0000
[  262.765290][   T29] audit: type=1326 audit(1755695928.183:9928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f19aef70a7c code=0x7ffc0000
[  262.788700][   T29] audit: type=1326 audit(1755695928.183:9929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f19aef709b4 code=0x7ffc0000
[  262.812202][   T29] audit: type=1326 audit(1755695928.183:9930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f19aef709b4 code=0x7ffc0000
[  262.852048][ T4832] hsr_slave_0: left promiscuous mode
[  262.877198][ T4832] hsr_slave_1: left promiscuous mode
[  262.883145][ T4832] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.890738][ T4832] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.898660][ T4832] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.906149][ T4832] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.918312][ T4832] veth0_macvtap: left allmulticast mode
[  262.924102][ T4832] veth1_macvtap: left promiscuous mode
[  262.929660][ T4832] veth0_macvtap: left promiscuous mode
[  262.935287][ T4832] veth1_vlan: left promiscuous mode
[  262.935322][ T4832] veth0_vlan: left promiscuous mode
[  262.984052][T13966] serio: Serial port ptm0
[  263.045298][ T4832] team0 (unregistering): Port device team_slave_1 removed
[  263.070296][ T4832] team0 (unregistering): Port device team_slave_0 removed
[  263.137796][T13966] netlink: 'syz.5.2881': attribute type 1 has an invalid length.
[  263.149423][ T4832] team0 (unregistering): Port device dummy0 removed
[  263.177740][ T4832] lo (unregistering): left allmulticast mode
[  263.202724][T13961] vlan2: entered allmulticast mode
[  263.228791][T13904] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.235994][T13904] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.253563][T13904] bridge_slave_0: entered allmulticast mode
[  263.260531][T13904] bridge_slave_0: entered promiscuous mode
[  263.279802][T13966] bond0: entered promiscuous mode
[  263.285290][T13966] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.298559][T13965] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.306081][T13965] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  263.316397][T13965] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  263.329278][T13965] bond0: (slave ip6gre1): making interface the new active one
[  263.336921][T13965] ip6gre1: entered promiscuous mode
[  263.344552][T13965] bond0: (slave ip6gre1): Enslaving as an active interface with an up link
[  263.354982][T13904] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.362151][T13904] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.371458][T13904] bridge_slave_1: entered allmulticast mode
[  263.378361][T13904] bridge_slave_1: entered promiscuous mode
[  263.407245][T13904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.418287][T13904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.448938][T13904] team0: Port device team_slave_0 added
[  263.456083][T13904] team0: Port device team_slave_1 added
[  263.475291][T13904] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.482332][T13904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.508455][T13904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.520188][T13904] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.527317][T13904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.553259][T13904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.598511][T13904] hsr_slave_0: entered promiscuous mode
[  263.617224][T13904] hsr_slave_1: entered promiscuous mode
[  263.623410][T13904] debugfs: 'hsr0' already exists in 'hsr'
[  263.629324][T13904] Cannot create hsr debugfs directory
[  263.636955][ T4832] IPVS: stop unused estimator thread 0...
[  263.971563][T13904] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  264.001764][T13904] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  264.025390][T13904] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  264.045816][T13904] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  264.212360][T13904] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.244789][T13904] 8021q: adding VLAN 0 to HW filter on device team0
[  264.270958][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.278153][ T4878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.287945][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.295099][ T4878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.340253][T13904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  264.362868][T14016] loop5: detected capacity change from 0 to 512
[  264.405819][T14016] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  264.450497][T14016] EXT4-fs (loop5): 1 truncate cleaned up
[  264.456676][T14016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.692915][T13904] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.727436][T14023] Falling back ldisc for ttyS3.
[  264.760049][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.822001][T14028] loop5: detected capacity change from 0 to 1024
[  264.844210][T14028] EXT4-fs: Ignoring removed nobh option
[  264.849889][T14028] EXT4-fs: inline encryption not supported
[  264.929016][T14028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.929823][T13904] veth0_vlan: entered promiscuous mode
[  264.970050][T13904] veth1_vlan: entered promiscuous mode
[  264.997383][T13904] veth0_macvtap: entered promiscuous mode
[  265.006395][T13904] veth1_macvtap: entered promiscuous mode
[  265.020257][T13904] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.030477][T13904] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.091552][ T4878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.130264][ T4878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.148508][ T4878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.168182][ T4878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.188162][T14028] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2898: Allocating blocks 497-513 which overlap fs metadata
[  265.202879][T14028] EXT4-fs (loop5): pa ffff888106e2f4d0: logic 256, phys. 385, len 8
[  265.210949][T14028] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  265.272782][T14042] siw: device registration error -23
[  265.299399][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.386371][T14048] loop3: detected capacity change from 0 to 512
[  265.407574][T14048] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  265.441535][T14048] EXT4-fs (loop3): 1 truncate cleaned up
[  265.447704][T14048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.543804][T14053] loop5: detected capacity change from 0 to 1024
[  265.596480][T14053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.659362][T14048] Falling back ldisc for ttyS3.
[  265.761077][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.774679][ T3408] IPVS: starting estimator thread 0...
[  265.877960][T14058] IPVS: using max 2352 ests per chain, 117600 per kthread
[  265.901477][T13904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.208456][T14075] siw: device registration error -23
[  266.221399][T14073] loop5: detected capacity change from 0 to 1024
[  266.264459][T14073] EXT4-fs: Ignoring removed orlov option
[  266.291757][T14073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.338591][T14084] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  266.585817][T14087] Falling back ldisc for ttyS3.
[  267.057805][T14076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  267.144184][T14106] loop3: detected capacity change from 0 to 512
[  267.155065][T14106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  267.170515][T14106] EXT4-fs (loop3): 1 truncate cleaned up
[  267.186429][T14106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.226558][T14106] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  267.278750][T14106] Falling back ldisc for ttyS3.
[  267.373726][T13904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.411680][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.013712][T14148] siw: device registration error -23
[  268.107209][T14154] loop3: detected capacity change from 0 to 1024
[  268.117233][T14154] EXT4-fs: Ignoring removed orlov option
[  268.141145][T14154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.350198][T14170] netlink: 356 bytes leftover after parsing attributes in process `syz.1.2941'.
[  268.609669][T14183] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  268.718729][T13904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.732459][T14189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2946'.
[  268.741842][T14183] Falling back ldisc for ttyS3.
[  268.787372][T14193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.796999][T14193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.084267][ T4880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  269.094679][ T4880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.160754][ T4880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  269.171117][ T4880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.234189][   T29] kauditd_printk_skb: 60 callbacks suppressed
[  269.234225][   T29] audit: type=1326 audit(1755695934.799:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f155ebe9 code=0x7ffc0000
[  269.266642][   T29] audit: type=1326 audit(1755695934.799:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f155ebe9 code=0x7ffc0000
[  269.290366][   T29] audit: type=1326 audit(1755695934.799:9993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8f155d550 code=0x7ffc0000
[  269.316752][   T29] audit: type=1326 audit(1755695934.839:9994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f155ebe9 code=0x7ffc0000
[  269.323942][T14222] loop5: detected capacity change from 0 to 512
[  269.340356][   T29] audit: type=1326 audit(1755695934.839:9995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8f155ebe9 code=0x7ffc0000
[  269.370041][   T29] audit: type=1326 audit(1755695934.839:9996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f155ebe9 code=0x7ffc0000
[  269.393573][   T29] audit: type=1326 audit(1755695934.839:9997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f155ebe9 code=0x7ffc0000
[  269.417108][   T29] audit: type=1326 audit(1755695934.839:9998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f155ebe9 code=0x7ffc0000
[  269.440757][   T29] audit: type=1326 audit(1755695934.839:9999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f155ebe9 code=0x7ffc0000
[  269.464474][   T29] audit: type=1326 audit(1755695934.839:10000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f155ebe9 code=0x7ffc0000
[  269.493123][ T4880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  269.503465][ T4880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.515909][T14222] EXT4-fs (loop5): too many log groups per flexible block group
[  269.523720][T14222] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  269.540064][T14222] EXT4-fs (loop5): mount failed
[  269.548590][T14198] lo speed is unknown, defaulting to 1000
[  269.575272][ T4880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  269.585699][ T4880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.730151][ T4880] batadv1: left allmulticast mode
[  269.730188][ T4880] batadv1: left promiscuous mode
[  269.730270][ T4880] bridge0: port 3(batadv1) entered disabled state
[  269.740793][T14231] loop3: detected capacity change from 0 to 1024
[  269.762439][T14231] EXT4-fs: Ignoring removed orlov option
[  269.768944][ T4880] bridge_slave_1: left allmulticast mode
[  269.774647][ T4880] bridge_slave_1: left promiscuous mode
[  269.780572][ T4880] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.793359][T14231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.807086][ T4880] bridge_slave_0: left allmulticast mode
[  269.813068][ T4880] bridge_slave_0: left promiscuous mode
[  269.819065][ T4880] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.132861][ T4880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.145084][ T4880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.156878][ T4880] bond0 (unregistering): Released all slaves
[  270.168726][T14198] lo speed is unknown, defaulting to 1000
[  270.193026][ T4880] tipc: Left network mode
[  270.254123][ T4880] hsr_slave_0: left promiscuous mode
[  270.259931][ T4880] hsr_slave_1: left promiscuous mode
[  270.268033][T13904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.277210][ T4880] veth1_macvtap: left promiscuous mode
[  270.284343][ T4880] veth0_macvtap: left promiscuous mode
[  270.290489][ T4880] veth1_vlan: left promiscuous mode
[  270.295783][ T4880] veth0_vlan: left promiscuous mode
[  270.404917][ T4880] team0 (unregistering): Port device team_slave_1 removed
[  270.415238][ T4880] team0 (unregistering): Port device team_slave_0 removed
[  270.435456][  T145] smc: removing ib device syz1
[  270.453333][ T4880] lo (unregistering): left allmulticast mode
[  270.478840][ T3395] syz1: Port: 1 Link DOWN
[  270.484034][ T1031] lo speed is unknown, defaulting to 1000
[  270.489841][ T1031] infiniband syz2: ib_query_port failed (-19)
[  270.579349][T14198] chnl_net:caif_netlink_parms(): no params data found
[  270.706207][T14198] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.707320][T14268] loop3: detected capacity change from 0 to 128
[  270.713462][T14198] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.721715][T14198] bridge_slave_0: entered allmulticast mode
[  270.734012][T14198] bridge_slave_0: entered promiscuous mode
[  270.743909][ T4880] IPVS: stop unused estimator thread 0...
[  270.749855][T14198] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.757002][T14198] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.810101][T14198] bridge_slave_1: entered allmulticast mode
[  270.817546][T14198] bridge_slave_1: entered promiscuous mode
[  270.852799][T14198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.867090][T14198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.901294][T14273] loop5: detected capacity change from 0 to 128
[  270.931758][T14198] team0: Port device team_slave_0 added
[  270.949502][T14198] team0: Port device team_slave_1 added
[  270.972593][T14276] bio_check_eod: 110 callbacks suppressed
[  270.972611][T14276] syz.5.2971: attempt to access beyond end of device
[  270.972611][T14276] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128
[  270.999948][T14198] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.006979][T14198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.012261][T14276] syz.5.2971: attempt to access beyond end of device
[  271.012261][T14276] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[  271.032999][T14198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.061086][T14276] syz.5.2971: attempt to access beyond end of device
[  271.061086][T14276] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[  271.068342][T14198] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.081535][T14198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.107483][T14198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.124967][T14276] syz.5.2971: attempt to access beyond end of device
[  271.124967][T14276] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128
[  271.142167][T14274] syz.3.2970: attempt to access beyond end of device
[  271.142167][T14274] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128
[  271.157097][T14274] syz.3.2970: attempt to access beyond end of device
[  271.157097][T14274] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[  271.172635][T14276] syz.5.2971: attempt to access beyond end of device
[  271.172635][T14276] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128
[  271.186746][T14274] syz.3.2970: attempt to access beyond end of device
[  271.186746][T14274] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[  271.198730][T14198] hsr_slave_0: entered promiscuous mode
[  271.208302][T14274] syz.3.2970: attempt to access beyond end of device
[  271.208302][T14274] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  271.216963][T14198] hsr_slave_1: entered promiscuous mode
[  271.230255][T14274] syz.3.2970: attempt to access beyond end of device
[  271.230255][T14274] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  271.245496][T14198] debugfs: 'hsr0' already exists in 'hsr'
[  271.251320][T14198] Cannot create hsr debugfs directory
[  271.314340][T14283] loop5: detected capacity change from 0 to 1024
[  271.327701][T14283] EXT4-fs: Ignoring removed orlov option
[  271.345093][T14283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.498956][T14263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  271.598714][T14299] loop3: detected capacity change from 0 to 512
[  271.637070][T14299] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2978: Failed to acquire dquot type 1
[  271.659387][T14299] EXT4-fs (loop3): 1 truncate cleaned up
[  271.676647][T14299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.689521][T14198] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  271.700113][T14198] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  271.710270][T14198] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  271.717167][T14299] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.729901][T14198] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  271.763290][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.808627][T14299] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2978'.
[  271.819942][T14198] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.842644][T14198] 8021q: adding VLAN 0 to HW filter on device team0
[  271.896082][ T4880] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.903220][ T4880] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.955290][ T4827] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.962489][ T4827] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.050847][T13904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.084978][T14321] loop3: detected capacity change from 0 to 128
[  272.203059][T14198] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.692753][T14198] veth0_vlan: entered promiscuous mode
[  272.706586][T14198] veth1_vlan: entered promiscuous mode
[  272.758174][T14198] veth0_macvtap: entered promiscuous mode
[  272.771429][T14330] ==================================================================
[  272.779545][T14330] BUG: KCSAN: data-race in touch_atime / touch_atime
[  272.786253][T14330] 
[  272.788597][T14330] write to 0xffff8881215c3540 of 4 bytes by task 14327 on cpu 0:
[  272.796330][T14330]  touch_atime+0x1e8/0x340
[  272.800776][T14330]  shmem_file_read_iter+0x477/0x540
[  272.805992][T14330]  copy_splice_read+0x3c1/0x5f0
[  272.810891][T14330]  splice_direct_to_actor+0x290/0x680
[  272.816277][T14330]  do_splice_direct+0xda/0x150
[  272.821061][T14330]  do_sendfile+0x380/0x650
[  272.825511][T14330]  __x64_sys_sendfile64+0x105/0x150
[  272.830714][T14330]  x64_sys_call+0x2bb0/0x2ff0
[  272.835400][T14330]  do_syscall_64+0xd2/0x200
[  272.839926][T14330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.845844][T14330] 
[  272.848188][T14330] read to 0xffff8881215c3540 of 4 bytes by task 14330 on cpu 1:
[  272.855832][T14330]  touch_atime+0x194/0x340
[  272.860294][T14330]  shmem_file_read_iter+0x477/0x540
[  272.865529][T14330]  copy_splice_read+0x3c1/0x5f0
[  272.870421][T14330]  splice_direct_to_actor+0x290/0x680
[  272.875804][T14330]  do_splice_direct+0xda/0x150
[  272.880568][T14330]  do_sendfile+0x380/0x650
[  272.884997][T14330]  __x64_sys_sendfile64+0x105/0x150
[  272.890206][T14330]  x64_sys_call+0x2bb0/0x2ff0
[  272.894890][T14330]  do_syscall_64+0xd2/0x200
[  272.899403][T14330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.905299][T14330] 
[  272.907620][T14330] value changed: 0x1427ef98 -> 0x14c07290
[  272.913338][T14330] 
[  272.915671][T14330] Reported by Kernel Concurrency Sanitizer on:
[  272.921829][T14330] CPU: 1 UID: 0 PID: 14330 Comm: syz.0.2984 Tainted: G        W           6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) 
[  272.935554][T14330] Tainted: [W]=WARN
[  272.939364][T14330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  272.949415][T14330] ==================================================================
[  273.023179][T14198] veth1_macvtap: entered promiscuous mode
[  273.034916][T14344] loop5: detected capacity change from 0 to 1024
[  273.060983][T14198] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.073294][T14344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.077827][T14198] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.104393][ T4880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.127271][ T4880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.150011][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.165117][ T4880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.200688][ T4880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0