last executing test programs:

4m21.267760802s ago: executing program 32 (id=70):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = io_uring_setup(0x6edd, &(0x7f0000000740)={0x0, 0x41002c1c, 0x10003, 0x1, 0x188})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
close_range(r2, 0xffffffffffffffff, 0x0)

4m18.925512937s ago: executing program 33 (id=130):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0x20}], 0x1)

1m43.000640698s ago: executing program 34 (id=5347):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000000c0)=r1}, 0x20)

24.07956328s ago: executing program 3 (id=8515):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$kcm(0x23, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x8}, 0x0)

24.032956521s ago: executing program 7 (id=8517):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x4, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0xfc}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e)

24.032543731s ago: executing program 3 (id=8519):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb143, 0x1000, 0x1, 0x196})
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r2, 0x4)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0)
close_range(r1, r2, 0x0)

23.903739933s ago: executing program 7 (id=8520):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd, 0xfffc}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0})

23.903413653s ago: executing program 3 (id=8521):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}}, 0x24000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

23.861928704s ago: executing program 7 (id=8522):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dd)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46040700030700000000000000020003"], 0x58)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
close(r0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

23.806835145s ago: executing program 3 (id=8524):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x3}, &(0x7f0000000340)=0x5, 0x0, 0xa, 0xff, 0x0, 0x1, 0x5c, 0x8001}}], 0x58}, 0x0)

23.806634385s ago: executing program 7 (id=8525):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_stats})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})

23.775122166s ago: executing program 7 (id=8527):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x0, 0x0, 0x0, 0x5, 0xa, 0x80}, {0x5, 0x9, 0x0, 0xffffffeffffffffa}, {0xffffffffffffffff, 0x8, 0x6, 0x20000001}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x6, 0x3, 0x0, 0x3c0}}, 0xe8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050)

23.771776946s ago: executing program 3 (id=8528):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44)

23.592048329s ago: executing program 35 (id=8530):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)

23.486027541s ago: executing program 7 (id=8532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

23.485943651s ago: executing program 36 (id=8532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

23.467237511s ago: executing program 3 (id=8533):
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x2000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x7, 0x5}, 0x9c82e8655233bdc2, 0xf0, 0x2, 0x4, 0x0, 0x93d, 0x7ff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

22.016846358s ago: executing program 37 (id=8533):
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x2000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x7, 0x5}, 0x9c82e8655233bdc2, 0xf0, 0x2, 0x4, 0x0, 0x93d, 0x7ff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

8.067177313s ago: executing program 8 (id=8960):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000480)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0})
io_uring_enter(r2, 0x3498, 0x969, 0x0, 0x0, 0x0)
dup3(r2, r0, 0x80000)

7.916708515s ago: executing program 8 (id=8963):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f00000003c0)={[{@block_validity}, {@nobarrier}, {@jqfmt_vfsv0}]}, 0xfb, 0x477, &(0x7f0000000880)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)

7.785389228s ago: executing program 8 (id=8967):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x8, 0x20000}, 0x20)

7.64291008s ago: executing program 2 (id=8970):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2)
setresgid(0x0, 0xee00, 0x0)
semget$private(0x0, 0x4, 0x29b)

7.579288291s ago: executing program 8 (id=8974):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x803, 0x1)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0)

7.578931661s ago: executing program 2 (id=8975):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
statfs(0x0, &(0x7f0000000140))
sched_setaffinity(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000130a0101"], 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000000)

7.395353215s ago: executing program 8 (id=8977):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
socket$inet6(0xa, 0x1, 0x8010000000000084)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
fallocate(r2, 0x0, 0x11, 0x9)

7.394845855s ago: executing program 2 (id=8980):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x1, 0x0)
fcntl$setpipe(r1, 0x408, 0x7)

6.55367202s ago: executing program 6 (id=8989):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0)

6.531332451s ago: executing program 6 (id=8990):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @rand_addr=' \x01\x00', @loopback}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)

6.530828861s ago: executing program 2 (id=9001):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0x9)

6.335614194s ago: executing program 6 (id=8991):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2)
setresgid(0x0, 0xee00, 0x0)
semget$private(0x0, 0x4, 0x29b)

6.284994545s ago: executing program 6 (id=8992):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(r2)

6.038632759s ago: executing program 2 (id=8994):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

6.01512313s ago: executing program 6 (id=8996):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0x0, 0x2c3})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

5.844261803s ago: executing program 8 (id=8977):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
socket$inet6(0xa, 0x1, 0x8010000000000084)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT")
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
fallocate(r2, 0x0, 0x11, 0x9)

5.806811904s ago: executing program 38 (id=8977):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
socket$inet6(0xa, 0x1, 0x8010000000000084)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT")
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
fallocate(r2, 0x0, 0x11, 0x9)

5.611056227s ago: executing program 2 (id=8998):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0xe, 0x0)

5.610954437s ago: executing program 39 (id=8998):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0xe, 0x0)

5.608273617s ago: executing program 6 (id=8999):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r1, 0x0, 0x8000002b)

5.608194497s ago: executing program 40 (id=8999):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r1, 0x0, 0x8000002b)

2.909847327s ago: executing program 1 (id=9021):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

2.041425803s ago: executing program 1 (id=9030):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x200000100000011, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0)
sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000000c0)=ANY=[], 0x34}], 0x1}, 0x0)

1.950376364s ago: executing program 4 (id=8997):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)

1.902900925s ago: executing program 1 (id=9033):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x0, 0x5}, 0x8000, 0x0, 0x409, 0x5, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10)

1.785216168s ago: executing program 1 (id=9034):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1)
fallocate(r2, 0x0, 0x0, 0x8000c62)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r3, r3, 0x0, 0x100000800000009)

1.682242919s ago: executing program 4 (id=9036):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xe5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10)
write$qrtrtun(r0, &(0x7f0000001880)="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", 0x45c)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10)

1.592511101s ago: executing program 4 (id=9037):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
epoll_create1(0x80000)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@sysvgroups}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001)
renameat2(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)

1.513110322s ago: executing program 1 (id=9042):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)

1.454485423s ago: executing program 4 (id=9043):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffe76, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
shutdown(r0, 0x1)

1.401442614s ago: executing program 1 (id=9045):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
poll(0x0, 0x0, 0x9)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

1.370283685s ago: executing program 4 (id=9047):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00"/48], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = io_uring_setup(0x7d1, &(0x7f0000000300)={0x0, 0xddf5, 0x8, 0xfffffffe, 0xae})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
close_range(r0, r0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

702.251247ms ago: executing program 9 (id=9065):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000600)="50cc238b", 0x4}], 0x1}, 0x41)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61)

669.172918ms ago: executing program 9 (id=9066):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

637.739138ms ago: executing program 9 (id=9067):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)

458.458472ms ago: executing program 4 (id=9070):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = epoll_create1(0x80000)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000004})
r3 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x100, 0x10003, 0x0, 0x0, r0}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})

437.521752ms ago: executing program 5 (id=9071):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

409.521342ms ago: executing program 5 (id=9072):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
write$sndseq(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x5, 0x7fff, 0x9, 0xfffff4f1, 0x4})

388.660713ms ago: executing program 9 (id=9073):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xe5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10)
write$qrtrtun(r0, &(0x7f0000001880)="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", 0x45c)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10)

358.943963ms ago: executing program 0 (id=9075):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)

347.344443ms ago: executing program 9 (id=9076):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304858)
write$binfmt_elf32(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4604070003050000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58)
close(r0)
r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18)
write$binfmt_misc(r1, &(0x7f0000000180)="e502", 0x2)
execveat(r1, &(0x7f00000002c0)='\x00', 0x0, 0x0, 0x1000)

324.189114ms ago: executing program 9 (id=9077):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

318.674634ms ago: executing program 5 (id=9078):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8)
fchdir(r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x6}, 0x18)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r3, &(0x7f0000001f80)=""/4082, 0xff2)

285.159655ms ago: executing program 0 (id=9079):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28, 0xffffffffffffffff, 0xfffffffe}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0)

282.730355ms ago: executing program 5 (id=9089):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={0x0, 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100005040000", @ANYRES32=0x0], 0x44}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000"], 0x110}}, 0x0)

263.356215ms ago: executing program 5 (id=9080):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xffffffffffffff54}, 0x18)
r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5)

190.553366ms ago: executing program 5 (id=9081):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0)

128.011998ms ago: executing program 0 (id=9082):
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001980)=""/195}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xca)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0)

90.964958ms ago: executing program 0 (id=9083):
socket$phonet(0x23, 0x2, 0x1)
r0 = syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0x26}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce, 0x0, 0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

46.540309ms ago: executing program 0 (id=9084):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000})
r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000200))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0})
io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

0s ago: executing program 0 (id=9085):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x49de, 0x4, 0x8000, 0x5, 0x1a, "ec17a144de5cf7fd"})
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"})
r1 = syz_open_pts(r0, 0x20800)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x9)
r2 = dup3(r1, r0, 0x0)
read$watch_queue(r2, &(0x7f0000000000)=""/23, 0x17)

kernel console output (not intermixed with test programs):

lticast mode
[  230.739008][T22026] netlink: 'syz.3.6993': attribute type 1 has an invalid length.
[  230.739026][T22026] netlink: 'syz.3.6993': attribute type 4 has an invalid length.
[  230.739052][T22026] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6993'.
[  231.380426][T22073] netlink: 'syz.5.7012': attribute type 1 has an invalid length.
[  231.388283][T22073] netlink: 'syz.5.7012': attribute type 2 has an invalid length.
[  231.428336][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7013'.
[  231.516025][T22076] IPVS: Unknown mcast interface: vcan0
[  231.823076][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7017'.
[  231.860954][T22088] netlink: 312 bytes leftover after parsing attributes in process `syz.5.7017'.
[  231.870159][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7017'.
[  231.953255][T22098] geneve2: entered promiscuous mode
[  231.958686][T22098] geneve2: entered allmulticast mode
[  231.999957][T22110] IPv4: Oversized IP packet from 127.202.26.0
[  232.044316][T22120] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  232.056119][T22122] netlink: 'syz.6.7034': attribute type 3 has an invalid length.
[  232.178669][T22143] 9pnet_fd: Insufficient options for proto=fd
[  232.354022][   T29] kauditd_printk_skb: 79 callbacks suppressed
[  232.354038][   T29] audit: type=1400 audit(1759250349.594:9442): avc:  denied  { name_bind } for  pid=22161 comm="syz.6.7054" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  232.399846][T22164] 9pnet_fd: Insufficient options for proto=fd
[  232.482742][T22180] lo speed is unknown, defaulting to 1000
[  232.527949][T22184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7064'.
[  232.573009][T22188] netlink: 7 bytes leftover after parsing attributes in process `+}[@'.
[  232.612080][T22188] netlink: 60 bytes leftover after parsing attributes in process `+}[@'.
[  232.620638][T22188] netlink: 60 bytes leftover after parsing attributes in process `+}[@'.
[  232.659296][T22195] netlink: 'syz.3.7068': attribute type 10 has an invalid length.
[  232.863620][   T29] audit: type=1326 audit(1759250350.104:9443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22236 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  232.887169][   T29] audit: type=1326 audit(1759250350.104:9444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22236 comm="syz.5.7084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  232.923936][   T29] audit: type=1326 audit(1759250350.134:9445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22238 comm="syz.7.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  232.947578][   T29] audit: type=1326 audit(1759250350.134:9446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22238 comm="syz.7.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  232.947608][   T29] audit: type=1326 audit(1759250350.134:9447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22238 comm="syz.7.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  232.947631][   T29] audit: type=1326 audit(1759250350.134:9448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22238 comm="syz.7.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  232.947654][   T29] audit: type=1326 audit(1759250350.134:9449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22238 comm="syz.7.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  232.947724][   T29] audit: type=1326 audit(1759250350.134:9450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22238 comm="syz.7.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  232.947747][   T29] audit: type=1326 audit(1759250350.134:9451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22238 comm="syz.7.7085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  232.972819][T15221] kernel read not supported for file /vcsu1 (pid: 15221 comm: kworker/0:14)
[  233.167295][T22246] lo speed is unknown, defaulting to 1000
[  233.570007][ T3408] hid_parser_main: 18 callbacks suppressed
[  233.570025][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1
[  233.583273][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  233.590735][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  233.598355][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  233.605796][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  233.613173][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  233.627673][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  233.635087][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  233.642586][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  233.649982][ T3408] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2
[  233.687713][ T3408] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  233.784501][T22277] sg_read: process 3147 (syz.3.7100) changed security contexts after opening file descriptor, this is not allowed.
[  234.476689][T22314] !yz!: rxe_newlink: already configured on team_slave_0
[  234.711491][T22353] syzkaller1: entered promiscuous mode
[  234.717047][T22353] syzkaller1: entered allmulticast mode
[  234.765926][T22354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22354 comm=syz.5.7131
[  235.831286][T22447] netlink: 'syz.6.7172': attribute type 3 has an invalid length.
[  235.836318][T22443] usb usb8: usbfs: process 22443 (syz.3.7169) did not claim interface 0 before use
[  235.895994][T22453] loop3: detected capacity change from 0 to 512
[  235.933017][T22453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.968138][T22453] ext4 filesystem being mounted at /1457/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.993107][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.022931][T22471] __nla_validate_parse: 18 callbacks suppressed
[  236.022955][T22471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7181'.
[  236.038225][T22471] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7181'.
[  236.040606][T22474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7182'.
[  236.047194][T22471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7181'.
[  236.082614][T22471] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7181'.
[  236.091697][T22471] netlink: 'syz.5.7181': attribute type 6 has an invalid length.
[  236.102402][T22474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7182'.
[  236.578927][T22537] netlink: 51 bytes leftover after parsing attributes in process `syz.5.7211'.
[  236.617236][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7206'.
[  236.722946][T22558] geneve2: entered promiscuous mode
[  236.728268][T22558] geneve2: entered allmulticast mode
[  236.745871][T22562] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7221'.
[  236.971397][T22579] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22579 comm=syz.7.7229
[  236.983962][T22579] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22579 comm=syz.7.7229
[  237.096815][T22596] loop7: detected capacity change from 0 to 2048
[  237.120353][T22600] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.120614][T22596] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.140736][T22600] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.179974][T22605] netlink: 'syz.0.7239': attribute type 10 has an invalid length.
[  237.187885][T22605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7239'.
[  237.318840][T22600] bond1: (slave geneve2): Releasing active interface
[  237.350715][T22600] bond2: (slave gretap1): Releasing active interface
[  237.368697][T22600] bond4: (slave bridge0): Releasing active interface
[  237.378752][T22600] bond0: (slave gretap2): Releasing active interface
[  237.388763][T22605] veth1_vlan: left promiscuous mode
[  237.397994][T22605] batman_adv: batadv0: Adding interface: veth1_vlan
[  237.404604][T22605] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.435709][T22605] batman_adv: batadv0: Interface activated: veth1_vlan
[  237.570073][   T29] kauditd_printk_skb: 215 callbacks suppressed
[  237.570129][   T29] audit: type=1400 audit(1759250354.814:9667): avc:  denied  { read } for  pid=22621 comm="syz.0.7249" path="socket:[68843]" dev="sockfs" ino=68843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  237.642730][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.715742][   T29] audit: type=1400 audit(1759250354.954:9668): avc:  denied  { write } for  pid=22634 comm="syz.6.7254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  237.820716][T22624] lo speed is unknown, defaulting to 1000
[  237.844084][   T29] audit: type=1326 audit(1759250355.084:9669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  237.893103][   T29] audit: type=1326 audit(1759250355.084:9670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  237.916642][   T29] audit: type=1326 audit(1759250355.114:9671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  237.940217][   T29] audit: type=1326 audit(1759250355.114:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  237.963955][   T29] audit: type=1326 audit(1759250355.114:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  237.987425][   T29] audit: type=1326 audit(1759250355.114:9674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  238.010931][   T29] audit: type=1326 audit(1759250355.114:9675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  238.034524][   T29] audit: type=1326 audit(1759250355.114:9676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.5.7260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  238.208905][T22666] loop7: detected capacity change from 0 to 512
[  238.240241][T22666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.281898][T22666] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.418934][T22679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22679 comm=syz.6.7269
[  238.567000][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.589446][T22686] atomic_op ffff8881003dbd28 conn xmit_atomic 0000000000000000
[  238.663638][T22692] atomic_op ffff888124392928 conn xmit_atomic 0000000000000000
[  238.677296][T22694] loop7: detected capacity change from 0 to 128
[  239.316517][T22755] syzkaller1: entered promiscuous mode
[  239.316537][T22755] syzkaller1: entered allmulticast mode
[  239.341404][T22759] 9pnet_fd: Insufficient options for proto=fd
[  239.521521][T22781] sd 0:0:1:0: device reset
[  239.772873][T22823] loop3: detected capacity change from 0 to 512
[  239.780298][T22823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  239.804718][T22823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.825407][T22823] ext4 filesystem being mounted at /1486/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.843934][T22823] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  239.844152][T22823] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28
[  239.844174][T22823] EXT4-fs (loop3): This should not happen!! Data will be lost
[  239.844174][T22823] 
[  239.844185][T22823] EXT4-fs (loop3): Total free blocks count 0
[  239.844196][T22823] EXT4-fs (loop3): Free/Dirty block details
[  239.844207][T22823] EXT4-fs (loop3): free_blocks=39626
[  239.844261][T22823] EXT4-fs (loop3): dirty_blocks=15
[  239.844280][T22823] EXT4-fs (loop3): Block reservation details
[  239.844290][T22823] EXT4-fs (loop3): i_reserved_data_blocks=15
[  239.980983][T22823] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28
[  240.340943][T22867] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  240.983393][T22914] dummy0: left promiscuous mode
[  240.998467][T22914] team0: Port device dummy0 removed
[  241.010685][T22914] bond1: (slave geneve2): Releasing active interface
[  241.036503][T22914] batadv0: left allmulticast mode
[  241.041661][T22914] batadv0: left promiscuous mode
[  241.046811][T22914] bridge0: port 1(batadv0) entered disabled state
[  241.090897][T22917] netlink: 'syz.5.7377': attribute type 10 has an invalid length.
[  241.098806][T22917] __nla_validate_parse: 9 callbacks suppressed
[  241.098821][T22917] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7377'.
[  241.150451][T22916] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2
[  241.192323][T22917] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  241.409370][T22927] lo speed is unknown, defaulting to 1000
[  241.649779][T22946] loop3: detected capacity change from 0 to 1024
[  241.686020][T22946] EXT4-fs: Ignoring removed bh option
[  241.696875][T22946] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  241.764416][T22946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.808705][T22946] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.7389: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  241.872280][T22946] EXT4-fs (loop3): Remounting filesystem read-only
[  241.995937][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.065001][T22953] program syz.3.7390 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  242.112084][T22944] Set syz1 is full, maxelem 65536 reached
[  242.402612][T22988] lo speed is unknown, defaulting to 1000
[  242.447899][T23000] tipc: New replicast peer: 255.255.255.255
[  242.453967][T23000] tipc: Enabled bearer <udp:s >, priority 10
[  242.559827][T23009] netlink: 19 bytes leftover after parsing attributes in process `syz.3.7417'.
[  242.594254][   T29] kauditd_printk_skb: 220 callbacks suppressed
[  242.594268][   T29] audit: type=1326 audit(1759250359.834:9897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.3.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ec6eec9 code=0x7ffc0000
[  242.623963][   T29] audit: type=1326 audit(1759250359.834:9898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.3.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ec6eec9 code=0x7ffc0000
[  242.681723][   T29] audit: type=1326 audit(1759250359.834:9899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.3.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd35ec6eec9 code=0x7ffc0000
[  242.705361][   T29] audit: type=1326 audit(1759250359.834:9900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.3.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ec6eec9 code=0x7ffc0000
[  242.728877][   T29] audit: type=1326 audit(1759250359.834:9901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.3.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ec6eec9 code=0x7ffc0000
[  242.752467][   T29] audit: type=1326 audit(1759250359.834:9902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.3.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd35ec6eec9 code=0x7ffc0000
[  242.756836][T23026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7422'.
[  242.776243][   T29] audit: type=1326 audit(1759250359.844:9903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.3.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35ec6eec9 code=0x7ffc0000
[  242.808463][   T29] audit: type=1326 audit(1759250359.844:9904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23013 comm="syz.3.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd35ec6eec9 code=0x7ffc0000
[  242.831979][   T29] audit: type=1326 audit(1759250359.894:9905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23012 comm="syz.5.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  242.855489][   T29] audit: type=1326 audit(1759250359.894:9906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23012 comm="syz.5.7419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  243.280163][T23091] lo speed is unknown, defaulting to 1000
[  243.338215][T23107] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  243.533303][T23091] netlink: 'syz.0.7457': attribute type 13 has an invalid length.
[  243.541227][T23091] netlink: 'syz.0.7457': attribute type 17 has an invalid length.
[  243.552945][T23091] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  243.571265][T23142] loop7: detected capacity change from 0 to 512
[  243.601251][T23142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.618395][T23142] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  243.650030][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.250578][T23166] Set syz1 is full, maxelem 65536 reached
[  244.608677][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7498'.
[  244.637770][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7498'.
[  244.699424][T23208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7505'.
[  244.732686][T23214] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  244.843993][T23200] lo speed is unknown, defaulting to 1000
[  244.849952][T23226] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7514'.
[  244.973128][T23238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7520'.
[  245.004283][T23241] loop3: detected capacity change from 0 to 164
[  245.022237][T23241] isofs_fill_super: root inode is not a directory. Corrupted media?
[  245.051978][T23238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7520'.
[  245.231414][T23271] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7535'.
[  245.402916][T23300] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  245.403025][T23299] IPVS: stopping master sync thread 23300 ...
[  245.562323][T23306] lo speed is unknown, defaulting to 1000
[  245.594185][T23317] SELinux: security_context_str_to_sid (Ö) failed with errno=-22
[  245.787517][T23342] lo speed is unknown, defaulting to 1000
[  246.301622][T23383] netlink: 'syz.6.7579': attribute type 2 has an invalid length.
[  246.337219][T23386] hub 9-0:1.0: USB hub found
[  246.342511][T23386] hub 9-0:1.0: 8 ports detected
[  246.368073][T23392] loop3: detected capacity change from 0 to 512
[  246.387092][T23392] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.7584: bad orphan inode 16
[  246.400434][T23392] ext4_test_bit(bit=15, block=18) = 0
[  246.406467][T23392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.419350][T23392] ext4 filesystem being mounted at /1543/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.434281][T23392] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.7584: Directory hole found for htree leaf block 0
[  246.473870][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.483101][ T4413] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:31: Failed to release dquot type 1
[  246.578003][T23425] vlan2: entered allmulticast mode
[  246.604429][T23431] __nla_validate_parse: 1 callbacks suppressed
[  246.604447][T23431] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7600'.
[  246.910516][T23464] netlink: 19 bytes leftover after parsing attributes in process `syz.3.7614'.
[  246.922909][T23466] sch_fq: defrate 4294967295 ignored.
[  247.073515][T23483] netlink: 'syz.0.7623': attribute type 4 has an invalid length.
[  247.081311][T23483] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7623'.
[  247.181627][T23492] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7627'.
[  247.291400][T23502] netlink: 256 bytes leftover after parsing attributes in process `syz.7.7631'.
[  247.348571][T23509] wireguard0: entered promiscuous mode
[  247.354144][T23509] wireguard0: entered allmulticast mode
[  247.411237][T23521] netlink: 'syz.7.7639': attribute type 4 has an invalid length.
[  247.419135][T23521] netlink: 17 bytes leftover after parsing attributes in process `syz.7.7639'.
[  247.643695][T23553] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7655'.
[  247.658056][T23551] infiniband syz!: set down
[  247.662587][T23551] infiniband syz!: added team_slave_0
[  247.673360][T23551] RDS/IB: syz!: added
[  247.677412][T23551] smc: adding ib device syz! with port count 1
[  247.683806][T23551] smc:    ib device syz! port 1 has pnetid 
[  248.561359][   T29] kauditd_printk_skb: 225 callbacks suppressed
[  248.561375][   T29] audit: type=1326 audit(1759250365.804:10131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23589 comm="syz.6.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  248.591341][   T29] audit: type=1326 audit(1759250365.804:10132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23589 comm="syz.6.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  248.632701][   T29] audit: type=1326 audit(1759250365.854:10133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23589 comm="syz.6.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  248.656364][   T29] audit: type=1326 audit(1759250365.854:10134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23589 comm="syz.6.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  248.679929][   T29] audit: type=1326 audit(1759250365.854:10135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23589 comm="syz.6.7670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  248.727762][T23602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7675'.
[  248.761132][T23602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7675'.
[  248.828779][T23609] bridge0: entered promiscuous mode
[  248.849727][T23609] macvtap1: entered allmulticast mode
[  248.855167][T23609] bridge0: entered allmulticast mode
[  248.875635][T23609] bridge0: port 4(macvtap1) entered blocking state
[  248.882302][T23609] bridge0: port 4(macvtap1) entered disabled state
[  248.892921][T23609] bridge0: left allmulticast mode
[  248.898024][T23609] bridge0: left promiscuous mode
[  249.161414][T23647] macvtap1: entered allmulticast mode
[  249.166877][T23647] bridge0: entered allmulticast mode
[  249.179162][T23647] bridge0: port 2(macvtap1) entered blocking state
[  249.185747][T23647] bridge0: port 2(macvtap1) entered disabled state
[  249.194160][T23647] bridge0: left allmulticast mode
[  249.196621][   T29] audit: type=1326 audit(1759250366.434:10136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23650 comm="syz.0.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  249.226045][   T29] audit: type=1326 audit(1759250366.454:10137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23650 comm="syz.0.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  249.249672][   T29] audit: type=1326 audit(1759250366.454:10138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23650 comm="syz.0.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  249.273290][   T29] audit: type=1326 audit(1759250366.454:10139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23650 comm="syz.0.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  249.296960][   T29] audit: type=1326 audit(1759250366.464:10140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23650 comm="syz.0.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  249.322736][T23649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7696'.
[  249.432370][T23667] loop7: detected capacity change from 0 to 2048
[  249.436632][T23671] lo speed is unknown, defaulting to 1000
[  249.468573][T23667] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.663834][T23671] netlink: 'syz.3.7706': attribute type 13 has an invalid length.
[  249.671775][T23671] netlink: 'syz.3.7706': attribute type 17 has an invalid length.
[  249.682911][T23671] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  249.785095][T23708] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  249.876459][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.956152][T23726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.965191][T23726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.017112][T23845] loop7: detected capacity change from 0 to 512
[  251.029933][T15221] Process accounting resumed
[  251.036763][T23845] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.7780: bad orphan inode 16
[  251.053349][T23845] ext4_test_bit(bit=15, block=18) = 0
[  251.059232][T23845] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.079481][T23845] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.099165][T23845] EXT4-fs error (device loop7): ext4_add_entry:2417: inode #2: comm syz.7.7780: Directory hole found for htree leaf block 0
[  251.143160][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.152403][ T4417] EXT4-fs error (device loop7): ext4_release_dquot:6979: comm kworker/u8:35: Failed to release dquot type 1
[  251.207314][T23867] loop3: detected capacity change from 0 to 512
[  251.214063][T23867] EXT4-fs: Ignoring removed bh option
[  251.220834][T23867] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  251.233737][T23867] EXT4-fs (loop3): 1 truncate cleaned up
[  251.239961][T23867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.306688][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.550762][T23918] netem: change failed
[  251.616102][T23937] __nla_validate_parse: 4 callbacks suppressed
[  251.616118][T23937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7823'.
[  252.062884][T23993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7846'.
[  252.493325][ T3408] kernel write not supported for file /988/clear_refs (pid: 3408 comm: kworker/1:6)
[  252.624098][T24005] pimreg: entered allmulticast mode
[  252.629924][T24005] pimreg: left allmulticast mode
[  252.768838][T24022] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  252.970087][T24041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24041 comm=syz.6.7867
[  253.052354][T24047] wg2: entered promiscuous mode
[  253.057362][T24047] wg2: entered allmulticast mode
[  253.100314][T24049] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  253.263977][T24070] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7882'.
[  253.490783][T24107] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7900'.
[  253.528502][T24109] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7902'.
[  253.549768][T24113] netlink: 'syz.7.7903': attribute type 21 has an invalid length.
[  253.563739][T24113] netlink: 'syz.7.7903': attribute type 1 has an invalid length.
[  253.571542][T24113] netlink: 144 bytes leftover after parsing attributes in process `syz.7.7903'.
[  253.625466][T24127] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7910'.
[  253.646971][T24131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24131 comm=syz.0.7912
[  253.659674][T24131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24131 comm=syz.0.7912
[  253.686853][   T29] kauditd_printk_skb: 149 callbacks suppressed
[  253.686868][   T29] audit: type=1326 audit(1759250370.934:10289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24134 comm="syz.7.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  253.735157][   T29] audit: type=1326 audit(1759250370.964:10290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24134 comm="syz.7.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  253.759077][   T29] audit: type=1326 audit(1759250370.964:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24134 comm="syz.7.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  253.782757][   T29] audit: type=1326 audit(1759250370.964:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24134 comm="syz.7.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  253.783344][T24130] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  253.783344][T24130]    program syz.3.7911 not setting count and/or reply_len properly
[  253.806426][   T29] audit: type=1326 audit(1759250370.964:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24134 comm="syz.7.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  253.846657][   T29] audit: type=1326 audit(1759250370.964:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24134 comm="syz.7.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  253.870467][   T29] audit: type=1326 audit(1759250370.964:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24134 comm="syz.7.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  253.894136][   T29] audit: type=1326 audit(1759250370.964:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24134 comm="syz.7.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  253.917856][   T29] audit: type=1326 audit(1759250370.964:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24134 comm="syz.7.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  253.941523][   T29] audit: type=1326 audit(1759250370.964:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24134 comm="syz.7.7914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0829eec9 code=0x7ffc0000
[  254.008396][T24139] wg2: entered promiscuous mode
[  254.013287][T24139] wg2: entered allmulticast mode
[  254.192301][T24171] atomic_op ffff88811d6c6528 conn xmit_atomic 0000000000000000
[  254.260367][T24179] atomic_op ffff88811a903128 conn xmit_atomic 0000000000000000
[  254.263089][T24175] macvlan0: entered promiscuous mode
[  254.273434][T24175] bond0: entered promiscuous mode
[  254.278591][T24175] macvlan0: entered allmulticast mode
[  254.283962][T24175] bond0: entered allmulticast mode
[  254.294686][T24175] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  254.305589][T24175] bond0: left allmulticast mode
[  254.310494][T24175] bond0: left promiscuous mode
[  254.323204][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7938'.
[  254.332466][T24186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7938'.
[  254.418053][T24197] loop3: detected capacity change from 0 to 764
[  254.428531][T24193] netlink: 8460 bytes leftover after parsing attributes in process `syz.6.7940'.
[  254.476332][T24197] rock: directory entry would overflow storage
[  254.482520][T24197] rock: sig=0x4f50, size=4, remaining=3
[  254.488187][T24197] iso9660: Corrupted directory entry in block 6 of inode 1792
[  254.513622][T24197] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  254.660139][T24231] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  254.760762][T24233] lo speed is unknown, defaulting to 1000
[  254.818547][T24244] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.889834][T24244] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.941245][T24244] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.988977][T24259] ref_ctr_offset mismatch. inode: 0x205e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18
[  255.004058][T24244] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.067586][ T4417] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.097504][ T4417] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.106453][ T4417] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.114635][ T4417] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.176957][T24284] dummy0: entered allmulticast mode
[  255.182387][T24284] dummy0: left allmulticast mode
[  255.302187][T24299] syzkaller0: entered promiscuous mode
[  255.307715][T24299] syzkaller0: entered allmulticast mode
[  255.423737][T24312] netlink: 'syz.7.7995': attribute type 12 has an invalid length.
[  255.438912][T24310] macsec1: entered promiscuous mode
[  255.444235][T24310] bridge0: entered promiscuous mode
[  255.465976][T24310] bridge0: port 1(macsec1) entered blocking state
[  255.472527][T24310] bridge0: port 1(macsec1) entered disabled state
[  255.482761][T24310] macsec1: entered allmulticast mode
[  255.488087][T24310] bridge0: entered allmulticast mode
[  255.504061][T24310] macsec1: left allmulticast mode
[  255.509221][T24310] bridge0: left allmulticast mode
[  255.521978][T24310] bridge0: left promiscuous mode
[  255.717210][T24352] loop3: detected capacity change from 0 to 1024
[  255.724080][T24352] EXT4-fs: Ignoring removed nobh option
[  255.729744][T24352] EXT4-fs: inline encryption not supported
[  255.748973][T24352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.772410][T24352] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.8014: Allocating blocks 481-513 which overlap fs metadata
[  255.793043][T24352] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.8014: Allocating blocks 481-513 which overlap fs metadata
[  255.821595][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.845127][T24364] wg2: left promiscuous mode
[  255.849797][T24364] wg2: left allmulticast mode
[  255.865527][T24364] wg2: entered promiscuous mode
[  255.870593][T24364] wg2: entered allmulticast mode
[  255.883951][T24366] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  256.055530][T24387] atomic_op ffff888149433128 conn xmit_atomic 0000000000000000
[  256.346877][T24431] loop7: detected capacity change from 0 to 128
[  256.440976][T24434] IPVS: Error connecting to the multicast addr
[  256.458120][T24431] syz.7.8047: attempt to access beyond end of device
[  256.458120][T24431] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128
[  256.474219][T24431] syz.7.8047: attempt to access beyond end of device
[  256.474219][T24431] loop7: rw=2049, sector=185, nr_sectors = 16 limit=128
[  256.489704][T24431] syz.7.8047: attempt to access beyond end of device
[  256.489704][T24431] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128
[  256.504374][T24431] syz.7.8047: attempt to access beyond end of device
[  256.504374][T24431] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128
[  256.520050][T24431] syz.7.8047: attempt to access beyond end of device
[  256.520050][T24431] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128
[  256.533911][T24431] syz.7.8047: attempt to access beyond end of device
[  256.533911][T24431] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128
[  256.561302][T24431] syz.7.8047: attempt to access beyond end of device
[  256.561302][T24431] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128
[  256.575058][T24431] syz.7.8047: attempt to access beyond end of device
[  256.575058][T24431] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128
[  256.588845][T24431] syz.7.8047: attempt to access beyond end of device
[  256.588845][T24431] loop7: rw=2049, sector=305, nr_sectors = 8 limit=128
[  256.604221][T24431] syz.7.8047: attempt to access beyond end of device
[  256.604221][T24431] loop7: rw=2049, sector=321, nr_sectors = 8 limit=128
[  256.626793][T24441] loop3: detected capacity change from 0 to 512
[  256.694223][T24448] __nla_validate_parse: 5 callbacks suppressed
[  256.694240][T24448] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8055'.
[  256.714761][T24441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.730209][T24441] ext4 filesystem being mounted at /1628/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.844699][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.977351][T24482] $Hÿ: renamed from bond0 (while UP)
[  256.990521][T24482] $Hÿ: entered promiscuous mode
[  256.995674][T24482] bond_slave_0: entered promiscuous mode
[  257.001464][T24482] bond_slave_1: entered promiscuous mode
[  257.328262][T24506] loop7: detected capacity change from 0 to 512
[  257.358408][T24506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  257.380514][T24506] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.436776][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  257.567420][T24524] netlink: 'syz.6.8085': attribute type 13 has an invalid length.
[  257.575448][T24524] netlink: 'syz.6.8085': attribute type 13 has an invalid length.
[  257.810386][T24542] netlink: 204 bytes leftover after parsing attributes in process `syz.3.8093'.
[  257.838333][T24546] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8094'.
[  257.987743][T24558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8101'.
[  258.368179][T24580] netlink: 'syz.7.8110': attribute type 12 has an invalid length.
[  258.559499][T24615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8125'.
[  258.708423][T24625] loop3: detected capacity change from 0 to 512
[  258.722152][T24625] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  258.744336][T24625] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.8130: bg 0: block 4: invalid block bitmap
[  258.775589][T24625] EXT4-fs (loop3): Remounting filesystem read-only
[  258.793414][T24625] EXT4-fs (loop3): 1 truncate cleaned up
[  258.803923][T24625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.859592][   T29] kauditd_printk_skb: 220 callbacks suppressed
[  258.859608][   T29] audit: type=1326 audit(1759250376.104:10519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.8140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  258.889564][   T29] audit: type=1326 audit(1759250376.104:10520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.8140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  258.938478][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.992972][   T29] audit: type=1326 audit(1759250376.174:10521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.8140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  259.016685][   T29] audit: type=1326 audit(1759250376.174:10522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.8140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  259.183618][   T29] audit: type=1400 audit(1759250376.424:10523): avc:  denied  { bind } for  pid=24684 comm="syz.5.8154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  259.251722][T24696] loop3: detected capacity change from 0 to 512
[  259.298643][T24696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.375893][   T29] audit: type=1400 audit(1759250376.614:10524): avc:  denied  { write } for  pid=24707 comm="syz.0.8164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  259.398606][T24688] lo speed is unknown, defaulting to 1000
[  259.539036][   T29] audit: type=1400 audit(1759250376.784:10525): avc:  denied  { create } for  pid=24715 comm="syz.5.8167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  259.688118][   T29] audit: type=1400 audit(1759250376.814:10526): avc:  denied  { ioctl } for  pid=24715 comm="syz.5.8167" path="socket:[74093]" dev="sockfs" ino=74093 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  259.981533][T24747] netlink: 'syz.5.8181': attribute type 10 has an invalid length.
[  259.989425][T24747] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8181'.
[  260.015788][T24747] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  260.123723][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.146148][T24751] netlink: 'syz.0.8183': attribute type 13 has an invalid length.
[  260.192364][ T4398] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  260.207404][T24751] netlink: 'syz.0.8183': attribute type 13 has an invalid length.
[  260.219629][ T4398] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  260.256666][ T4398] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  260.294602][ T4398] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  260.846122][T24766] Set syz1 is full, maxelem 65536 reached
[  261.124202][T24797] lo speed is unknown, defaulting to 1000
[  261.333109][T24818] netlink: 'syz.5.8209': attribute type 1 has an invalid length.
[  261.341039][T24818] netlink: 'syz.5.8209': attribute type 4 has an invalid length.
[  261.348790][T24818] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.8209'.
[  261.375422][T24818] netlink: 'syz.5.8209': attribute type 1 has an invalid length.
[  261.383223][T24818] netlink: 'syz.5.8209': attribute type 4 has an invalid length.
[  261.391020][T24818] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.8209'.
[  261.707023][   T29] audit: type=1326 audit(1759250378.954:10527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24826 comm="syz.6.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  261.746869][   T29] audit: type=1326 audit(1759250378.974:10528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24826 comm="syz.6.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  261.831266][T24835] lo speed is unknown, defaulting to 1000
[  261.837124][T24835] lo speed is unknown, defaulting to 1000
[  261.843101][T24835] lo speed is unknown, defaulting to 1000
[  261.849708][T24835] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  261.871625][T24835] lo speed is unknown, defaulting to 1000
[  261.880786][T24837] netlink: 128 bytes leftover after parsing attributes in process `syz.6.8217'.
[  261.885702][T24835] lo speed is unknown, defaulting to 1000
[  261.897792][T24835] lo speed is unknown, defaulting to 1000
[  261.903804][T24835] lo speed is unknown, defaulting to 1000
[  261.909941][T24835] lo speed is unknown, defaulting to 1000
[  261.911794][T24839] netlink: 'syz.7.8218': attribute type 4 has an invalid length.
[  261.916584][T24835] lo speed is unknown, defaulting to 1000
[  261.955621][T24839] netlink: 'syz.7.8218': attribute type 4 has an invalid length.
[  262.003692][T24847] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8222'.
[  262.072542][T24853] team_slave_0: entered promiscuous mode
[  262.080708][T24853] team_slave_0: left promiscuous mode
[  262.465387][T24878] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8237'.
[  262.536604][T24889] loop7: detected capacity change from 0 to 164
[  262.597965][T24899] loop3: detected capacity change from 0 to 128
[  262.605307][T24899] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  262.633042][T24899] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  262.649899][T24905] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8250'.
[  262.659653][ T4398] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  262.932128][T24937] lo speed is unknown, defaulting to 1000
[  263.076063][T24937] lo speed is unknown, defaulting to 1000
[  263.289206][T24971] netlink: 'syz.0.8279': attribute type 10 has an invalid length.
[  263.324754][T24973] bridge0: entered promiscuous mode
[  263.335610][T24973] macvtap1: entered allmulticast mode
[  263.341012][T24973] bridge0: entered allmulticast mode
[  263.351349][T24974] netlink: 'syz.0.8279': attribute type 10 has an invalid length.
[  263.360777][T24973] bridge0: port 4(macvtap1) entered blocking state
[  263.367348][T24973] bridge0: port 4(macvtap1) entered disabled state
[  263.374985][T24973] bridge0: left allmulticast mode
[  263.380064][T24973] bridge0: left promiscuous mode
[  263.638934][T25005] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8293'.
[  263.693884][T25012] bond0: (slave gretap1): Releasing active interface
[  263.742113][T25017] netlink: 'syz.3.8296': attribute type 10 has an invalid length.
[  263.750092][T25017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8296'.
[  263.759897][T25012] batadv1: left allmulticast mode
[  263.765027][T25012] batadv1: left promiscuous mode
[  263.770156][T25012] bridge0: port 1(batadv1) entered disabled state
[  263.796272][T25021] loop3: detected capacity change from 0 to 512
[  263.837032][T25021] EXT4-fs error (device loop3): ext4_quota_enable:7134: inode #4: comm syz.3.8296: iget: bogus i_mode (4200)
[  263.840109][T25027] loop7: detected capacity change from 0 to 128
[  263.861960][T25021] EXT4-fs error (device loop3): ext4_quota_enable:7137: comm syz.3.8296: Bad quota inode: 4, type: 1
[  263.862085][T25012] bond4: (slave bridge2): Releasing active interface
[  263.873432][T25027] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  263.899935][T25027] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  263.915731][T25021] EXT4-fs warning (device loop3): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  263.936372][T25021] EXT4-fs (loop3): mount failed
[  263.941926][T25017] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  264.002689][T25012] loop3: detected capacity change from 0 to 512
[  264.040121][   T29] kauditd_printk_skb: 69 callbacks suppressed
[  264.040159][   T29] audit: type=1326 audit(1759250381.284:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.0.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  264.103053][   T29] audit: type=1326 audit(1759250381.314:10599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.0.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  264.126754][   T29] audit: type=1326 audit(1759250381.314:10600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.0.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  264.133039][T25044] syzkaller1: entered promiscuous mode
[  264.150340][   T29] audit: type=1326 audit(1759250381.314:10601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.0.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  264.155952][T25044] syzkaller1: entered allmulticast mode
[  264.182170][T25046] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8308'.
[  264.185250][   T29] audit: type=1326 audit(1759250381.314:10602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.0.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  264.217848][   T29] audit: type=1326 audit(1759250381.314:10603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.0.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  264.241543][   T29] audit: type=1326 audit(1759250381.314:10604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.0.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  264.265204][   T29] audit: type=1326 audit(1759250381.314:10605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.0.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  264.289054][   T29] audit: type=1326 audit(1759250381.314:10606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25037 comm="syz.0.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4b58eec9 code=0x7ffc0000
[  264.312637][   T29] audit: type=1400 audit(1759250381.334:10607): avc:  denied  { watch } for  pid=25041 comm="syz.3.8307" path="/1665/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  264.368807][T25057] netlink: 'syz.0.8314': attribute type 4 has an invalid length.
[  264.384361][T15220] lo speed is unknown, defaulting to 1000
[  264.390197][T15221] lo speed is unknown, defaulting to 1000
[  264.390207][ T4398] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  264.390264][ T4398] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  264.414660][ T4398] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  264.437542][ T4398] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  264.687295][ T4417] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  264.705977][T25078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8324'.
[  264.756239][T25084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8326'.
[  264.786151][T25084] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8326'.
[  265.200757][T25100] loop7: detected capacity change from 0 to 32768
[  265.306541][T25100]  loop7: p1 p3 < >
[  265.984424][T25150] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  266.006577][T25150] team0: Port device dummy0 removed
[  266.078636][T25151] lo speed is unknown, defaulting to 1000
[  266.187586][T25155] netem: unknown loss type 12
[  266.192324][T25155] netem: change failed
[  266.316833][T25164] sch_tbf: burst 511 is lower than device veth7 mtu (1514) !
[  266.362276][T15220] Process accounting resumed
[  266.425449][T25178] loop3: detected capacity change from 0 to 512
[  266.439434][T25178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.441218][T25151] lo speed is unknown, defaulting to 1000
[  266.452158][T25178] ext4 filesystem being mounted at /1684/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.491249][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.501540][T25182] batadv3: entered promiscuous mode
[  266.718019][T25206] loop7: detected capacity change from 0 to 512
[  266.740703][T25206] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.779626][T25206] ext4 filesystem being mounted at /543/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.803387][T25212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25212 comm=syz.5.8378
[  266.945670][T25223] tipc: Started in network mode
[  266.950640][T25223] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  266.959726][T25223] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  266.979789][T18108] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.074548][T25244] __nla_validate_parse: 3 callbacks suppressed
[  267.074565][T25244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8391'.
[  267.112381][T25244] vxlan0: entered promiscuous mode
[  267.124917][ T4443] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  267.133498][ T4443] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  267.155642][ T4443] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  267.173888][ T4443] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  267.278432][T25269] loop3: detected capacity change from 0 to 128
[  267.296132][T25269] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  267.330816][T25269] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  267.370691][T25276] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  267.457797][T25280] lo speed is unknown, defaulting to 1000
[  267.524785][T25289] validate_nla: 3 callbacks suppressed
[  267.524801][T25289] netlink: 'syz.6.8413': attribute type 10 has an invalid length.
[  267.534433][T25280] lo speed is unknown, defaulting to 1000
[  267.833021][T25334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8427'.
[  267.850242][T25334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8427'.
[  267.869978][T25334] netlink: 'syz.6.8427': attribute type 4 has an invalid length.
[  267.899994][T25338] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.936936][T25338] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.986540][T25338] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  268.027216][T25338] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  268.091274][ T4431] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.101930][ T4431] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.119774][ T4431] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.137474][ T4431] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  268.145826][ T4420] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  268.178657][T25346] netlink: 'syz.3.8430': attribute type 10 has an invalid length.
[  268.189185][T25346] netlink: 'syz.3.8430': attribute type 10 has an invalid length.
[  268.202505][T25346] dummy0: entered promiscuous mode
[  268.216102][T25346] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link
[  268.271653][T25362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25362 comm=syz.3.8441
[  268.613016][T25377] lo speed is unknown, defaulting to 1000
[  268.627681][T25379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8448'.
[  268.636756][T25379] netlink: 'syz.0.8448': attribute type 11 has an invalid length.
[  268.653714][T25379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8448'.
[  268.662782][T25379] netlink: 'syz.0.8448': attribute type 11 has an invalid length.
[  268.679483][T25377] lo speed is unknown, defaulting to 1000
[  269.056228][   T29] kauditd_printk_skb: 123 callbacks suppressed
[  269.056244][   T29] audit: type=1326 audit(1759250386.304:10731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.8458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  269.108464][   T29] audit: type=1326 audit(1759250386.334:10732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.8458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  269.132179][   T29] audit: type=1326 audit(1759250386.334:10733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.8458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  269.155835][   T29] audit: type=1326 audit(1759250386.334:10734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.8458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  269.179507][   T29] audit: type=1326 audit(1759250386.334:10735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.8458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  269.203094][   T29] audit: type=1326 audit(1759250386.334:10736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.8458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  269.226749][   T29] audit: type=1326 audit(1759250386.334:10737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.8458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  269.250432][   T29] audit: type=1326 audit(1759250386.334:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.8458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  269.274009][   T29] audit: type=1326 audit(1759250386.334:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.8458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  269.297641][   T29] audit: type=1326 audit(1759250386.334:10740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.8458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  269.418906][ T3382] hid_parser_main: 29 callbacks suppressed
[  269.418924][ T3382] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0
[  269.432233][ T3382] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0
[  269.441786][ T3382] hid-generic 0000:0003:0000.000A: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz0
[  269.673712][T25452] veth0: entered promiscuous mode
[  269.694250][T25452] veth0: left promiscuous mode
[  270.811331][T25519] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8514'.
[  271.014491][T25533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8509'.
[  271.106544][T25539] netlink: 'syz.3.8512': attribute type 4 has an invalid length.
[  271.114300][T25539] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8512'.
[  271.140891][T25539] .`: renamed from $Hÿ
[  271.438333][T25566] atomic_op ffff88811e7a3128 conn xmit_atomic 0000000000000000
[  271.887562][ T4431] bond1 (unregistering): Released all slaves
[  271.897796][ T4431] bond2 (unregistering): Released all slaves
[  271.906810][ T4431] bond3 (unregistering): Released all slaves
[  271.915495][ T4431] bond4 (unregistering): Released all slaves
[  271.926394][ T4431] bond5 (unregistering): Released all slaves
[  271.934890][ T4431] bond0 (unregistering): Released all slaves
[  271.989166][ T4431] tipc: Left network mode
[  272.029326][ T4431] batadv0: left promiscuous mode
[  272.040073][ T4431] batman_adv: batadv0: Removing interface: veth1_vlan
[  272.090317][ T4443] smc: removing ib device syz!
[  272.877324][ T4431] .` (unregistering): (slave dummy0): Releasing backup interface
[  272.885292][ T4431] dummy0: left promiscuous mode
[  272.890437][ T4431] .` (unregistering): Released all slaves
[  272.898213][ T4431] bond1 (unregistering): Released all slaves
[  272.905966][ T4431] bond2 (unregistering): Released all slaves
[  272.913993][ T4431] bond3 (unregistering): Released all slaves
[  272.922011][ T4431] bond0 (unregistering): Released all slaves
[  272.929879][ T4431] bond4 (unregistering): Released all slaves
[  272.969485][ T4431] tipc: Disabling bearer <udp:syz2>
[  272.974730][ T4431] tipc: Disabling bearer <udp:s >
[  272.979865][ T4431] tipc: Left network mode
[  272.991643][T25589] lo speed is unknown, defaulting to 1000
[  273.097200][T25589] chnl_net:caif_netlink_parms(): no params data found
[  273.127645][T25589] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.134760][T25589] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.141953][T25589] bridge_slave_0: entered allmulticast mode
[  273.148386][T25589] bridge_slave_0: entered promiscuous mode
[  273.154955][T25589] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.161996][T25589] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.169219][T25589] bridge_slave_1: entered allmulticast mode
[  273.175585][T25589] bridge_slave_1: entered promiscuous mode
[  273.190795][T25589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.200873][T25589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.218721][T25589] team0: Port device team_slave_0 added
[  273.225225][T25589] team0: Port device team_slave_1 added
[  273.284545][T25589] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.291580][T25589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.317565][T25589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.355507][T25589] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.362596][T25589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.388539][T25589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.462766][T25589] hsr_slave_0: entered promiscuous mode
[  273.475949][T25589] hsr_slave_1: entered promiscuous mode
[  273.481786][T25589] debugfs: 'hsr0' already exists in 'hsr'
[  273.487524][T25589] Cannot create hsr debugfs directory
[  273.518417][T25609] lo speed is unknown, defaulting to 1000
[  273.550894][T25611] lo speed is unknown, defaulting to 1000
[  273.673170][T25589] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  273.687553][T25589] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  273.697534][T25589] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  273.710571][T25589] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  273.813971][T25589] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.821086][T25589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.828418][T25589] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.835534][T25589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.857419][T25609] chnl_net:caif_netlink_parms(): no params data found
[  273.880869][T25611] chnl_net:caif_netlink_parms(): no params data found
[  273.905353][T25667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8548'.
[  273.968988][T25611] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.976190][T25611] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.985349][T25611] bridge_slave_0: entered allmulticast mode
[  273.992113][T25611] bridge_slave_0: entered promiscuous mode
[  274.004444][T25609] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.011539][T25609] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.020170][T25609] bridge_slave_0: entered allmulticast mode
[  274.026721][T25609] bridge_slave_0: entered promiscuous mode
[  274.033774][T25611] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.040927][T25611] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.048128][T25611] bridge_slave_1: entered allmulticast mode
[  274.054559][T25611] bridge_slave_1: entered promiscuous mode
[  274.060623][T25672] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8549'.
[  274.070257][T25609] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.077494][T25609] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.084725][T25609] bridge_slave_1: entered allmulticast mode
[  274.091768][T25609] bridge_slave_1: entered promiscuous mode
[  274.102874][T25685] netlink: 'syz.5.8552': attribute type 21 has an invalid length.
[  274.110798][T25685] netlink: 9606 bytes leftover after parsing attributes in process `syz.5.8552'.
[  274.146498][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.154404][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.170324][T25609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.181174][   T29] kauditd_printk_skb: 90 callbacks suppressed
[  274.181188][   T29] audit: type=1326 audit(1759250391.414:10831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  274.210881][   T29] audit: type=1326 audit(1759250391.414:10832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  274.237924][T25611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.248414][T25611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.261965][   T29] audit: type=1326 audit(1759250391.434:10833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  274.285590][   T29] audit: type=1326 audit(1759250391.434:10834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  274.309233][   T29] audit: type=1326 audit(1759250391.434:10835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  274.332787][   T29] audit: type=1326 audit(1759250391.434:10836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  274.356448][   T29] audit: type=1326 audit(1759250391.434:10837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  274.380040][   T29] audit: type=1326 audit(1759250391.484:10838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  274.403587][   T29] audit: type=1326 audit(1759250391.484:10839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  274.427141][   T29] audit: type=1326 audit(1759250391.484:10840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd30c60eec9 code=0x7ffc0000
[  274.451993][T25609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.479724][T25589] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.493809][T25611] team0: Port device team_slave_0 added
[  274.514154][T25611] team0: Port device team_slave_1 added
[  274.526098][T25609] team0: Port device team_slave_0 added
[  274.532927][T25609] team0: Port device team_slave_1 added
[  274.539917][T25589] 8021q: adding VLAN 0 to HW filter on device team0
[  274.570814][T25611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.577930][T25611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.603874][T25611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.621003][T25609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.627981][T25609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.653970][T25609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.666569][T25611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.673514][T25611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.699489][T25611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.725201][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.732298][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.744512][T25609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.751473][T25609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.777553][T25609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.817110][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.824298][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.868192][T25611] hsr_slave_0: entered promiscuous mode
[  274.877702][T25611] hsr_slave_1: entered promiscuous mode
[  274.883639][T25611] debugfs: 'hsr0' already exists in 'hsr'
[  274.889395][T25611] Cannot create hsr debugfs directory
[  274.909765][T25609] hsr_slave_0: entered promiscuous mode
[  274.917287][T25609] hsr_slave_1: entered promiscuous mode
[  274.923236][T25609] debugfs: 'hsr0' already exists in 'hsr'
[  274.929037][T25609] Cannot create hsr debugfs directory
[  275.054297][T25589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.086116][T25611] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  275.102429][T25611] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  275.119263][T25611] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  275.140807][T25611] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  275.253946][T25589] veth0_vlan: entered promiscuous mode
[  275.272997][T25611] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.287195][T25589] veth1_vlan: entered promiscuous mode
[  275.300255][T25611] 8021q: adding VLAN 0 to HW filter on device team0
[  275.315519][T25589] veth0_macvtap: entered promiscuous mode
[  275.330516][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.337599][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.354057][T25589] veth1_macvtap: entered promiscuous mode
[  275.362391][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.369499][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.386100][T25589] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.399464][T25589] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.412765][ T4413] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.428533][ T4413] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.441150][ T4413] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.450067][ T4413] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.484205][T25609] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  275.509150][T25609] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  275.525259][T25609] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  275.543851][T25609] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  275.567873][T25767] bridge0: entered promiscuous mode
[  275.572128][T25772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8577'.
[  275.589618][T25767] macvtap1: entered allmulticast mode
[  275.595037][T25767] bridge0: entered allmulticast mode
[  275.603098][T25767] bridge0: port 3(macvtap1) entered blocking state
[  275.609749][T25767] bridge0: port 3(macvtap1) entered disabled state
[  275.617227][T25767] bridge0: left allmulticast mode
[  275.622259][T25767] bridge0: left promiscuous mode
[  275.636342][T25611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.743756][T25609] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.757389][T25609] 8021q: adding VLAN 0 to HW filter on device team0
[  275.772198][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.779369][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.798994][T25609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  275.809607][T25609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  275.825054][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.832150][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.892900][T25611] veth0_vlan: entered promiscuous mode
[  275.911905][T25611] veth1_vlan: entered promiscuous mode
[  275.932406][T25807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8584'.
[  275.939630][T25609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.954833][T25807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8584'.
[  275.970203][T25611] veth0_macvtap: entered promiscuous mode
[  275.979623][T25611] veth1_macvtap: entered promiscuous mode
[  275.997726][T25611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.016908][T25611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.030144][ T4421] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.066079][ T4421] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.084621][ T4421] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.113868][T25609] veth0_vlan: entered promiscuous mode
[  276.122415][ T4421] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.133779][T25609] veth1_vlan: entered promiscuous mode
[  276.159839][T25609] veth0_macvtap: entered promiscuous mode
[  276.170930][T25609] veth1_macvtap: entered promiscuous mode
[  276.180651][T25828] lo speed is unknown, defaulting to 1000
[  276.199378][T25609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.217135][T25609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.230844][ T4398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.265925][ T4398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.295381][ T4398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.313351][T25838] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8590'.
[  276.331117][ T4398] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.450138][T25844] netlink: 4380 bytes leftover after parsing attributes in process `syz.2.8593'.
[  276.485666][T25844] netlink: 4380 bytes leftover after parsing attributes in process `syz.2.8593'.
[  276.758893][ T3351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3351 comm=kworker/1:2
[  277.089491][T25906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8619'.
[  277.953430][T25983] loop9: detected capacity change from 0 to 128
[  278.004518][T25989] netlink: 'syz.2.8657': attribute type 30 has an invalid length.
[  278.017238][ T4400] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  278.035741][ T4400] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  278.044591][ T4400] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  278.079042][ T4400] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  278.158130][T26000] vlan1: entered allmulticast mode
[  278.185260][T26000] dummy0: entered allmulticast mode
[  278.405757][T26042] loop2: detected capacity change from 0 to 128
[  278.467278][T26050] bio_check_eod: 98 callbacks suppressed
[  278.467293][T26050] syz.2.8680: attempt to access beyond end of device
[  278.467293][T26050] loop2: rw=1, sector=145, nr_sectors = 16 limit=128
[  278.486663][T26050] syz.2.8680: attempt to access beyond end of device
[  278.486663][T26050] loop2: rw=1, sector=169, nr_sectors = 8 limit=128
[  278.500229][T26050] syz.2.8680: attempt to access beyond end of device
[  278.500229][T26050] loop2: rw=1, sector=185, nr_sectors = 8 limit=128
[  278.513572][T26050] syz.2.8680: attempt to access beyond end of device
[  278.513572][T26050] loop2: rw=1, sector=201, nr_sectors = 8 limit=128
[  278.540556][T26050] syz.2.8680: attempt to access beyond end of device
[  278.540556][T26050] loop2: rw=1, sector=217, nr_sectors = 8 limit=128
[  278.554460][T26050] syz.2.8680: attempt to access beyond end of device
[  278.554460][T26050] loop2: rw=1, sector=233, nr_sectors = 8 limit=128
[  278.568513][T26050] syz.2.8680: attempt to access beyond end of device
[  278.568513][T26050] loop2: rw=1, sector=249, nr_sectors = 8 limit=128
[  278.585430][T26050] syz.2.8680: attempt to access beyond end of device
[  278.585430][T26050] loop2: rw=1, sector=265, nr_sectors = 8 limit=128
[  278.601193][T26050] syz.2.8680: attempt to access beyond end of device
[  278.601193][T26050] loop2: rw=1, sector=281, nr_sectors = 8 limit=128
[  278.614782][T26050] syz.2.8680: attempt to access beyond end of device
[  278.614782][T26050] loop2: rw=1, sector=297, nr_sectors = 8 limit=128
[  278.992177][T26086] __nla_validate_parse: 11 callbacks suppressed
[  278.992194][T26086] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8698'.
[  279.018488][T26086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8698'.
[  279.180930][T26103] netlink: 'syz.5.8705': attribute type 21 has an invalid length.
[  279.188898][T26103] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8705'.
[  279.212865][T26103] netlink: 'syz.5.8705': attribute type 6 has an invalid length.
[  279.220731][T26103] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8705'.
[  279.222938][T26107] netlink: 3 bytes leftover after parsing attributes in process `syz.6.8706'.
[  279.263190][T26107] batadv3: entered promiscuous mode
[  279.268486][T26107] batadv3: entered allmulticast mode
[  279.396350][ T3351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3351 comm=kworker/1:2
[  279.410252][T26126] 9pnet: p9_errstr2errno: server reported unknown error 18446744
[  279.453480][T26131] pimreg: entered allmulticast mode
[  279.468752][T26131] pimreg: left allmulticast mode
[  279.485440][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  279.512306][   T29] kauditd_printk_skb: 196 callbacks suppressed
[  279.512372][   T29] audit: type=1326 audit(1759250396.754:11037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.9.8724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831b6eec9 code=0x7ffc0000
[  279.561840][   T29] audit: type=1326 audit(1759250396.794:11038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.9.8724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff831b6eec9 code=0x7ffc0000
[  279.585536][   T29] audit: type=1326 audit(1759250396.794:11039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.9.8724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831b6eec9 code=0x7ffc0000
[  279.609152][   T29] audit: type=1326 audit(1759250396.794:11040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.9.8724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831b6eec9 code=0x7ffc0000
[  279.632972][   T29] audit: type=1326 audit(1759250396.794:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.9.8724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff831b6eec9 code=0x7ffc0000
[  279.656590][   T29] audit: type=1326 audit(1759250396.794:11042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.9.8724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831b6eec9 code=0x7ffc0000
[  279.680685][   T29] audit: type=1326 audit(1759250396.794:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.9.8724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831b6eec9 code=0x7ffc0000
[  279.704363][   T29] audit: type=1326 audit(1759250396.794:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.9.8724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff831b6eec9 code=0x7ffc0000
[  279.728087][   T29] audit: type=1326 audit(1759250396.794:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.9.8724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831b6eec9 code=0x7ffc0000
[  279.751719][   T29] audit: type=1326 audit(1759250396.794:11046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.9.8724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff831b6eec9 code=0x7ffc0000
[  279.782331][T26149] loop9: detected capacity change from 0 to 1024
[  279.796565][T26149] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  279.825276][T26149] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.8727: Invalid block bitmap block 0 in block_group 0
[  279.854785][T26149] EXT4-fs error (device loop9): ext4_acquire_dquot:6943: comm syz.9.8727: Failed to acquire dquot type 0
[  279.877030][T26149] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.8727: Freeing blocks not in datazone - block = 0, count = 4096
[  279.891826][T26149] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.8727: Invalid inode bitmap blk 0 in block_group 0
[  279.916331][ T4413] EXT4-fs error (device loop9): ext4_release_dquot:6979: comm kworker/u8:31: Failed to release dquot type 0
[  279.919162][T26149] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem
[  279.938575][T26149] EXT4-fs (loop9): 1 orphan inode deleted
[  279.944587][T26149] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.979083][T26149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.990897][T26177] loop8: detected capacity change from 0 to 128
[  279.997799][T26177] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  280.010885][T26177] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  280.066909][T26181] netlink: 'syz.9.8742': attribute type 10 has an invalid length.
[  280.081572][T26181] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  280.112172][T26186] wireguard0: entered promiscuous mode
[  280.117693][T26186] wireguard0: entered allmulticast mode
[  280.130674][T26189] loop9: detected capacity change from 0 to 128
[  280.257542][T26193] netlink: 'syz.5.8745': attribute type 1 has an invalid length.
[  280.265450][T26193] netlink: 'syz.5.8745': attribute type 4 has an invalid length.
[  280.273512][T26193] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.8745'.
[  280.286503][T26193] netlink: 'syz.5.8745': attribute type 1 has an invalid length.
[  280.294283][T26193] netlink: 'syz.5.8745': attribute type 4 has an invalid length.
[  280.302086][T26193] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.8745'.
[  280.326653][T26195] loop9: detected capacity change from 0 to 164
[  280.406260][T26203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8749'.
[  280.416391][T26203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8749'.
[  280.476621][T26211] netlink: 'syz.5.8754': attribute type 10 has an invalid length.
[  280.563819][T26227] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8760'.
[  280.719353][T26239] ip6gre1: entered allmulticast mode
[  280.837044][T26246] loop9: detected capacity change from 0 to 164
[  280.844059][ T4400] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  280.867495][T26248] loop2: detected capacity change from 0 to 512
[  280.890260][T26248] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  280.900376][T15215] IPVS: starting estimator thread 0...
[  280.912324][T26248] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.8772: bg 0: block 104: invalid block bitmap
[  280.932848][T26248] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  280.956231][T26248] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.8772: invalid indirect mapped block 1 (level 1)
[  280.983086][T26248] EXT4-fs (loop2): 1 truncate cleaned up
[  280.993991][T26248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.997438][T26256] IPVS: using max 2736 ests per chain, 136800 per kthread
[  281.044087][T25609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.168002][T26290] loop2: detected capacity change from 0 to 128
[  281.646279][T26314] syzkaller1: entered promiscuous mode
[  281.651791][T26314] syzkaller1: entered allmulticast mode
[  281.745634][ T3351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3351 comm=kworker/1:2
[  281.791167][T26321] loop8: detected capacity change from 0 to 2048
[  281.808448][T26321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.834768][T25589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.140669][T15215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=15215 comm=kworker/0:10
[  282.142753][T26350] syzkaller1: entered promiscuous mode
[  282.159395][T26350] syzkaller1: entered allmulticast mode
[  282.491595][T26402] loop8: detected capacity change from 0 to 512
[  282.508288][T26402] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.517183][T26404] bridge0: entered promiscuous mode
[  282.521601][T26402] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.534372][T26404] macvtap1: entered allmulticast mode
[  282.541837][T26404] bridge0: entered allmulticast mode
[  282.557946][T26404] bridge0: port 3(macvtap1) entered blocking state
[  282.564571][T26404] bridge0: port 3(macvtap1) entered disabled state
[  282.571689][T25589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.582936][T26404] bridge0: left allmulticast mode
[  282.588000][T26404] bridge0: left promiscuous mode
[  282.688961][T26410] loop2: detected capacity change from 0 to 164
[  282.699448][T26410] rock: directory entry would overflow storage
[  282.705699][T26410] rock: sig=0x66, size=4, remaining=3
[  282.713308][T26410] rock: directory entry would overflow storage
[  282.719575][T26410] rock: sig=0x66, size=4, remaining=3
[  282.785530][T26420] 0ªX¹¦À: renamed from caif0
[  282.794607][T26420] 0ªX¹¦À: entered allmulticast mode
[  282.800041][T26420] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  282.859034][T26431] syzkaller0: entered allmulticast mode
[  282.865771][T26431] syzkaller0 (unregistering): left allmulticast mode
[  283.176682][T26484] lo speed is unknown, defaulting to 1000
[  283.553881][T26539] loop2: detected capacity change from 0 to 128
[  283.561209][T26539] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  283.573611][T26539] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  284.184207][T26643] loop8: detected capacity change from 0 to 128
[  284.290798][T26641] bio_check_eod: 13266 callbacks suppressed
[  284.290813][T26641] syz.8.8885: attempt to access beyond end of device
[  284.290813][T26641] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128
[  284.320478][T26641] syz.8.8885: attempt to access beyond end of device
[  284.320478][T26641] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128
[  284.334598][T26641] syz.8.8885: attempt to access beyond end of device
[  284.334598][T26641] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  284.348326][T26641] syz.8.8885: attempt to access beyond end of device
[  284.348326][T26641] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  284.361570][T26641] syz.8.8885: attempt to access beyond end of device
[  284.361570][T26641] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  284.374770][T26641] syz.8.8885: attempt to access beyond end of device
[  284.374770][T26641] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  284.388021][T26641] syz.8.8885: attempt to access beyond end of device
[  284.388021][T26641] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  284.401440][ T4420] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  284.401890][T26641] syz.8.8885: attempt to access beyond end of device
[  284.401890][T26641] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  284.426972][T26641] syz.8.8885: attempt to access beyond end of device
[  284.426972][T26641] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  284.440355][T26641] syz.8.8885: attempt to access beyond end of device
[  284.440355][T26641] loop8: rw=0, sector=145, nr_sectors = 8 limit=128
[  284.457241][T26647] loop2: detected capacity change from 0 to 512
[  284.468231][T26647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.486452][T26647] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.560773][T26654] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #12: comm syz.2.8886: corrupted xattr block 6: invalid header
[  284.575754][T26654] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=12
[  284.597710][T25609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.724220][T26658] __nla_validate_parse: 10 callbacks suppressed
[  284.724233][T26658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8889'.
[  284.744215][T26656] lo speed is unknown, defaulting to 1000
[  284.774147][T26658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8889'.
[  284.866088][T26664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8891'.
[  284.881290][T26662] lo speed is unknown, defaulting to 1000
[  284.890028][T26664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8891'.
[  284.933472][T26664] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8891'.
[  284.944672][T26664] netlink: 6 bytes leftover after parsing attributes in process `syz.6.8891'.
[  285.009282][   T29] kauditd_printk_skb: 181 callbacks suppressed
[  285.009297][   T29] audit: type=1326 audit(1759250402.254:11225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26671 comm="syz.6.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  285.039281][   T29] audit: type=1326 audit(1759250402.254:11226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26671 comm="syz.6.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  285.062883][   T29] audit: type=1326 audit(1759250402.254:11227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26671 comm="syz.6.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  285.086451][   T29] audit: type=1326 audit(1759250402.254:11228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26671 comm="syz.6.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  285.110060][   T29] audit: type=1326 audit(1759250402.254:11229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26671 comm="syz.6.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  285.133735][   T29] audit: type=1326 audit(1759250402.254:11230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26671 comm="syz.6.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  285.157349][   T29] audit: type=1326 audit(1759250402.254:11231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26671 comm="syz.6.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  285.180906][   T29] audit: type=1326 audit(1759250402.254:11232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26671 comm="syz.6.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  285.204397][   T29] audit: type=1326 audit(1759250402.254:11233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26671 comm="syz.6.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  285.227955][   T29] audit: type=1326 audit(1759250402.254:11234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26671 comm="syz.6.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f17d983eec9 code=0x7ffc0000
[  285.355314][T26690] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8902'.
[  285.542393][T26697] loop9: detected capacity change from 0 to 1024
[  285.575089][T26697] EXT4-fs: Ignoring removed orlov option
[  285.618328][T26701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8904'.
[  285.628150][T26701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8904'.
[  285.643085][T26703] loop2: detected capacity change from 0 to 1024
[  285.651587][T26703] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  285.664245][T26703] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.8905: Invalid block bitmap block 0 in block_group 0
[  285.682167][T26703] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.8905: Failed to acquire dquot type 0
[  285.703563][T26703] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.8905: Freeing blocks not in datazone - block = 0, count = 4096
[  285.718996][T26703] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.8905: Invalid inode bitmap blk 0 in block_group 0
[  285.731937][T26703] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  285.740602][ T4420] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:38: Failed to release dquot type 0
[  285.754446][T26697] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.775288][T26703] EXT4-fs (loop2): 1 orphan inode deleted
[  285.782052][T26703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.795213][T25611] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.811697][T26699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.825774][T26708] rtc_cmos 00:00: Alarms can be up to one day in the future
[  285.833451][ T3351] rtc_cmos 00:00: Alarms can be up to one day in the future
[  285.841193][ T3351] rtc_cmos 00:00: Alarms can be up to one day in the future
[  285.848735][ T3351] rtc_cmos 00:00: Alarms can be up to one day in the future
[  285.856276][ T3351] rtc_cmos 00:00: Alarms can be up to one day in the future
[  285.863548][ T3351] rtc rtc0: __rtc_set_alarm: err=-22
[  285.870794][T26711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8907'.
[  286.054722][T26723] loop2: detected capacity change from 0 to 128
[  286.238587][T26741] loop9: detected capacity change from 0 to 512
[  286.266921][T26741] EXT4-fs warning (device loop9): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  286.306868][T26741] EXT4-fs (loop9): mount failed
[  286.535032][T26765] loop9: detected capacity change from 0 to 512
[  286.578335][T26765] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.651335][T26765] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.747790][T26782] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #12: comm syz.9.8930: corrupted xattr block 6: invalid header
[  286.797444][T26782] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=12
[  286.834469][T25611] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.307256][T26840] loop8: detected capacity change from 0 to 512
[  287.326472][T26840] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  287.352660][T26840] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.8963: bg 0: block 104: invalid block bitmap
[  287.380927][T26840] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  287.397859][T26840] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8963: invalid indirect mapped block 1 (level 1)
[  287.415694][T26840] EXT4-fs (loop8): 1 truncate cleaned up
[  287.426348][T26840] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.471645][T25589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.952314][T26874] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  287.983030][T26874] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  288.170584][T26876] lo speed is unknown, defaulting to 1000
[  288.338552][T26876] chnl_net:caif_netlink_parms(): no params data found
[  288.400378][T26876] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.407479][T26876] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.420606][T26876] bridge_slave_0: entered allmulticast mode
[  288.427137][T26876] bridge_slave_0: entered promiscuous mode
[  288.434112][T26876] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.441284][T26876] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.448465][T26876] bridge_slave_1: entered allmulticast mode
[  288.454991][T26876] bridge_slave_1: entered promiscuous mode
[  288.473949][T26876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.484456][T26876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.504455][T26876] team0: Port device team_slave_0 added
[  288.511091][T26876] team0: Port device team_slave_1 added
[  288.528435][T26876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.535400][T26876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.561462][T26876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.572885][T26876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.579872][T26876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.605819][T26876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.648314][T26876] hsr_slave_0: entered promiscuous mode
[  288.654623][T26876] hsr_slave_1: entered promiscuous mode
[  288.662345][T26876] debugfs: 'hsr0' already exists in 'hsr'
[  288.668099][T26876] Cannot create hsr debugfs directory
[  288.785432][T26876] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.839795][T26876] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.898333][T26876] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.948683][T26876] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.020952][T26921] loop9: detected capacity change from 0 to 128
[  289.129490][T26876] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  289.156516][T26876] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  289.174426][T26876] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  289.193761][T26876] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  289.296971][T26918] bio_check_eod: 15328 callbacks suppressed
[  289.296985][T26918] syz.9.8987: attempt to access beyond end of device
[  289.296985][T26918] loop9: rw=0, sector=145, nr_sectors = 8 limit=128
[  289.318490][T26918] syz.9.8987: attempt to access beyond end of device
[  289.318490][T26918] loop9: rw=0, sector=145, nr_sectors = 8 limit=128
[  289.331728][T26918] syz.9.8987: attempt to access beyond end of device
[  289.331728][T26918] loop9: rw=0, sector=145, nr_sectors = 8 limit=128
[  289.346857][T26918] syz.9.8987: attempt to access beyond end of device
[  289.346857][T26918] loop9: rw=0, sector=145, nr_sectors = 8 limit=128
[  289.368861][T26918] syz.9.8987: attempt to access beyond end of device
[  289.368861][T26918] loop9: rw=0, sector=145, nr_sectors = 8 limit=128
[  289.382755][T26918] syz.9.8987: attempt to access beyond end of device
[  289.382755][T26918] loop9: rw=0, sector=145, nr_sectors = 8 limit=128
[  289.398797][T26918] syz.9.8987: attempt to access beyond end of device
[  289.398797][T26918] loop9: rw=0, sector=145, nr_sectors = 8 limit=128
[  289.412153][T26918] syz.9.8987: attempt to access beyond end of device
[  289.412153][T26918] loop9: rw=0, sector=145, nr_sectors = 8 limit=128
[  289.426018][T26918] syz.9.8987: attempt to access beyond end of device
[  289.426018][T26918] loop9: rw=0, sector=145, nr_sectors = 8 limit=128
[  289.439372][T26918] syz.9.8987: attempt to access beyond end of device
[  289.439372][T26918] loop9: rw=0, sector=145, nr_sectors = 8 limit=128
[  290.130765][T26945] lo speed is unknown, defaulting to 1000
[  290.194065][T26945] chnl_net:caif_netlink_parms(): no params data found
[  290.224679][T26945] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.231796][T26945] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.239311][T26945] bridge_slave_0: entered allmulticast mode
[  290.245659][T26945] bridge_slave_0: entered promiscuous mode
[  290.252217][T26945] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.259541][T26945] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.266746][T26945] bridge_slave_1: entered allmulticast mode
[  290.273165][T26945] bridge_slave_1: entered promiscuous mode
[  290.290022][T26945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.300210][T26945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.318776][T26945] team0: Port device team_slave_0 added
[  290.325118][T26945] team0: Port device team_slave_1 added
[  290.339246][T26945] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.346207][T26945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.372144][T26945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.383386][T26945] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.390373][T26945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.416316][T26945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.441481][T26945] hsr_slave_0: entered promiscuous mode
[  290.447371][T26945] hsr_slave_1: entered promiscuous mode
[  290.453035][T26945] debugfs: 'hsr0' already exists in 'hsr'
[  290.458756][T26945] Cannot create hsr debugfs directory
[  290.709254][T26945] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  290.719696][T26945] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  290.732440][T26945] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  290.741339][T26945] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  290.769866][T26945] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.777019][T26945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.784280][T26945] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.791377][T26945] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.821355][T26961] lo speed is unknown, defaulting to 1000
[  290.857565][T26945] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.881854][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.889879][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.908090][T26945] 8021q: adding VLAN 0 to HW filter on device team0
[  290.934006][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.941147][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.953445][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.960519][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.024089][T26961] chnl_net:caif_netlink_parms(): no params data found
[  291.090541][T26945] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.113866][T26961] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.121122][T26961] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.131532][T26961] bridge_slave_0: entered allmulticast mode
[  291.138138][T26961] bridge_slave_0: entered promiscuous mode
[  291.149549][T26961] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.156721][T26961] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.163972][T26961] bridge_slave_1: entered allmulticast mode
[  291.177549][T26961] bridge_slave_1: entered promiscuous mode
[  291.196065][T26961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.206646][T26961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.227672][T26961] team0: Port device team_slave_0 added
[  291.234250][T26961] team0: Port device team_slave_1 added
[  291.251722][T26961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.258789][T26961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.284807][T26961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.296420][T26961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.303355][T26961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.329289][T26961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.358903][T26961] hsr_slave_0: entered promiscuous mode
[  291.364905][T26961] hsr_slave_1: entered promiscuous mode
[  291.370826][T26961] debugfs: 'hsr0' already exists in 'hsr'
[  291.376567][T26961] Cannot create hsr debugfs directory
[  291.388249][T26945] veth0_vlan: entered promiscuous mode
[  291.402726][T26945] veth1_vlan: entered promiscuous mode
[  291.421453][T26945] veth0_macvtap: entered promiscuous mode
[  291.439407][T26945] veth1_macvtap: entered promiscuous mode
[  291.459902][T26945] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.478810][T26945] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.494125][ T4420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.504997][ T4420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.524984][ T4420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.542004][ T4420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.562344][   T29] kauditd_printk_skb: 145 callbacks suppressed
[  291.562403][   T29] audit: type=1400 audit(1759250408.804:11376): avc:  denied  { read write } for  pid=26945 comm="syz-executor" name="loop1" dev="devtmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  291.592389][   T29] audit: type=1400 audit(1759250408.804:11377): avc:  denied  { open } for  pid=26945 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  291.615889][   T29] audit: type=1400 audit(1759250408.804:11378): avc:  denied  { ioctl } for  pid=26945 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=1109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  291.644450][T27002] loop1: detected capacity change from 0 to 164
[  291.665433][T27002] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  291.689468][T27002] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  291.709101][T27002] rock: directory entry would overflow storage
[  291.715281][T27002] rock: sig=0x4f50, size=4, remaining=3
[  291.720916][T27002] iso9660: Corrupted directory entry in block 4 of inode 1792
[  291.758997][T26997] lo speed is unknown, defaulting to 1000
[  291.805971][T27014] loop1: detected capacity change from 0 to 1024
[  291.851346][T27014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.900370][T27014] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.9005: Allocating blocks 449-513 which overlap fs metadata
[  291.924298][T26961] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  291.945330][T27013] EXT4-fs (loop1): pa ffff8881072838c0: logic 48, phys. 177, len 21
[  291.953409][T27013] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4
[  291.957804][T26961] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  291.994819][T26961] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  292.007763][T26945] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.021311][T26961] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  292.108159][T27037] vlan3: entered allmulticast mode
[  292.118134][T26997] chnl_net:caif_netlink_parms(): no params data found
[  292.158246][T26997] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.165306][T26997] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.184428][T26997] bridge_slave_0: entered allmulticast mode
[  292.191282][T26997] bridge_slave_0: entered promiscuous mode
[  292.199749][T26997] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.206831][T26997] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.214088][T26997] bridge_slave_1: entered allmulticast mode
[  292.220912][T26997] bridge_slave_1: entered promiscuous mode
[  292.246294][T26997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.269750][T26961] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.288393][T26997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.320700][T26997] team0: Port device team_slave_0 added
[  292.328409][T26997] team0: Port device team_slave_1 added
[  292.353722][T26997] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.360793][T26997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.386862][T26997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.400986][T26997] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.407972][T26997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.433958][T26997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.494757][T26961] 8021q: adding VLAN 0 to HW filter on device team0
[  292.505193][T27082] __nla_validate_parse: 6 callbacks suppressed
[  292.505209][T27082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9023'.
[  292.541032][T26961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  292.551409][T26961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  292.581509][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.588649][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.602409][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.609534][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.653492][T26997] hsr_slave_0: entered promiscuous mode
[  292.663803][T26997] hsr_slave_1: entered promiscuous mode
[  292.675268][T26997] debugfs: 'hsr0' already exists in 'hsr'
[  292.681109][T26997] Cannot create hsr debugfs directory
[  292.707124][T26961] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.870020][T27124] lo speed is unknown, defaulting to 1000
[  292.911359][T26961] veth0_vlan: entered promiscuous mode
[  292.920234][T26961] veth1_vlan: entered promiscuous mode
[  292.948169][T26961] veth0_macvtap: entered promiscuous mode
[  292.982634][T26961] veth1_macvtap: entered promiscuous mode
[  293.010214][T26961] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.035059][T26961] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.067072][ T4398] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.093998][T26997] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  293.112330][ T4398] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.131533][T26997] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  293.150762][ T4398] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.161241][ T4412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.180757][T26997] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  293.244741][T26997] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  293.354824][T27204] loop9: detected capacity change from 0 to 2048
[  293.377541][T27204] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.400568][T26997] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.412441][T27204] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  293.427470][   T29] audit: type=1400 audit(1759250410.654:11379): avc:  denied  { link } for  pid=27202 comm="syz.9.9032" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  293.455966][T26997] 8021q: adding VLAN 0 to HW filter on device team0
[  293.471921][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.479005][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.509688][T25611] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.509854][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.525775][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.562332][T27211] loop1: detected capacity change from 0 to 1024
[  293.600723][T27211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.623422][T27211] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.9034: Allocating blocks 385-513 which overlap fs metadata
[  293.650320][T26997] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.669354][T27211] EXT4-fs (loop1): pa ffff8881072839a0: logic 16, phys. 129, len 24
[  293.677493][T27211] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  293.738804][T26945] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.820117][T26997] veth0_vlan: entered promiscuous mode
[  293.836290][T26997] veth1_vlan: entered promiscuous mode
[  293.874271][T26997] veth0_macvtap: entered promiscuous mode
[  293.892150][T26997] veth1_macvtap: entered promiscuous mode
[  293.965066][T26997] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.976875][T26997] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.990646][ T4417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.010070][ T4417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.019371][ T4417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.037922][ T4417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.058794][   T29] audit: type=1400 audit(1759250411.304:11380): avc:  denied  { write } for  pid=26997 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object"
[  294.084636][   T29] audit: type=1400 audit(1759250411.304:11381): avc:  denied  { open } for  pid=26997 comm="syz-executor" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object"
[  294.261625][   T29] audit: type=1400 audit(1759250411.504:11382): avc:  denied  { mount } for  pid=27269 comm="syz.0.9053" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  294.292898][   T29] audit: type=1400 audit(1759250411.534:11383): avc:  denied  { unmount } for  pid=26997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  294.345366][   T29] audit: type=1326 audit(1759250411.584:11384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27271 comm="syz.9.9055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff831b65d67 code=0x7ffc0000
[  294.379729][   T29] audit: type=1326 audit(1759250411.614:11385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27271 comm="syz.9.9055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff831b0af79 code=0x7ffc0000
[  294.818447][T27309] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9071'.
[  294.974553][T27325] wireguard0: entered promiscuous mode
[  294.980096][T27325] wireguard0: entered allmulticast mode
[  295.385631][    C1] ==================================================================
[  295.393741][    C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick
[  295.400950][    C1] 
[  295.403267][    C1] read-write to 0xffff8881012426b8 of 8 bytes by interrupt on cpu 0:
[  295.411334][    C1]  wq_worker_tick+0x60/0x230
[  295.415934][    C1]  sched_tick+0x11a/0x270
[  295.420264][    C1]  update_process_times+0x15f/0x190
[  295.425473][    C1]  tick_nohz_handler+0x249/0x2d0
[  295.430407][    C1]  __hrtimer_run_queues+0x20c/0x5a0
[  295.435604][    C1]  hrtimer_interrupt+0x21a/0x460
[  295.440533][    C1]  __sysvec_apic_timer_interrupt+0x5c/0x1d0
[  295.446422][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  295.452052][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  295.458018][    C1]  cpus_read_lock+0x50/0xb0
[  295.462504][    C1]  static_key_slow_dec+0x2c/0x70
[  295.467426][    C1]  io_ring_ctx_free+0x23d/0x3a0
[  295.472265][    C1]  io_ring_exit_work+0x529/0x560
[  295.477192][    C1]  process_scheduled_works+0x4ce/0x9d0
[  295.482645][    C1]  worker_thread+0x582/0x770
[  295.487228][    C1]  kthread+0x486/0x510
[  295.491281][    C1]  ret_from_fork+0x11f/0x1b0
[  295.495861][    C1]  ret_from_fork_asm+0x1a/0x30
[  295.500610][    C1] 
[  295.502910][    C1] read-write to 0xffff8881012426b8 of 8 bytes by interrupt on cpu 1:
[  295.510962][    C1]  wq_worker_tick+0x60/0x230
[  295.515534][    C1]  sched_tick+0x11a/0x270
[  295.519856][    C1]  update_process_times+0x15f/0x190
[  295.525050][    C1]  tick_nohz_handler+0x249/0x2d0
[  295.529974][    C1]  __hrtimer_run_queues+0x20c/0x5a0
[  295.535156][    C1]  hrtimer_interrupt+0x21a/0x460
[  295.540082][    C1]  __sysvec_apic_timer_interrupt+0x5c/0x1d0
[  295.545969][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  295.551594][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  295.557559][    C1]  __tsan_read8+0x2c/0x190
[  295.561972][    C1]  uncharge_batch+0xad/0x190
[  295.566546][    C1]  __mem_cgroup_uncharge_folios+0x86/0xb0
[  295.572248][    C1]  folios_put_refs+0x26e/0x2d0
[  295.576994][    C1]  release_pages+0x2a8/0x2f0
[  295.581568][    C1]  io_free_region+0x7b/0x160
[  295.586152][    C1]  io_ring_ctx_free+0x1de/0x3a0
[  295.590991][    C1]  io_ring_exit_work+0x529/0x560
[  295.595914][    C1]  process_scheduled_works+0x4ce/0x9d0
[  295.601370][    C1]  worker_thread+0x582/0x770
[  295.605961][    C1]  kthread+0x486/0x510
[  295.610030][    C1]  ret_from_fork+0x11f/0x1b0
[  295.614622][    C1]  ret_from_fork_asm+0x1a/0x30
[  295.619374][    C1] 
[  295.621681][    C1] value changed: 0x0000000000144b50 -> 0x0000000000147260
[  295.628767][    C1] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  295.631102][    C1] Reported by Kernel Concurrency Sanitizer on:
[  295.637235][    C1] CPU: 1 UID: 0 PID: 4409 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  295.647206][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  295.657245][    C1] Workqueue: iou_exit io_ring_exit_work
[  295.662783][    C1] ==================================================================