last executing test programs:

2.389053236s ago: executing program 2 (id=3890):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000280)={0x0, 0x9dc5, 0x2, 0x0, 0x3})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x8, 0x8, 0x0, 0x800, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020200000500010006000000"], 0x44}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x20)
symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00')
openat(r8, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4)
r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', <r10=>0x0})
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}]}}]}, 0x54}}, 0x20040054)
sendmsg$TEAM_CMD_NOOP(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0x198, r9, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x2, 0x55, 0x8}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x800}, 0x8001)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x24000004)

2.274108398s ago: executing program 2 (id=3895):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x60101, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="fb4e8403aa2e08ae02b69b9b95e2aaf61d0700000000000000000000d86ff0f8396088e403adc534dc25", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

1.6039452s ago: executing program 1 (id=3904):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0}}, 0x18)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x80)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x4032}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x12, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x2d83c067, 0x25, &(0x7f0000000180)=""/37, 0x41000, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=[{0x4, 0x5, 0xf}, {0x1, 0x4, 0x7, 0x5}, {0x0, 0x2, 0xe, 0x2}, {0x5, 0x4, 0x10, 0xb}], 0x10, 0x400}, 0x94)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0082b9689459820311c72c83e80000", @ANYRES16=r10, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)

1.383229594s ago: executing program 2 (id=3906):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x4800, 0x0)

1.364409975s ago: executing program 1 (id=3907):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x7ff, 0x800003, 0x5, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x8c2f, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
fcntl$notify(0xffffffffffffffff, 0x402, 0x40000029)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x14)

1.289164416s ago: executing program 2 (id=3908):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32, @ANYRES16], 0x34}}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xffffdffc, 0x100, 0xfffffffc, 0x145})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{0x0}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0)
r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0)
timer_create(0x3, &(0x7f0000000200)={0x0, 0x21, 0x1, @thr={&(0x7f0000000c00)="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", &(0x7f0000000500)="ae34e5d8a3707b23d631258d17dfa81be82d31d55f7ac9a61666f8d9a19a6d76d4aa87a1a7eaf6335fcbb64591435b2465154818902f79b45e662a1f102579f8aa8c6d5afa48a50ba75a1da41162c5e3294397267677149c63cbaf7433ae6d8ab02ad0594537f74bbca083567b8964f081e916a7d84d468107506dc39fccc74fe2a6178adcd78b828966d4c30b3d80048b2980604caaa42a58702a7d60bde01ecc36c10e7bb1b2cb744831a846b15dccc0781465e665a9bc95af602c8bef5bfde79ec7a180"}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
setreuid(0xee01, 0x0)
syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0)
open(&(0x7f0000000240)='./bus\x00', 0x100, 0x2)
close(r4)
close_range(r3, 0xffffffffffffffff, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
chmod(&(0x7f00000001c0)='./bus\x00', 0x30)

1.140754579s ago: executing program 2 (id=3912):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000e80)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="e7ff56fbffffffffffff0000006ddb0106491af96300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10)
syz_io_uring_setup(0x75f1, &(0x7f0000000340)={0x0, 0x7bc3, 0x1000, 0x3, 0x1e9, 0x0, r0}, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000003c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000400)=0x5, 0x0, 0x4)
sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f0000000640)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000bc0), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="14000000000000000000000002000000cb0a00000000000044000000000000000000000007000000860a000000030704764689275464010102ac1414aa6401010064010102ac1414aaffffffff64010102ac1414bb0a010101000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="64010102e000000100000000"], 0x208}, 0x4004)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x5)

869.855674ms ago: executing program 0 (id=3913):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = io_uring_setup(0x2754, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0)
r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0)
timer_create(0x3, &(0x7f0000000200)={0x0, 0x21, 0x1, @thr={&(0x7f0000000c00)="3564fcfa2c3e57b887735c6ef5ec23e51846dd6567c35cf758a2dda6fb0e74c28f496b92ce0127c9f9fd9ddee782c8a995047c83a51c3c31c49db4bf78eb5b2e18991f094512367eda807a657d4bcfbbbe4b2d9d6ccc82eb2a81b4157b7ca25165f210319ae3a2324b665cc18aebb7edda7142366ecf2232a42fabe677a6e45b3341d04fd436bf6925aee24a6fb425b7aeba6ac95c856530ffea307bdea6b61d2879f144078829d289d8020000000000000015ce248ce7e2ffe8093a75c688363c65111f83d60ccc33fe28e6edb2c710e99a646f76a0ef57836a5afa79b1f77c43774faa3888b4e70dc60900d9cc9aec7fe8f1c2", &(0x7f0000000500)="ae34e5d8a3707b23d631258d17dfa81be82d31d55f7ac9a61666f8d9a19a6d76d4aa87a1a7eaf6335fcbb64591435b2465154818902f79b45e662a1f102579f8aa8c6d5afa48a50ba75a1da41162c5e3294397267677149c63cbaf7433ae6d8ab02ad0594537f74bbca083567b8964f081e916a7d84d468107506dc39fccc74fe2a6178adcd78b828966d4c30b3d80048b2980604caaa42a58702a7d60bde01ecc36c10e7bb1b2cb744831a846b15dccc0781465e665a9bc95af602c8bef5bfde79ec7a180"}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
fcntl$setlease(r4, 0x400, 0x1)
setreuid(0xee01, 0x0)
r5 = syz_pidfd_open(0x0, 0x0)
setns(r5, 0x24020000)
syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0)
open(&(0x7f0000000240)='./bus\x00', 0x100, 0x2)
open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c)
close(r4)
close_range(r3, 0xffffffffffffffff, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
chmod(&(0x7f00000001c0)='./bus\x00', 0x30)

796.554345ms ago: executing program 4 (id=3914):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

791.563435ms ago: executing program 2 (id=3915):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x10)
setresuid(0xee01, 0xee00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="16", 0x1}], 0x1}}], 0x1, 0xc8040)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r8, 0x0, 0xf7}, 0x18)
utimes(0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=ANY=[@ANYBLOB="4800000010000b042dbd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="f224000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004000000"], 0x48}}, 0x0)

740.315596ms ago: executing program 4 (id=3916):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r0, 0x1, 0xea, 0xa6ff, {{}, {0x0, 0x3}, {0x14, 0x19, {0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4058}, 0x0)

717.252756ms ago: executing program 4 (id=3917):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0}}, 0x18)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x80)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x4032}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x12, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x2d83c067, 0x25, &(0x7f0000000180)=""/37, 0x41000, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=[{0x4, 0x5, 0xf}, {0x1, 0x4, 0x7, 0x5}, {0x0, 0x2, 0xe, 0x2}, {0x5, 0x4, 0x10, 0xb}], 0x10, 0x400}, 0x94)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0082b9689459820311c72c83e80000", @ANYRES16=r10, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)

676.618717ms ago: executing program 0 (id=3918):
prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0)

621.622239ms ago: executing program 4 (id=3919):
r0 = epoll_create1(0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r1, 0x406, r2)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x90000014})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000580)={0xa0002008})
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x89d)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1d58078d8c26741e}, 0x44000)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18)
tgkill(0x0, 0x0, 0x13)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010700000000000000002000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0))
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)

598.760319ms ago: executing program 0 (id=3920):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r7}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r9, 0x0, 0x5}, 0x18)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)

501.829341ms ago: executing program 4 (id=3923):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
preadv(r1, &(0x7f0000001400), 0x0, 0x0, 0x0)

490.652121ms ago: executing program 0 (id=3924):
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="b9eaf60e13ad2f757066dad0f6e96479714efafa3baa39855b5555583fcd9f66189d5d4de992650c5f5be98baa74cb42d6d2420ec2d87f59", @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES8=r1, @ANYBLOB="44f9f0cb9d1040497ef0fd3007cadbaf4db10fd86e529755a68f4a4d57b625f665bc445d6b76"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000340), 0x6}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYRESOCT, @ANYRES32=r1, @ANYRES16], 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r3}, 0x10)
r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
close(r6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0)
close(0xffffffffffffffff)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)

484.524951ms ago: executing program 3 (id=3925):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4002}, 0x50)

423.944372ms ago: executing program 4 (id=3926):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x7ff, 0x800003, 0x5, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

423.085032ms ago: executing program 3 (id=3927):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r0, 0x1, 0xea, 0xa6ff, {{}, {0x0, 0x3}, {0x14, 0x19, {0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4058}, 0x0)

411.718712ms ago: executing program 1 (id=3928):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = io_uring_setup(0x2754, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0)
r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0)
timer_create(0x3, &(0x7f0000000200)={0x0, 0x21, 0x1, @thr={&(0x7f0000000c00)="3564fcfa2c3e57b887735c6ef5ec23e51846dd6567c35cf758a2dda6fb0e74c28f496b92ce0127c9f9fd9ddee782c8a995047c83a51c3c31c49db4bf78eb5b2e18991f094512367eda807a657d4bcfbbbe4b2d9d6ccc82eb2a81b4157b7ca25165f210319ae3a2324b665cc18aebb7edda7142366ecf2232a42fabe677a6e45b3341d04fd436bf6925aee24a6fb425b7aeba6ac95c856530ffea307bdea6b61d2879f144078829d289d8020000000000000015ce248ce7e2ffe8093a75c688363c65111f83d60ccc33fe28e6edb2c710e99a646f76a0ef57836a5afa79b1f77c43774faa3888b4e70dc60900d9cc9aec7fe8f1c2", &(0x7f0000000500)="ae34e5d8a3707b23d631258d17dfa81be82d31d55f7ac9a61666f8d9a19a6d76d4aa87a1a7eaf6335fcbb64591435b2465154818902f79b45e662a1f102579f8aa8c6d5afa48a50ba75a1da41162c5e3294397267677149c63cbaf7433ae6d8ab02ad0594537f74bbca083567b8964f081e916a7d84d468107506dc39fccc74fe2a6178adcd78b828966d4c30b3d80048b2980604caaa42a58702a7d60bde01ecc36c10e7bb1b2cb744831a846b15dccc0781465e665a9bc95af602c8bef5bfde79ec7a180"}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
fcntl$setlease(r4, 0x400, 0x1)
setreuid(0xee01, 0x0)
r5 = syz_pidfd_open(0x0, 0x0)
setns(r5, 0x24020000)
syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0)
open(&(0x7f0000000240)='./bus\x00', 0x100, 0x2)
open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c)
close(r4)
close_range(r3, 0xffffffffffffffff, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
chmod(&(0x7f00000001c0)='./bus\x00', 0x30)

391.338473ms ago: executing program 3 (id=3929):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r0}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7f0, &(0x7f0000001d80)="$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")
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
rt_sigpending(0x0, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000))
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000002580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x1310, 0xc, 0xa, 0x901, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x12f4, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "7fbcb3f484eca8de17526cc0c4771da752817d67aba3b76cbac7be1649afaa49a1178f0532af85f33fdbade397e25981c5f71131204692ecae727f7238f11dfcfd2e6f30a7c3da499a50d719509bfa85642179b6a2a9d68f485fa3315c2092e513ded970c2bfe7994e139cfcceb32f174e40cebc77d0621861d2c1e7f2d48285cf70fc7b53ca251987a90f35155ab4ecbbe2043ce46be305b1ade34a897889e4bddbfd7a8e6b339cd7465b5b2dd54e76e2d3f5c60f6f0c855c1bf3c5b452a05d59d1312c34fbf35b2bbf88de84e52ea9ad2566"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7, 0x1, "f30814"}, @NFTA_DATA_VALUE={0x65, 0x1, "b7020caac784b23c86a8676d388ad2417105e3b434a59f16c29bed4ab680050c7cff6f2604d44f34e45c9021d64f746dd417ff1a8de468229731781605e8e7412593f986be306cf047748b5c68629977dbaf003069f12174bdf9b75111be0e26fe"}]}]}, {0x1150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x114c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xc5, 0x1, "f793e08bced7e0efb71ec86a5e2b11d85910887ba2cf1dad912180edda8262926866509af7a58923669969972561143eef03c83eb872daeecb3ae3409a94d4d01b7c9baed83844da9e394552915df9e4e4c63a48533037f7bf542007af4e3c51787a07347d8fa351b2af2763a739b4e2bb4868bc86d3aa98402b31635e6b41e0c534971e5292bba3b3a410b6a0aeba4a8bd10292f2c8a6f0a20e909db5b72940ac2061bedce029f484521e73154983470127049aaf9275a62d12f2371e5a088ba1"}, @NFTA_DATA_VALUE={0x1004, 0x1, "3488030f6fa47332f90712cfa6d530e71e4c6c5f9ca90f81438e358270d4f9643f8b8ea9b8f5cf3f141300fec10958e2b1aca56aaea4be1b33a4d920545c7cbbdd294004bedb147483416acbd1a8cbd50f5ee7c58c44a8c662af7261237628333e2648c42ac369cac13699c2712cddb868fcd75c287fbfb028dbecd17b6ecfc01bbc87b2b4a2b2f5a691026e70315d07b5d7198d1077aae5a2f31adb94fd3feb19fbfb388beab500ea34c2037fbd614c7f4f2d3e92974410fa3e17763e0afdb57d8d073ba070e4c75cd48ae8eabeafeb8cd5e0d80ba9fbda79d26a56e8c09c76cb5660b29d94f623eb862823c5816a4876ffd9ead86e6242fe79bdadd6e48944123bcb596f49905dfc93b6ddc9b7230009eb8a0fba3629256e80b07a3cdf6002298f524f14d04eae97052a22cd2755fe71bb8afecfbdca1f73f870911f9859cc5086c4a4853c89263dcbd65136594564fd02bd398a7c0b8065cab5f6283a0b644dea0ee8f6f535ca3b20a929b23534365a3c3c8627af10bfb47648f7d1b2c6fa58a0fbf62703d7b7a6b14defcc7253e7cffe34d0da7ab374ed3a728e3d47124dbed39f83ec3b89833eb37b967e641aec7d3b7ce9120d4d476850845cfb254784b318b8c564f4ac83fffd06562fb0e5eb80b77047d53544b4e3d87039c122038a8ac61b326969a2dfbf400db2a918f793361f766762ebd1479b658d5ca05424bbfa26273d92112344fe46e17933a98e21853e6d2fb7da8a7123302bd42f5b72c7b4aefc40af69f073b14082426c058551a53720ef05ccfa8e5bb767e8ffad514983c3d9fe14194112209bfd0b41b10d00fa6378fbc3df4514c86b5c531c860279ec01122cdefdae058877995ccb582229b0b94aaa910576795970a21afeac9973c2e9e5f57cf7ee24d3b5740901299578a7fe0ba99be61e0a5b7fd1a14c492d31111002f2acefef36b557054437081d21aca6992bc89401eb32b0149f0ca6985813c5ffa6ad7cd70f7d0112f589d8ddaf808a74e14423a4d45eeccf82c4fe7100a7086925e9882beb45e647e06b1f2ab961a3542baa144e45d3d91ca2b0e903118f3157025217ecbb7b5d680d1a01a0a40b2865b9d5d6211d8215bd2083305e0baf8c7a0d9f9ca1e646ae191593de47fe9c948707eaab446a461b966b02097c51a806eabd84fbf0e51583db2c6969f6c7495daeb16d765b3f8bde49d3efcaf5203cc5bce744533d41a87e49260a3f860c657711cc6207231d8538f1d63b2c5b4bb902095f7bdfb30e7e83926f4254ab0a2e4de7b5b24616621c434693a15af6e5fe6ba391e6240d5cd532d108fb91ad2b34ce4a8c6fb76f54016a4d2e7e426c6a0cba8e8f21fe5f3c0cdcdac7d540ddf2954f4c2656bd3b8c85c5f9e4a750d3364f7c809ce41cda4a85acdb9bf418e541ffdbd8449f9dfc1825b87484287d6ce98d0027406633978df84e6f9a06cad6814d0b1b6a0f9f5e540c00ba6432618653bdc3edc9ad815a201b896cecd0691cdfc320d34f43e45085bfb6e7da389769d1c5b7c7f1718d8a03aa53ce4083fa9db2701f6d4ca955438b4aa3e07b818e24f0ee709a40c290bb59866d577d7c7dec7a5ea9f574c2cec56072d45378827d063bba61b8c035537bd45d087b5edbc17d0183d9f20e2b756e0ec6e66b911d939e2ece084bfbcef45937fe1a4f8745af5af048776766702b39d6c73286ed8efe0a9a2d46fb298a1ebdf8cc9ac71987a06b1d2356651f959877b8acaef6d8736eb49fdb7a44c81e44e20e41facffb0e3cc87a345b261c83032636ca574e28e42249f75101cd85338fd4b16f2bfcab8d459e188f262befd5681fca3e0dee7b409e23e9464cb1c8e7e7aedc561ff5433d101007de32a432ed5255b90cea0b30eb4169c3e72d45bdd76ecf966b069653f96250ca7519e27105c0d25ddcc6f67e29870c2ce3c821c0639511bee9b3b1fa7d22333019532a7017e4ad3d6f448ddbaedb899b06d8b7941064b50b0e8ce9e757c97ca3d04268a26b7abdc1f0f4737e67571225076e9677091b5b8392a113d5fb135ae78c7cbab8712934e51548ed3e523bcf97b6045facbaae6ce1551058902d150a70123e135e30ad3b4231be700245e2ec25202db5e0ff48a6f63b3f1e382c1e79e3edc32ff70f34a7ff52888e71550422c6e6d7ec0c409160fc699b6049b9924e7dc59c8e3d3da3e3d51cbd597beef9b0abd21eb64ded34a42ba618d4c3bc1d91b83992730785227334a24f039d93104660835fce894ec89cdb65e8850049d182689fc071e55ad486f44edf8bbfd0654bddcb9c5a49a59c4dcbac4c61fc49ff085937fe333060c2e91ebea318e35c0376f0f3061cd8f17204c9c7dc305d44cabb4dbbda28fa7860e974c1f666217fc09b415a9733d930f67d6815bf34f6790509834475ba3fcc4da7a527731d94642004495827bd7d492c83bb526dc56abc3eb52e40ab78217b7f0fdfb6a889da0d3450c5d1cafe49b1ac82994aac1c4cc4c3e36ffe133be1566e576cdda7d13bcbca4d47eb39befdec686ca619a110d321b0f56a3d4e3e5d377967272fef89ef48c42d7bc4c0c5195bfa9cb06fe3d6e01b5a16d402383e4ce565ed51d99df0483270bd6d327d5b914c6731b52e714a11da5b8b7abbaa7b528d74ff6633b3106a2292c8d46a6d45a5742f85f61f4b8b18046f7edb04f68b2fb1c4678bd89bc8a29a6ce94fa6e9c61a170f9e3f3db4e655f46d0b542298380a2a472b11b3d20c1b9fae8ea37a0097006848f6547b58496084d08b105a3d08389903545a2f0b3e5e7d8531ed4c66351ed4de0b9059d86e9bb797501d9c8397d561f76af3ffe048734646dabc07f7408986308a1d6b9f90e1a48ad721073a6d6ac36f6d738dbd2b84a3d7e9ebde958a45fcb1f2ea0ef07dcc4f26b2d9c4a6f13027204e81ee06e0630ef048ac6f9cfaf80ba45bbc388780b60452343fb9d71ef6c7963dce6ee0e61cc3077f3701b8183d958b5b2891f8d51d67ab53aa3062756ac6f466843ebce3a016fc227252a7b6bbe3ed71690293fdcafd70108d71f9aa82495804a2b479c67911b51a51f9bb44796456f00da4ad5f84bf2c2522e21af04c3d8b43418f41527a663acd8eb3f12287d2c72390fa39d256ec22172d63ece6f1d4ef3c453406171ac6cfae56adb487add5e7ce00a69008875e86df68ec809695e1befcca3471bcca9f2d884424b95b884766c031cf303e8d3e0193959630f2b9e96fa54c14d2c10fa140cb31b83b149e6140d78332c2b4a489ad5a2e6098d45692a457195e2c85e1ed546f0b0082233b5dabdca0efb4719da1c41f8858e8be75771a841165c2628eeb5518050ab820d0a24930877b8b2cabe0a7777e4a3c996eacedf838d06233a1e8b5f33fe3ef6062d3339b7f264f9004510b6760c19004ee354b15a0588c82458e2aecd54e3612057de50874868a5ae1d328891c89370729de51a8caaa95f591f57d9958a03dac3db46f4172b3da522cd5f2b589382e44b0fbd22e56440ba4f5e8b4f7819aa9925a2159e55c90c01f1c8a44aab24d38e438723c73a79c6e32a3f447d58551b39baea47ffe3a7f1bc7b037aa81aadd5dc385d072787404dc4bdd3ccca40d962d305a01e0c420a45e3345e02d51266fc174ada1b59b078f7021322abb9aa79495b7a9359e35b0f1ccc73c793d720c8e98578532c89edb813728b7e37b802680987144a60238f0b1f6a30718c276203f7823e43f10bdbd45a610d082ca925513d481961f9ed706294d2f83c89b8eb7e5d520888321b58a8607b29ef599b8d7fdbc88109290074e28d9438798c36aa5ac6d2dd99cbab377556da71ee952608ad4a1759db53a7a39c280b25d3d4828caba15a873321af37f2f967a6829f7640731efea279e6d3b30ea42d5a266f942687a442cdbb325fc99d6563931d1a495a36e91b2498f624a1754fbf3f2cf1a6ab7a042ffd93ae8c08d7bd1952deb0539359cffe4964cf30373add732380053fa08fa7c1f04493e26f927bc78f9148e83fedbf66f4a956fb6419797f880b8092386272b2b986832686922ae966669028196c6e9209febf2fa6d0bbfc566b97611175772525bb44b4e4dc272064547e4f42f5c541684251693ef80fa4a997dddf8f2eee82b133a76b73533af2f1cd738a68f3a09107d335fc2a43ef8a45362152210c0bb31002b16a16c118a682eddb1c9745dcd3dcf23cc412e02811888c561d1aac76e10218aae734b9cf5229b1230870cb91b787ba6cd9a1acfbf9bcc749158269835dd1f72b40d94bd6d8764cc52ce919f8d4aa9c1bc99822431380d5a5ac11edb76ba919b372cf4ac4a8de87069720af44c80b3487c5a7367cdfd6b1fa08e7264e0b0e0697a4a477e52cd1bedf7d594b28cd7405e2f9bb6b946d8023dbf41d037bf2fe286081752b0ca3aedc78d8f753ac3dad018666ce784e95ece10ebac5ef48a6ff0126466fe4a579d01335d84a74587cd543c796cf2abf5b7e672980a63f1d002b739c01d2260a12c745517848d88a69260b26f27a902faeba95a49443427928e4345d23a43dc66b087cfe33ca2a93100d80263065263b49280f054d209ec80b17cdfe08a87d512519a5258b7e47e48042fbf62b49d98cc79ea36a1e86de2d9a3fb9d5b572121815e90652d6855e2204670af7a03356d00f5202836f77bfecc66e6637433eeefcc4f2160bae596c0501370cb1671ee755fa8ca3098332d209dbfb2ce3cfc8a0ae236276384a8bf614e084e4da4ab348954f4331430604fd9de678a665ac8720df377aaa7d263af61e909be44d1206c4da3bd090732452fb8399c15b8d9f4e7b91a1749d34920495ed820bce415d714d67c909d542d667e24648b1793627293af24efcc74f597e65a601a9727f002b5b95921e47e789eacb9b33ffa931ad94a57986055abdce00a1e48317a353f404603a1cd69fde0fa9315fb8db42451b0c9c569fad965e4832e5d0305d79373d00a811faccf784b4aa5ccaa5c3fa67798e74cc8e95022dc312276f257d75a6000961ac5d5c0a6873d28101421718651e714c0d52ed2d2f1ab55493c9c8ab3a5a33670085414823164ac04d0729d1e3f610ee497fabafbb8a5ec48981866806956cb49a6aeabb8bbaa40f53f6d7a035a3868a211b8c085e3c1ffdd2388294600ddeda34500d10569f13e261c7aa4f671c6ccb7da8b2d72793c3a7c38ede491134d5bb5b68536ea61bb84290eb98a372e5d5566a3977d9529c2180bfba5e9472e192bda87272c8bb5c6cea68942a1a03e42b27ff347e9720deed86f93835760ff025e34b6667140583ad4948e3943de9c3e8a9da0a201c781883f1ae350c92d90445cbf7d4f6c72704874fe5fbb3e97b19631acae9401e6fcd8d34c5e0a0eafce219ae23771449a671159b505359da994a3dcfcca4ca5a4e22ae65a11ec24d48da44ac952561e26a4fb98d6fab87c6a3d2d7849c2a3a76d3915e3f5090032ffd3dcfadb5d82315be42687c6ec93b6c2d88b784ca73714d921108d613baf1df40690a6689732e1f77d5ebfcc430aeb9d7aefccb9f266608cea00b18f3a8d46ba685f3b2c5fa5bcc6a5a65cd73bebbc218d9d583eecdee8bb92201dd3315d062ee263e7a95bd6acadf5799bf672860c440fa0261e5232cfffef6527b7af488772c0aa90563cfd4e1bb73da6120ba83c3154e7bb784b0039bb61a199adb54a1d59b6b014062d3ef72f2d00aca4a5fbe32ca024f380ae49c3620956a2d519f7e22f99674f8acd92127a85a992878b599e2988187932438d1c207a7230"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x7, 0x1, "a9d258"}, @NFTA_DATA_VALUE={0x3c, 0x1, "48af98f6911bf2b8dfe28d5148a7a997bb28c2c5aea40d8c079c7a1ec4ed16c26ea53d2168dd9c164a21a182ac366fdc1a507c976904d3a3"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1338}, 0x1, 0x0, 0x0, 0x40010}, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x82)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mq_timedreceive(r3, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)

346.910104ms ago: executing program 0 (id=3930):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0}}, 0x18)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x80)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x4032}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0x12, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x2d83c067, 0x25, &(0x7f0000000180)=""/37, 0x41000, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x4, &(0x7f0000000680), &(0x7f00000006c0)=[{0x4, 0x5, 0xf}, {0x1, 0x4, 0x7, 0x5}, {0x0, 0x2, 0xe, 0x2}, {0x5, 0x4, 0x10, 0xb}], 0x10, 0x400}, 0x94)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0082b9689459820311c72c83e80000", @ANYRES16=r10, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)

256.769275ms ago: executing program 1 (id=3931):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
preadv(r1, &(0x7f0000001400), 0x0, 0x0, 0x0)

208.440556ms ago: executing program 1 (id=3932):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)

172.278797ms ago: executing program 0 (id=3933):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
close(r2)

171.297967ms ago: executing program 1 (id=3934):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x49ae57ea648cf403)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x200001, 0x2d)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r7, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r9=>0x0})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10008095, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x6, 0x0, 'queue0\x00'})
write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r10, 0x408c5333, &(0x7f0000000280)={0x0, 0x80000000, 0x0, 'queue0\x00', 0xffffff00})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r9], 0x2c}}, 0x0)

84.890638ms ago: executing program 3 (id=3935):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)

83.972238ms ago: executing program 3 (id=3936):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/11, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4)
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000002c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x400}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0x9c}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)

0s ago: executing program 3 (id=3937):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1ec, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x188, 0x1, [@m_simple={0x184, 0x1e, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x97, 0x3, 'K\xea\x19Q\xab\x1b\\7\xf0P\xfa\xc0\xa9\x1d|\xdbH\xb22%\xf7\x14x\xddD\x96.\x15\xfdA\xba\xb4\xc6\xbb\'\xe7+\x9c\x80\x1e\xafQ\xe5\xa4<*\xbc\xe3\xb8\xb0?\xdc\x7f\xcd\x99j\'\xfc\x99\xb3\x9a\x9c\xd1\xbeD\x12.!\xf7\xad|\x0f\xde\xf1lt7v\xc1}\x1e\v\xa4?\xc5K t\x8b\xbe\x1b|\x87K\xd2\x1a0-\xb0\xbf\xbbv\x91\xe2G\xab\x05J\xc0G\xcd\x8aI\xa0\x99\xb2k\xe60S\xb2\xe0\xaf\xd0\x10\xec\x1bS%>\x9aa\x95)M\xc3\xefK[PV\x91=\xe9\x8f<T'}]}, {0x7d, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fce993992ec472fc2cf0229c29df9308275aa845e17dc1e479ef3bdaac2b22173aa0db0c5c17daa5d8bfdc1952fbe903567065fbecf72fa157c3aaac70e46ef54a9edbaa0fa0c723674743dac2"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0)
ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000080))
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7fffeffd)

kernel console output (not intermixed with test programs):

lock 84, lost async page write
[  205.937114][T11721] netlink: 'syz.3.3130': attribute type 3 has an invalid length.
[  205.946915][T11717] syz.1.3132: attempt to access beyond end of device
[  205.946915][T11717] loop1: rw=2049, sector=186, nr_sectors = 8 limit=128
[  205.973526][T11718] loop3: detected capacity change from 0 to 2048
[  205.975232][T11717] syz.1.3132: attempt to access beyond end of device
[  205.975232][T11717] loop1: rw=2049, sector=192, nr_sectors = 2 limit=128
[  205.991891][T11726] program syz.2.3134 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.993489][T11717] Buffer I/O error on dev loop1, logical block 96, lost async page write
[  206.004149][ T6994] tipc: Disabling bearer <eth:macvlan0>
[  206.012673][T11717] syz.1.3132: attempt to access beyond end of device
[  206.012673][T11717] loop1: rw=2049, sector=194, nr_sectors = 8 limit=128
[  206.031166][ T6994] tipc: Left network mode
[  206.031321][T11717] syz.1.3132: attempt to access beyond end of device
[  206.031321][T11717] loop1: rw=2049, sector=200, nr_sectors = 2 limit=128
[  206.049260][T11717] Buffer I/O error on dev loop1, logical block 100, lost async page write
[  206.059461][ T6994] IPVS: stopping backup sync thread 8322 ...
[  206.060733][T11717] syz.1.3132: attempt to access beyond end of device
[  206.060733][T11717] loop1: rw=2049, sector=218, nr_sectors = 8 limit=128
[  206.066408][T11718]  loop3: p1 < > p4
[  206.081244][T11717] syz.1.3132: attempt to access beyond end of device
[  206.081244][T11717] loop1: rw=2049, sector=224, nr_sectors = 2 limit=128
[  206.084165][T11718] loop3: p4 size 8388608 extends beyond EOD, truncated
[  206.096746][T11717] Buffer I/O error on dev loop1, logical block 112, lost async page write
[  206.106414][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3135'.
[  206.114203][T11717] Buffer I/O error on dev loop1, logical block 116, lost async page write
[  206.134515][T11679] hsr_slave_0: entered promiscuous mode
[  206.135466][T11717] Buffer I/O error on dev loop1, logical block 88, lost async page write
[  206.140906][T11679] hsr_slave_1: entered promiscuous mode
[  206.150859][T11717] Buffer I/O error on dev loop1, logical block 92, lost async page write
[  206.164319][T11679] debugfs: 'hsr0' already exists in 'hsr'
[  206.170262][T11679] Cannot create hsr debugfs directory
[  206.175865][T11718] netlink: 'syz.3.3130': attribute type 5 has an invalid length.
[  206.181943][T11717] Buffer I/O error on dev loop1, logical block 120, lost async page write
[  206.183677][T11718] netlink: 'syz.3.3130': attribute type 15 has an invalid length.
[  206.196836][T11717] Buffer I/O error on dev loop1, logical block 124, lost async page write
[  206.210084][T11728] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3135'.
[  206.312190][ T6994] hsr_slave_0: left promiscuous mode
[  206.318048][ T6994] hsr_slave_1: left promiscuous mode
[  206.327117][ T6994] veth1_macvtap: left promiscuous mode
[  206.332913][ T6994] veth0_macvtap: left promiscuous mode
[  206.338520][ T6994] veth1_vlan: left promiscuous mode
[  206.343889][ T6994] veth0_vlan: left promiscuous mode
[  206.641240][T11748] loop1: detected capacity change from 0 to 512
[  206.658160][T11748] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  206.771489][   T29] kauditd_printk_skb: 455 callbacks suppressed
[  206.771507][   T29] audit: type=1326 audit(1757273361.370:14163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  206.801459][   T29] audit: type=1326 audit(1757273361.370:14164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  206.830171][T11759] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3145'.
[  206.935468][   T29] audit: type=1326 audit(1757273361.420:14165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  206.936260][T11759] 0{X功: renamed from gretap0 (while UP)
[  206.959397][   T29] audit: type=1326 audit(1757273361.420:14166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  206.989512][   T29] audit: type=1326 audit(1757273361.420:14167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  206.998346][T11763] loop1: detected capacity change from 0 to 128
[  207.013307][   T29] audit: type=1326 audit(1757273361.420:14168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  207.013386][   T29] audit: type=1326 audit(1757273361.420:14169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  207.013413][   T29] audit: type=1326 audit(1757273361.420:14170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  207.091687][   T29] audit: type=1326 audit(1757273361.430:14171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  207.115341][   T29] audit: type=1326 audit(1757273361.430:14172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.2.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  207.142258][T11759] 0{X功: entered allmulticast mode
[  207.182175][T11769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  207.189449][T11769] IPv6: NLM_F_CREATE should be set when creating new route
[  207.222509][T11773] loop2: detected capacity change from 0 to 512
[  207.229798][T11773] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  207.240186][T11773] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  207.307500][T11783] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3155'.
[  207.379530][T11790] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3157'.
[  207.388787][T11790] 1{X功: renamed from 
30{X功 (while UP)
[  207.487179][T11679] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  207.501786][T11799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  207.511463][T11679] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  207.539018][T11679] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  207.566505][T11679] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  207.583450][T11807] loop3: detected capacity change from 0 to 512
[  207.609951][T11807] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  207.619930][T11807] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  207.621677][T11805] loop1: detected capacity change from 0 to 512
[  207.636688][T11805] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  207.668986][T11801] random: crng reseeded on system resumption
[  207.672878][T11679] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.688834][T11679] 8021q: adding VLAN 0 to HW filter on device team0
[  207.707531][ T7000] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.714645][ T7000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.725351][ T7000] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.732468][ T7000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.742490][T11820] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3168'.
[  207.796299][T11822] SELinux: failed to load policy
[  207.804332][T11826] program syz.2.3170 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  207.820101][T11822] vxcan1 speed is unknown, defaulting to 1000
[  207.836990][T11822] vxcan1 speed is unknown, defaulting to 1000
[  207.843693][T11679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.852556][T11822] vxcan1 speed is unknown, defaulting to 1000
[  207.870582][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3169'.
[  207.898496][T11836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  207.905807][T11836] IPv6: NLM_F_CREATE should be set when creating new route
[  207.909668][T11834] bridge0: entered promiscuous mode
[  207.918367][T11834] macsec1: entered allmulticast mode
[  207.923783][T11834] bridge0: entered allmulticast mode
[  207.936865][T11822] infiniband syz2: set active
[  207.938116][T11839] loop2: detected capacity change from 0 to 1024
[  207.941633][T11822] infiniband syz2: added vxcan1
[  207.944474][T11834] bridge0: port 4(macsec1) entered blocking state
[  207.959788][T11822] RDS/IB: syz2: added
[  207.959841][T11822] smc: adding ib device syz2 with port count 1
[  207.963835][T11834] bridge0: port 4(macsec1) entered disabled state
[  207.970348][T11822] smc:    ib device syz2 port 1 has pnetid 
[  207.982611][T11839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.995342][T11834] bridge0: left allmulticast mode
[  208.000574][T11834] bridge0: left promiscuous mode
[  208.012684][ T3413] vxcan1 speed is unknown, defaulting to 1000
[  208.018941][ T3379] vxcan1 speed is unknown, defaulting to 1000
[  208.026334][T11822] vxcan1 speed is unknown, defaulting to 1000
[  208.054427][T11839] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  208.065243][T11822] vxcan1 speed is unknown, defaulting to 1000
[  208.124080][T11486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.154233][T11679] veth0_vlan: entered promiscuous mode
[  208.170350][T11856] FAULT_INJECTION: forcing a failure.
[  208.170350][T11856] name failslab, interval 1, probability 0, space 0, times 0
[  208.179569][T11679] veth1_vlan: entered promiscuous mode
[  208.183260][T11856] CPU: 1 UID: 0 PID: 11856 Comm: syz.2.3176 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  208.183295][T11856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  208.183313][T11856] Call Trace:
[  208.183321][T11856]  <TASK>
[  208.183331][T11856]  __dump_stack+0x1d/0x30
[  208.183359][T11856]  dump_stack_lvl+0xe8/0x140
[  208.183384][T11856]  dump_stack+0x15/0x1b
[  208.183484][T11856]  should_fail_ex+0x265/0x280
[  208.183518][T11856]  should_failslab+0x8c/0xb0
[  208.183552][T11856]  kmem_cache_alloc_node_noprof+0x57/0x320
[  208.183645][T11856]  ? __alloc_skb+0x101/0x320
[  208.183675][T11856]  __alloc_skb+0x101/0x320
[  208.183711][T11856]  ? audit_log_start+0x365/0x6c0
[  208.183754][T11856]  audit_log_start+0x380/0x6c0
[  208.183800][T11856]  audit_seccomp+0x48/0x100
[  208.183836][T11856]  ? __seccomp_filter+0x68c/0x10d0
[  208.183897][T11856]  __seccomp_filter+0x69d/0x10d0
[  208.183997][T11856]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  208.184046][T11856]  ? vfs_write+0x7e8/0x960
[  208.184084][T11856]  __secure_computing+0x82/0x150
[  208.184158][T11856]  syscall_trace_enter+0xcf/0x1e0
[  208.184192][T11856]  do_syscall_64+0xac/0x200
[  208.184234][T11856]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  208.184266][T11856]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  208.184471][T11856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.184502][T11856] RIP: 0033:0x7f280491ebe9
[  208.184523][T11856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.184548][T11856] RSP: 002b:00007f280337f038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  208.184575][T11856] RAX: ffffffffffffffda RBX: 00007f2804b55fa0 RCX: 00007f280491ebe9
[  208.184593][T11856] RDX: 0000000000006000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  208.184672][T11856] RBP: 00007f280337f090 R08: 0000000000000000 R09: 0000000000000000
[  208.184691][T11856] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  208.184708][T11856] R13: 00007f2804b56038 R14: 00007f2804b55fa0 R15: 00007ffc843e0f58
[  208.184812][T11856]  </TASK>
[  208.407274][T11862] loop2: detected capacity change from 0 to 512
[  208.415979][T11822] vxcan1 speed is unknown, defaulting to 1000
[  208.424457][T11862] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  208.434449][T11862] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  208.445165][T11679] veth0_macvtap: entered promiscuous mode
[  208.455662][T11679] veth1_macvtap: entered promiscuous mode
[  208.510855][T11679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.521018][T11861] vxcan1 speed is unknown, defaulting to 1000
[  208.525705][T11679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.559366][ T7013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.575461][ T7013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.596092][ T7013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.630640][T11871] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3182'.
[  208.655844][ T7000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.664734][T11822] vxcan1 speed is unknown, defaulting to 1000
[  208.698680][T11874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  208.765753][T11822] vxcan1 speed is unknown, defaulting to 1000
[  208.884380][ T3304] bridge0: port 1(syz_tun) entered disabled state
[  208.921573][ T3304] syz_tun (unregistering): left allmulticast mode
[  208.928224][ T3304] syz_tun (unregistering): left promiscuous mode
[  208.934723][ T3304] bridge0: port 1(syz_tun) entered disabled state
[  209.030837][T11903] 0{X功: renamed from 
31{X功 (while UP)
[  209.051169][T11903] net_ratelimit: 323 callbacks suppressed
[  209.051188][T11903] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  209.246544][T11894] vxcan1 speed is unknown, defaulting to 1000
[  209.271080][T11916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  209.278536][T11916] IPv6: NLM_F_CREATE should be set when creating new route
[  209.313755][ T7000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.527400][T11923] SELinux:  policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c
[  209.571553][T11923] SELinux: failed to load policy
[  209.737556][T11923] rdma_rxe: rxe_newlink: failed to add vxcan1
[  209.758981][T11924] bridge0: entered promiscuous mode
[  209.770556][T11924] macsec1: entered allmulticast mode
[  209.776095][T11924] bridge0: entered allmulticast mode
[  209.794941][T11924] bridge0: port 3(macsec1) entered blocking state
[  209.801608][T11924] bridge0: port 3(macsec1) entered disabled state
[  209.819782][T11924] bridge0: left allmulticast mode
[  209.824921][T11924] bridge0: left promiscuous mode
[  209.858852][ T7000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.968138][ T7000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.013706][T11932] loop2: detected capacity change from 0 to 512
[  210.040171][T11932] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  210.077779][ T7000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.093763][T11938] 1{X功: renamed from 
30{X功 (while UP)
[  210.103110][T11938] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[  210.192326][T11894] chnl_net:caif_netlink_parms(): no params data found
[  210.323422][T11956] __nla_validate_parse: 3 callbacks suppressed
[  210.323442][T11956] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3209'.
[  210.343870][T11958] SELinux: failed to load policy
[  210.372842][T11894] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.380058][T11894] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.400091][T11894] bridge_slave_0: entered allmulticast mode
[  210.414682][T11894] bridge_slave_0: entered promiscuous mode
[  210.422993][T11968] syz2: rxe_newlink: already configured on vxcan1
[  210.440111][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3210'.
[  210.443929][T11894] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.456270][T11894] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.481699][T11894] bridge_slave_1: entered allmulticast mode
[  210.488573][T11894] bridge_slave_1: entered promiscuous mode
[  210.499554][ T7000] dummy0: left allmulticast mode
[  210.514954][ T7000] bridge0: port 2(dummy0) entered disabled state
[  210.650898][ T7000] bond0 (unregistering): Released all slaves
[  210.660750][ T7000] bond1 (unregistering): (slave bond2): Releasing backup interface
[  210.668689][ T7000] bond2 (unregistering): left promiscuous mode
[  210.675392][ T7000] bond1 (unregistering): Released all slaves
[  210.684774][ T7000] bond2 (unregistering): Released all slaves
[  210.697113][T11968] bridge0: entered promiscuous mode
[  210.703504][T11968] macsec1: entered allmulticast mode
[  210.709190][T11968] bridge0: entered allmulticast mode
[  210.716453][T11968] bridge0: port 4(macsec1) entered blocking state
[  210.723263][T11968] bridge0: port 4(macsec1) entered disabled state
[  210.732320][T11968] bridge0: left allmulticast mode
[  210.737718][T11968] bridge0: left promiscuous mode
[  210.755230][ T7000] tipc: Disabling bearer <udp:syz1>
[  210.760706][ T7000] tipc: Left network mode
[  210.780388][T11894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.813760][T11894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.844510][ T7000] hsr_slave_0: left promiscuous mode
[  210.861354][ T7000] hsr_slave_1: left promiscuous mode
[  210.873944][ T7000] veth1_macvtap: left promiscuous mode
[  210.879663][ T7000] veth0_macvtap: left promiscuous mode
[  210.885302][ T7000] veth1_vlan: left promiscuous mode
[  210.890681][ T7000] veth0_vlan: left promiscuous mode
[  210.928338][T11983] loop3: detected capacity change from 0 to 512
[  210.957636][T11983] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  210.967651][T11983] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  210.986053][T11983] netlink: zone id is out of range
[  211.000279][T11983] netlink: zone id is out of range
[  211.019764][T11983] netlink: zone id is out of range
[  211.025060][T11983] netlink: zone id is out of range
[  211.062556][T11983] netlink: zone id is out of range
[  211.067834][T11983] netlink: zone id is out of range
[  211.102199][T11983] netlink: zone id is out of range
[  211.114356][T11894] team0: Port device team_slave_0 added
[  211.132572][T11983] netlink: zone id is out of range
[  211.136252][T11894] team0: Port device team_slave_1 added
[  211.181482][T11984] vxcan1 speed is unknown, defaulting to 1000
[  211.210736][T11894] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.217760][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.245327][T11894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.318003][T11894] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.325097][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.343029][T11993] loop0: detected capacity change from 0 to 1024
[  211.351376][T11894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.416990][T11894] hsr_slave_0: entered promiscuous mode
[  211.423628][T11894] hsr_slave_1: entered promiscuous mode
[  211.444220][T11993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.610767][T11679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.196832][T12019] random: crng reseeded on system resumption
[  212.215746][T12022] loop2: detected capacity change from 0 to 512
[  212.223170][T12022] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  212.233375][T12022] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  212.340882][T12027] random: crng reseeded on system resumption
[  212.376182][   T29] kauditd_printk_skb: 287 callbacks suppressed
[  212.376199][   T29] audit: type=1400 audit(1757273366.970:14458): avc:  granted  { setsecparam } for  pid=12031 comm="syz.0.3235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  212.490424][T12036] random: crng reseeded on system resumption
[  212.528276][T11894] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  212.551331][T11894] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  212.567669][T11894] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  212.587753][T11894] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  212.626181][T12047] loop1: detected capacity change from 0 to 512
[  212.648072][T12047] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.657658][T12047] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  212.680441][T12047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  212.692886][T12047] System zones: 1-12
[  212.702679][T12047] EXT4-fs (loop1): 1 truncate cleaned up
[  212.716576][T12047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.741920][T11894] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.760792][   T29] audit: type=1400 audit(1757273367.350:14459): avc:  denied  { read append } for  pid=12046 comm="syz.1.3239" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  212.772894][T11894] 8021q: adding VLAN 0 to HW filter on device team0
[  212.784846][   T29] audit: type=1400 audit(1757273367.350:14460): avc:  denied  { open } for  pid=12046 comm="syz.1.3239" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  212.784878][   T29] audit: type=1400 audit(1757273367.350:14461): avc:  denied  { ioctl } for  pid=12046 comm="syz.1.3239" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  212.905266][ T7000] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.912605][ T7000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.990761][ T7000] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.997882][ T7000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.010068][T12065] netlink: 'syz.3.3242': attribute type 10 has an invalid length.
[  213.018617][T12065] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3242'.
[  213.045378][T12063] vxcan1 speed is unknown, defaulting to 1000
[  213.065550][   T29] audit: type=1326 audit(1757273367.580:14462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  213.089666][   T29] audit: type=1326 audit(1757273367.580:14463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  213.113460][   T29] audit: type=1326 audit(1757273367.630:14464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  213.137165][   T29] audit: type=1326 audit(1757273367.630:14465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  213.161273][   T29] audit: type=1326 audit(1757273367.630:14466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  213.185141][   T29] audit: type=1326 audit(1757273367.630:14467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12066 comm="syz.0.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  213.224618][T12067] loop0: detected capacity change from 0 to 512
[  213.232557][T12067] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  213.375070][T12072] netlink: 'syz.0.3244': attribute type 3 has an invalid length.
[  213.425806][T12077] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3245'.
[  213.476519][T11894] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.535377][T10948] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.683367][T12093] loop1: detected capacity change from 0 to 512
[  213.693029][T12093] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  213.703207][T12093] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  213.805851][T12104] loop3: detected capacity change from 0 to 512
[  213.824002][T12104] EXT4-fs: Ignoring removed mblk_io_submit option
[  213.832993][T12104] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  213.855542][T11894] veth0_vlan: entered promiscuous mode
[  213.864151][T12104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  213.882629][T11894] veth1_vlan: entered promiscuous mode
[  213.889212][T12104] System zones: 1-12
[  213.893861][T12104] EXT4-fs (loop3): 1 truncate cleaned up
[  213.903228][T12104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.912595][T11894] veth0_macvtap: entered promiscuous mode
[  213.934432][T11894] veth1_macvtap: entered promiscuous mode
[  213.958674][T11894] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.007507][T11894] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.048041][ T6994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.067833][ T7000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.081017][ T6994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.094516][ T6994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.374644][T12118] Process accounting resumed
[  214.420267][T12131] loop2: detected capacity change from 0 to 512
[  214.434733][T12131] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  214.444826][T12131] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  214.551930][T12127] loop4: detected capacity change from 0 to 512
[  214.560931][T12127] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  214.828041][T12134] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3260'.
[  214.840511][T12131] net_ratelimit: 239 callbacks suppressed
[  214.840529][T12131] netlink: zone id is out of range
[  214.855982][T12131] netlink: zone id is out of range
[  214.865963][T12131] netlink: zone id is out of range
[  214.871196][T12131] netlink: zone id is out of range
[  214.885781][T12131] netlink: zone id is out of range
[  214.892877][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.899236][T12131] netlink: zone id is out of range
[  214.904620][T12140] program syz.4.3262 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  214.909693][T12131] netlink: zone id is out of range
[  214.938029][T12131] netlink: zone id is out of range
[  214.949174][T12131] netlink: zone id is out of range
[  214.956729][T12131] netlink: zone id is out of range
[  215.002890][T12148] loop4: detected capacity change from 0 to 128
[  215.033857][T12148] bio_check_eod: 47 callbacks suppressed
[  215.033874][T12148] syz.4.3265: attempt to access beyond end of device
[  215.033874][T12148] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128
[  215.108540][T12148] syz.4.3265: attempt to access beyond end of device
[  215.108540][T12148] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128
[  215.109379][T12160] syz.4.3265: attempt to access beyond end of device
[  215.109379][T12160] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128
[  215.122129][T12148] buffer_io_error: 17 callbacks suppressed
[  215.122144][T12148] Buffer I/O error on dev loop4, logical block 80, lost async page write
[  215.158479][T12148] syz.4.3265: attempt to access beyond end of device
[  215.158479][T12148] loop4: rw=2049, sector=186, nr_sectors = 8 limit=128
[  215.189484][T12162] netlink: 'syz.0.3271': attribute type 10 has an invalid length.
[  215.198022][T12162] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3271'.
[  215.210939][T12162] dummy0: entered promiscuous mode
[  215.220854][T12148] syz.4.3265: attempt to access beyond end of device
[  215.220854][T12148] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128
[  215.230625][T12162] bridge0: port 3(dummy0) entered blocking state
[  215.234765][T12148] Buffer I/O error on dev loop4, logical block 96, lost async page write
[  215.246672][T12164] loop2: detected capacity change from 0 to 128
[  215.252089][T12162] bridge0: port 3(dummy0) entered disabled state
[  215.259832][T12159] random: crng reseeded on system resumption
[  215.272208][T12162] dummy0: entered allmulticast mode
[  215.272551][T12148] syz.4.3265: attempt to access beyond end of device
[  215.272551][T12148] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128
[  215.304884][T12148] syz.4.3265: attempt to access beyond end of device
[  215.304884][T12148] loop4: rw=2049, sector=200, nr_sectors = 2 limit=128
[  215.318677][T12148] Buffer I/O error on dev loop4, logical block 100, lost async page write
[  215.333741][T12148] syz.4.3265: attempt to access beyond end of device
[  215.333741][T12148] loop4: rw=2049, sector=218, nr_sectors = 8 limit=128
[  215.347992][T12148] syz.4.3265: attempt to access beyond end of device
[  215.347992][T12148] loop4: rw=2049, sector=224, nr_sectors = 2 limit=128
[  215.352955][T12169] syz.2.3272: attempt to access beyond end of device
[  215.352955][T12169] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128
[  215.361678][T12148] Buffer I/O error on dev loop4, logical block 112, lost async page write
[  215.379004][T12162] bridge0: port 3(dummy0) entered blocking state
[  215.385734][T12148] Buffer I/O error on dev loop4, logical block 116, lost async page write
[  215.393071][T12162] bridge0: port 3(dummy0) entered forwarding state
[  215.403788][T12148] Buffer I/O error on dev loop4, logical block 88, lost async page write
[  215.418726][T12169] Buffer I/O error on dev loop2, logical block 80, lost async page write
[  215.430204][T12148] Buffer I/O error on dev loop4, logical block 92, lost async page write
[  215.458027][T12169] Buffer I/O error on dev loop2, logical block 84, lost async page write
[  215.483671][T12148] Buffer I/O error on dev loop4, logical block 120, lost async page write
[  215.517840][T12175] netlink: 'syz.3.3274': attribute type 10 has an invalid length.
[  215.530722][T12175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3274'.
[  215.570885][T12179] program syz.1.3276 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  215.617753][T12181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  215.625152][T12181] IPv6: NLM_F_CREATE should be set when creating new route
[  215.665672][T12185] loop1: detected capacity change from 0 to 512
[  215.676857][T12185] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  215.687198][T12185] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  215.696761][T12191] loop0: detected capacity change from 0 to 512
[  215.708364][T12191] EXT4-fs: Ignoring removed mblk_io_submit option
[  215.716087][T12191] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  215.729494][T12191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  215.737548][T12191] System zones: 1-12
[  215.772624][T12191] EXT4-fs (loop0): 1 truncate cleaned up
[  215.778687][T12191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.862274][T12204] program syz.1.3286 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  215.893876][T12206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3287'.
[  215.924371][T12209] loop1: detected capacity change from 0 to 1024
[  215.941735][T12209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.962834][T12213] loop4: detected capacity change from 0 to 128
[  216.064066][T12209] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  216.148747][T10948] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.421963][T11679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.492771][T12240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.500272][T12240] IPv6: NLM_F_CREATE should be set when creating new route
[  216.529680][T12244] random: crng reseeded on system resumption
[  216.643699][T12247] random: crng reseeded on system resumption
[  216.692663][T12258] loop0: detected capacity change from 0 to 512
[  216.700280][T12258] EXT4-fs: Ignoring removed mblk_io_submit option
[  216.707341][T12258] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  216.719680][T12258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  216.727720][T12258] System zones: 1-12
[  216.733433][T12258] EXT4-fs (loop0): 1 truncate cleaned up
[  216.739575][T12258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.924701][T12271] netlink: 'syz.1.3318': attribute type 3 has an invalid length.
[  217.030780][T12275] program syz.3.3311 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  217.181432][T12286] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3316'.
[  217.318866][T12293] random: crng reseeded on system resumption
[  217.456651][   T29] kauditd_printk_skb: 229 callbacks suppressed
[  217.456669][   T29] audit: type=1400 audit(1757273372.050:14697): avc:  granted  { setsecparam } for  pid=12297 comm="syz.4.3320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  217.504613][   T29] audit: type=1400 audit(1757273372.100:14698): avc:  denied  { tracepoint } for  pid=12297 comm="syz.4.3320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  217.561413][T12301] loop3: detected capacity change from 0 to 512
[  217.586465][T12301] EXT4-fs: Ignoring removed mblk_io_submit option
[  217.675143][T12301] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  217.690622][T11679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.713949][T12301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  217.734202][T12301] System zones: 1-12
[  217.735283][   T29] audit: type=1326 audit(1757273372.330:14699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.1.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511158ebe9 code=0x7ffc0000
[  217.775237][   T29] audit: type=1326 audit(1757273372.330:14700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.1.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f511158ebe9 code=0x7ffc0000
[  217.798932][   T29] audit: type=1326 audit(1757273372.330:14701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.0.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  217.799279][T12301] EXT4-fs (loop3): 1 truncate cleaned up
[  217.823202][   T29] audit: type=1326 audit(1757273372.330:14702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.0.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  217.852889][   T29] audit: type=1326 audit(1757273372.370:14703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.1.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511158ebe9 code=0x7ffc0000
[  217.862917][T12301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.876816][   T29] audit: type=1326 audit(1757273372.370:14704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.1.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511158ebe9 code=0x7ffc0000
[  217.912448][   T29] audit: type=1326 audit(1757273372.370:14705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.0.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  217.936134][   T29] audit: type=1326 audit(1757273372.370:14706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.0.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  218.119240][T12314] netlink: 'syz.4.3326': attribute type 10 has an invalid length.
[  218.127566][T12314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3326'.
[  218.529308][T12314] dummy0: entered promiscuous mode
[  218.535232][T12314] bridge0: port 3(dummy0) entered blocking state
[  218.541784][T12314] bridge0: port 3(dummy0) entered disabled state
[  218.549870][T12314] dummy0: entered allmulticast mode
[  218.555787][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.557818][T12314] bridge0: port 3(dummy0) entered blocking state
[  218.571532][T12314] bridge0: port 3(dummy0) entered forwarding state
[  218.611927][T12331] loop3: detected capacity change from 0 to 764
[  218.619881][T12331] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  218.643954][T12333] loop4: detected capacity change from 0 to 1024
[  218.646853][T12336] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3333'.
[  218.662089][T12333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.726495][T12333] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  218.777048][T11894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.830175][T12350] SELinux: failed to load policy
[  218.838099][T12350] rdma_rxe: rxe_newlink: failed to add vxcan1
[  218.847850][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3337'.
[  218.860533][T12350] bridge0: entered promiscuous mode
[  218.865931][T12350] macsec1: entered allmulticast mode
[  218.871457][T12350] bridge0: entered allmulticast mode
[  218.887040][T12350] bridge0: port 4(macsec1) entered blocking state
[  218.893942][T12350] bridge0: port 4(macsec1) entered disabled state
[  218.902683][T12350] bridge0: left allmulticast mode
[  218.907853][T12350] bridge0: left promiscuous mode
[  219.162548][T12364] netlink: 'syz.3.3342': attribute type 10 has an invalid length.
[  219.172096][T12364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3342'.
[  219.313250][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.320525][T12376] IPv6: NLM_F_CREATE should be set when creating new route
[  219.343372][T12381] loop3: detected capacity change from 0 to 128
[  219.447436][T12389] netlink: 'syz.4.3353': attribute type 10 has an invalid length.
[  219.455421][T12389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3353'.
[  219.638709][T12394] SELinux: failed to load policy
[  219.675763][T12396] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3356'.
[  219.687980][T12394] rdma_rxe: rxe_newlink: failed to add vxcan1
[  219.695210][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3355'.
[  219.822621][T12394] bridge0: entered promiscuous mode
[  219.838335][T12394] macsec1: entered allmulticast mode
[  219.843773][T12394] bridge0: entered allmulticast mode
[  219.857190][T12394] bridge0: port 3(macsec1) entered blocking state
[  219.863757][T12394] bridge0: port 3(macsec1) entered disabled state
[  219.897316][T12394] bridge0: left allmulticast mode
[  219.902538][T12394] bridge0: left promiscuous mode
[  219.914197][T12405] netlink: 'syz.4.3358': attribute type 10 has an invalid length.
[  220.032861][T12415] 0{X功: renamed from gretap0 (while UP)
[  220.062085][T12415] 0{X功: entered allmulticast mode
[  220.076974][T12415] net_ratelimit: 74 callbacks suppressed
[  220.077000][T12415] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  220.283362][T12433] SELinux: failed to load policy
[  220.291393][T12433] rdma_rxe: rxe_newlink: failed to add vxcan1
[  220.301020][T12433] bridge0: entered promiscuous mode
[  220.306572][T12433] macsec1: entered allmulticast mode
[  220.312029][T12433] bridge0: entered allmulticast mode
[  220.321739][T12433] bridge0: port 4(macsec1) entered blocking state
[  220.328485][T12433] bridge0: port 4(macsec1) entered disabled state
[  220.337755][T12433] bridge0: left allmulticast mode
[  220.342863][T12433] bridge0: left promiscuous mode
[  220.350639][T12440] netlink: 'syz.3.3374': attribute type 10 has an invalid length.
[  220.966847][T12457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  220.974122][T12457] IPv6: NLM_F_CREATE should be set when creating new route
[  221.076152][T12467] netlink: 'syz.1.3386': attribute type 10 has an invalid length.
[  221.084782][T12467] __nla_validate_parse: 4 callbacks suppressed
[  221.085009][T12467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3386'.
[  221.100922][T12467] dummy0: entered promiscuous mode
[  221.108481][T12467] bridge0: port 3(dummy0) entered blocking state
[  221.115198][T12467] bridge0: port 3(dummy0) entered disabled state
[  221.122435][T12467] dummy0: entered allmulticast mode
[  221.134325][T12467] bridge0: port 3(dummy0) entered blocking state
[  221.141097][T12467] bridge0: port 3(dummy0) entered forwarding state
[  221.219397][T12478] program syz.1.3391 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  221.268389][T12482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  221.326713][T12488] random: crng reseeded on system resumption
[  221.410804][T12494] loop3: detected capacity change from 0 to 512
[  221.418110][T12494] EXT4-fs: Ignoring removed mblk_io_submit option
[  221.425117][T12494] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  221.443624][T12494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  221.444525][T12496] program syz.1.3399 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  221.452115][T12494] System zones: 1-12
[  221.465928][T12494] EXT4-fs (loop3): 1 truncate cleaned up
[  221.472131][T12494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.492193][T12500] loop1: detected capacity change from 0 to 512
[  221.499826][T12500] EXT4-fs: Ignoring removed mblk_io_submit option
[  221.507055][T12500] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  221.518297][T12500] EXT4-fs (loop1): 1 truncate cleaned up
[  221.524658][T12500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.549672][T12500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.603929][T12500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.647754][T12500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.708467][T12500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.781688][ T7013] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.796525][ T7013] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.815520][ T7040] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.839154][ T7040] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.957526][T12507] program syz.0.3402 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  222.068547][T12515] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  222.075850][T12515] IPv6: NLM_F_CREATE should be set when creating new route
[  222.302952][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.313534][T12522] random: crng reseeded on system resumption
[  222.339966][T12524] program syz.3.3410 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  222.428036][T10948] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.445756][T12533] loop0: detected capacity change from 0 to 512
[  222.452806][T12533] EXT4-fs: Ignoring removed mblk_io_submit option
[  222.460647][T12533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  222.471791][T12533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  222.480935][T12533] System zones: 1-12
[  222.483594][T12531] SELinux: failed to load policy
[  222.490675][T12533] EXT4-fs (loop0): 1 truncate cleaned up
[  222.496977][T12533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.520761][T12531] syz2: rxe_newlink: already configured on vxcan1
[  222.530029][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3414'.
[  222.544896][T12531] bridge0: entered promiscuous mode
[  222.550558][T12531] macsec1: entered allmulticast mode
[  222.556104][T12531] bridge0: entered allmulticast mode
[  222.589350][T12531] bridge0: port 4(macsec1) entered blocking state
[  222.596463][T12531] bridge0: port 4(macsec1) entered disabled state
[  222.605772][T12531] bridge0: left allmulticast mode
[  222.611164][T12531] bridge0: left promiscuous mode
[  223.359165][   T29] kauditd_printk_skb: 414 callbacks suppressed
[  223.359247][   T29] audit: type=1400 audit(1757273377.950:15121): avc:  denied  { unmount } for  pid=11486 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  223.577986][T12553] loop1: detected capacity change from 0 to 512
[  223.615767][T12553] EXT4-fs: Ignoring removed mblk_io_submit option
[  223.652559][T12553] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  223.685441][T12553] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  223.701459][T12553] System zones: 1-12
[  223.707250][T12558] vxcan1 speed is unknown, defaulting to 1000
[  223.716614][T12553] EXT4-fs (loop1): 1 truncate cleaned up
[  223.730610][T12553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.753660][T12560] netlink: 'syz.4.3423': attribute type 10 has an invalid length.
[  223.762138][T12560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3423'.
[  223.792745][T11679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.956375][T12568] loop0: detected capacity change from 0 to 764
[  223.986938][T12568] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  224.393012][T12580] program syz.3.3429 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  224.496777][T10948] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.534400][   T29] audit: type=1326 audit(1757273379.130:15122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.3.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe12ebe9 code=0x7ffc0000
[  224.558561][   T29] audit: type=1326 audit(1757273379.130:15123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.3.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe12ebe9 code=0x7ffc0000
[  224.644666][   T29] audit: type=1326 audit(1757273379.130:15124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.3.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5fe12ebe9 code=0x7ffc0000
[  224.669279][   T29] audit: type=1326 audit(1757273379.130:15125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.3.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe12ebe9 code=0x7ffc0000
[  224.693054][   T29] audit: type=1326 audit(1757273379.130:15126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.3.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe12ebe9 code=0x7ffc0000
[  224.716781][   T29] audit: type=1326 audit(1757273379.190:15127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.3.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5fe12ebe9 code=0x7ffc0000
[  224.740727][   T29] audit: type=1326 audit(1757273379.190:15128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.3.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fe12ebe9 code=0x7ffc0000
[  224.764469][   T29] audit: type=1326 audit(1757273379.190:15129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.3.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5fe125ba7 code=0x7ffc0000
[  224.788185][   T29] audit: type=1326 audit(1757273379.190:15130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12581 comm="syz.3.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5fe0cadb9 code=0x7ffc0000
[  224.813982][T12584] loop3: detected capacity change from 0 to 512
[  224.820704][T12584] EXT4-fs: Ignoring removed mblk_io_submit option
[  224.827791][T12584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  224.841484][T12584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  224.849678][T12584] System zones: 1-12
[  224.855202][T12584] EXT4-fs (loop3): 1 truncate cleaned up
[  224.861391][T12584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.906725][T12594] loop1: detected capacity change from 0 to 764
[  224.970007][T12594] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  225.109728][T12600] loop2: detected capacity change from 0 to 512
[  225.141706][T12600] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  225.151728][T12600] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  225.592623][T12618] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3444'.
[  225.678173][T12624] loop1: detected capacity change from 0 to 1024
[  225.691169][T12624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.716214][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.771476][T12624] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  225.835541][T10948] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.874260][T12635] loop0: detected capacity change from 0 to 512
[  225.900074][T12635] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  225.910001][T12635] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  225.973430][T12638] loop1: detected capacity change from 0 to 512
[  225.984778][T12638] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  226.125641][T12655] random: crng reseeded on system resumption
[  226.172130][T12663] loop4: detected capacity change from 0 to 512
[  226.179064][T12663] EXT4-fs: Ignoring removed mblk_io_submit option
[  226.186332][T12663] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  226.198591][T12663] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  226.206873][T12663] System zones: 1-12
[  226.215956][T12663] EXT4-fs (loop4): 1 truncate cleaned up
[  226.233898][T12663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.314495][T12679] loop2: detected capacity change from 0 to 512
[  226.324741][T12679] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  226.334728][T12679] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  226.560678][T12695] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3472'.
[  226.578215][T12695] 1{X功: renamed from 
30{X功 (while UP)
[  226.601172][T12695] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[  226.665232][T12700] program syz.2.3474 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  226.708995][T12697] random: crng reseeded on system resumption
[  226.776990][T12705] program syz.1.3476 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  226.899016][T11894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.950201][T12724] program syz.1.3485 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  227.053083][T12731] random: crng reseeded on system resumption
[  227.081364][T12736] program syz.2.3489 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  227.177935][T12744] loop4: detected capacity change from 0 to 512
[  227.186035][T12744] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  227.196124][T12744] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  227.228876][T12749] loop0: detected capacity change from 0 to 512
[  227.254780][T12749] EXT4-fs: Ignoring removed mblk_io_submit option
[  227.275682][T12749] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  227.302682][T12749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  227.305131][T12752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  227.319170][T12749] System zones: 1-12
[  227.332551][T12749] EXT4-fs (loop0): 1 truncate cleaned up
[  227.342035][T12751] vxcan1 speed is unknown, defaulting to 1000
[  227.348930][T12749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.406912][T12757] program syz.2.3497 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  227.664406][T12766] loop2: detected capacity change from 0 to 512
[  227.671515][T12766] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  227.905309][T12770] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3502'.
[  228.028127][T12774] random: crng reseeded on system resumption
[  228.104929][T11679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.106059][T12778] SELinux: failed to load policy
[  228.121735][T12778] rdma_rxe: rxe_newlink: failed to add vxcan1
[  228.128422][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3505'.
[  228.140924][T12778] bridge0: entered promiscuous mode
[  228.146279][T12778] macsec1: entered allmulticast mode
[  228.151795][T12778] bridge0: entered allmulticast mode
[  228.167323][T12778] bridge0: port 4(macsec1) entered blocking state
[  228.173898][T12778] bridge0: port 4(macsec1) entered disabled state
[  228.201741][T12778] bridge0: left allmulticast mode
[  228.206871][T12778] bridge0: left promiscuous mode
[  228.289803][T12791] loop3: detected capacity change from 0 to 764
[  228.306608][T12791] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  228.354224][T12799] random: crng reseeded on system resumption
[  228.384467][   T29] kauditd_printk_skb: 1097 callbacks suppressed
[  228.384501][   T29] audit: type=1326 audit(1757273382.980:16228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  228.443096][   T29] audit: type=1326 audit(1757273383.010:16229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  228.467036][   T29] audit: type=1326 audit(1757273383.010:16230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  228.490805][   T29] audit: type=1326 audit(1757273383.010:16231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  228.514453][   T29] audit: type=1326 audit(1757273383.020:16232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  228.538094][   T29] audit: type=1326 audit(1757273383.020:16233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  228.562131][   T29] audit: type=1326 audit(1757273383.020:16234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  228.585752][   T29] audit: type=1326 audit(1757273383.020:16235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  228.609360][   T29] audit: type=1326 audit(1757273383.020:16236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  228.633067][   T29] audit: type=1326 audit(1757273383.020:16237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  228.780076][T12819] program syz.4.3522 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  228.791648][T12811] random: crng reseeded on system resumption
[  228.834920][T12823] SELinux: failed to load policy
[  228.844274][T12823] rdma_rxe: rxe_newlink: failed to add vxcan1
[  228.867845][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'.
[  228.891966][T12823] bridge0: entered promiscuous mode
[  228.898480][T12833] loop1: detected capacity change from 0 to 128
[  228.911406][T12823] macsec1: entered allmulticast mode
[  228.916802][T12823] bridge0: entered allmulticast mode
[  228.924947][T12823] bridge0: port 4(macsec1) entered blocking state
[  228.929272][T12833] bio_check_eod: 103 callbacks suppressed
[  228.929295][T12833] syz.1.3528: attempt to access beyond end of device
[  228.929295][T12833] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128
[  228.931607][T12823] bridge0: port 4(macsec1) entered disabled state
[  228.939344][T12833] syz.1.3528: attempt to access beyond end of device
[  228.939344][T12833] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128
[  228.971233][T12833] buffer_io_error: 44 callbacks suppressed
[  228.971249][T12833] Buffer I/O error on dev loop1, logical block 80, lost async page write
[  228.986521][T12823] bridge0: left allmulticast mode
[  228.986554][T12833] syz.1.3528: attempt to access beyond end of device
[  228.986554][T12833] loop1: rw=2049, sector=162, nr_sectors = 8 limit=128
[  228.991743][T12823] bridge0: left promiscuous mode
[  229.012609][T12833] syz.1.3528: attempt to access beyond end of device
[  229.012609][T12833] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128
[  229.026193][T12833] Buffer I/O error on dev loop1, logical block 84, lost async page write
[  229.036732][T12833] syz.1.3528: attempt to access beyond end of device
[  229.036732][T12833] loop1: rw=2049, sector=186, nr_sectors = 8 limit=128
[  229.053291][T12833] syz.1.3528: attempt to access beyond end of device
[  229.053291][T12833] loop1: rw=2049, sector=192, nr_sectors = 2 limit=128
[  229.066782][T12833] Buffer I/O error on dev loop1, logical block 96, lost async page write
[  229.079704][T12833] syz.1.3528: attempt to access beyond end of device
[  229.079704][T12833] loop1: rw=2049, sector=194, nr_sectors = 8 limit=128
[  229.095091][T12833] syz.1.3528: attempt to access beyond end of device
[  229.095091][T12833] loop1: rw=2049, sector=200, nr_sectors = 2 limit=128
[  229.108569][T12833] Buffer I/O error on dev loop1, logical block 100, lost async page write
[  229.119251][T12833] syz.1.3528: attempt to access beyond end of device
[  229.119251][T12833] loop1: rw=2049, sector=218, nr_sectors = 8 limit=128
[  229.141545][T12833] syz.1.3528: attempt to access beyond end of device
[  229.141545][T12833] loop1: rw=2049, sector=224, nr_sectors = 2 limit=128
[  229.155236][T12833] Buffer I/O error on dev loop1, logical block 112, lost async page write
[  229.173317][T12833] Buffer I/O error on dev loop1, logical block 116, lost async page write
[  229.184765][T12833] Buffer I/O error on dev loop1, logical block 88, lost async page write
[  229.196196][T12833] Buffer I/O error on dev loop1, logical block 92, lost async page write
[  229.205760][T12833] Buffer I/O error on dev loop1, logical block 120, lost async page write
[  229.216698][T12833] Buffer I/O error on dev loop1, logical block 124, lost async page write
[  229.219075][T12842] loop0: detected capacity change from 0 to 512
[  229.232748][T12842] EXT4-fs: Ignoring removed mblk_io_submit option
[  229.240455][T12842] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  229.251938][T12842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  229.260058][T12842] System zones: 1-12
[  229.265012][T12842] EXT4-fs (loop0): 1 truncate cleaned up
[  229.271209][T12842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.435157][T12848] netlink: 'syz.1.3532': attribute type 10 has an invalid length.
[  229.445616][T12848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3532'.
[  229.653817][T12858] program syz.2.3537 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  229.946311][T11679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.199175][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.296942][T12877] netlink: 'syz.0.3544': attribute type 10 has an invalid length.
[  230.306592][T12877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3544'.
[  230.334330][T12879] loop1: detected capacity change from 0 to 764
[  230.342594][T12879] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  230.450486][T12884] program syz.2.3548 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  230.643415][T12894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  230.662718][T12897] loop2: detected capacity change from 0 to 512
[  230.669712][T12897] EXT4-fs: Ignoring removed mblk_io_submit option
[  230.688929][T12897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  230.701088][T12897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  230.712479][T12897] System zones: 1-12
[  230.718249][T12897] EXT4-fs (loop2): 1 truncate cleaned up
[  230.726267][T12897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.743338][T12903] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3555'.
[  230.752676][T12903] 1{X功: renamed from 
30{X功 (while UP)
[  230.761628][T12903] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[  230.812236][T12905] loop4: detected capacity change from 0 to 128
[  230.904970][T12913] loop4: detected capacity change from 0 to 512
[  230.915810][T12913] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  230.966828][T12917] loop1: detected capacity change from 0 to 764
[  230.974684][T12917] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  230.992051][T12919] loop4: detected capacity change from 0 to 764
[  231.000006][T12919] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  231.503156][T12932] loop1: detected capacity change from 0 to 512
[  231.510580][T12932] EXT4-fs: Ignoring removed mblk_io_submit option
[  231.519040][T12932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  231.532401][T12932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  231.556787][T12932] System zones: 1-12
[  231.558435][T12937] loop0: detected capacity change from 0 to 128
[  231.591362][T12932] EXT4-fs (loop1): 1 truncate cleaned up
[  231.598060][T12932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.680983][T11486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.031872][T12948] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3571'.
[  232.177218][T12958] loop0: detected capacity change from 0 to 764
[  232.186778][T12958] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  232.197159][T12960] loop2: detected capacity change from 0 to 512
[  232.210791][T12960] EXT4-fs: Ignoring removed mblk_io_submit option
[  232.272727][T12960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  232.303979][T12960] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  232.319133][T12960] System zones: 1-12
[  232.329249][T12960] EXT4-fs (loop2): 1 truncate cleaned up
[  232.335481][T12960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.414998][T12965] program syz.4.3577 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.575480][T10948] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.581460][T12971] loop0: detected capacity change from 0 to 512
[  232.593605][T12971] EXT4-fs: Ignoring removed mblk_io_submit option
[  232.603255][T12971] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  232.626702][T12971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  232.640490][T12971] System zones: 1-12
[  232.647225][T12971] EXT4-fs (loop0): 1 truncate cleaned up
[  232.653716][T12971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.674610][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3581'.
[  232.686493][T12977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  232.821350][T12982] random: crng reseeded on system resumption
[  232.982482][T12989] netlink: 'syz.4.3584': attribute type 3 has an invalid length.
[  233.080123][T12997] loop3: detected capacity change from 0 to 764
[  233.102983][T12997] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  233.114673][T12999] program syz.1.3590 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  233.313836][T11486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.337660][T13004] netlink: 'syz.1.3592': attribute type 3 has an invalid length.
[  233.468116][   T29] kauditd_printk_skb: 351 callbacks suppressed
[  233.468132][   T29] audit: type=1326 audit(1757273388.060:16589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13005 comm="syz.2.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  233.498313][   T29] audit: type=1326 audit(1757273388.060:16590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13005 comm="syz.2.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  233.520914][T11679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.534374][   T29] audit: type=1326 audit(1757273388.130:16591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13005 comm="syz.2.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  233.558621][   T29] audit: type=1326 audit(1757273388.130:16592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13005 comm="syz.2.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  233.583493][   T29] audit: type=1326 audit(1757273388.130:16593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13005 comm="syz.2.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  233.607126][   T29] audit: type=1326 audit(1757273388.130:16594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13005 comm="syz.2.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  233.613403][T13011] program syz.2.3595 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  233.632222][   T29] audit: type=1326 audit(1757273388.130:16595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13005 comm="syz.2.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  233.665866][   T29] audit: type=1326 audit(1757273388.130:16596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13005 comm="syz.2.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  233.705287][T13013] random: crng reseeded on system resumption
[  233.775374][T13019] netlink: 'syz.2.3598': attribute type 10 has an invalid length.
[  233.784374][T13019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3598'.
[  233.795228][T13019] dummy0: entered promiscuous mode
[  233.813559][T13019] bridge0: port 3(dummy0) entered blocking state
[  233.820958][T13019] bridge0: port 3(dummy0) entered disabled state
[  233.831553][T13019] dummy0: entered allmulticast mode
[  233.846526][T13026] SELinux: failed to load policy
[  233.856010][T13019] bridge0: port 3(dummy0) entered blocking state
[  233.865132][T13019] bridge0: port 3(dummy0) entered forwarding state
[  233.875765][T13031] loop0: detected capacity change from 0 to 128
[  233.897810][T13026] rdma_rxe: rxe_newlink: failed to add vxcan1
[  233.905389][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3601'.
[  233.933474][T13026] bridge0: entered promiscuous mode
[  233.939630][T13026] macsec1: entered allmulticast mode
[  233.944993][T13026] bridge0: entered allmulticast mode
[  233.953416][T13031] bio_check_eod: 47 callbacks suppressed
[  233.953437][T13031] syz.0.3602: attempt to access beyond end of device
[  233.953437][T13031] loop0: rw=2049, sector=154, nr_sectors = 2 limit=128
[  233.953558][T13026] bridge0: port 4(macsec1) entered blocking state
[  233.979508][T13026] bridge0: port 4(macsec1) entered disabled state
[  233.987301][T13026] bridge0: left allmulticast mode
[  233.992405][T13026] bridge0: left promiscuous mode
[  234.001960][T13035] netlink: 'syz.2.3603': attribute type 10 has an invalid length.
[  234.010360][T13035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3603'.
[  234.101571][T13037] SELinux: failed to load policy
[  234.123231][T13037] rdma_rxe: rxe_newlink: failed to add vxcan1
[  234.126740][T13045] program syz.1.3608 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  234.140126][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3604'.
[  234.152915][T13037] bridge0: entered promiscuous mode
[  234.158206][T13037] macsec1: entered allmulticast mode
[  234.163615][T13037] bridge0: entered allmulticast mode
[  234.170637][T13037] bridge0: port 4(macsec1) entered blocking state
[  234.177131][T13037] bridge0: port 4(macsec1) entered disabled state
[  234.186400][T13037] bridge0: left allmulticast mode
[  234.191522][T13037] bridge0: left promiscuous mode
[  234.197214][T13044] loop0: detected capacity change from 0 to 764
[  234.205569][T13044] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  234.241750][   T29] audit: type=1326 audit(1757273388.840:16597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13048 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511158ebe9 code=0x7ffc0000
[  234.266594][   T29] audit: type=1326 audit(1757273388.840:16598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13048 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511158ebe9 code=0x7ffc0000
[  234.370392][T13051] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3611'.
[  234.548416][T13058] program syz.0.3612 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  234.742562][T13064] SELinux: failed to load policy
[  234.770172][T13064] syz2: rxe_newlink: already configured on vxcan1
[  234.807028][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3615'.
[  234.847702][T13064] bridge0: entered promiscuous mode
[  234.874246][T13069] loop0: detected capacity change from 0 to 512
[  234.879238][T13064] macsec1: entered allmulticast mode
[  234.889521][T13064] bridge0: entered allmulticast mode
[  234.895164][T13069] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  234.901859][T13064] bridge0: port 4(macsec1) entered blocking state
[  234.910716][T13064] bridge0: port 4(macsec1) entered disabled state
[  234.924213][T13064] bridge0: left allmulticast mode
[  234.929341][T13064] bridge0: left promiscuous mode
[  235.041910][T13081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  235.049371][T13081] IPv6: NLM_F_CREATE should be set when creating new route
[  235.134912][T13091] loop3: detected capacity change from 0 to 512
[  235.152646][T13091] EXT4-fs: Ignoring removed mblk_io_submit option
[  235.161201][T13093] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3629'.
[  235.172930][T13091] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  235.190839][T13090] SELinux: failed to load policy
[  235.198922][T13091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  235.208843][T13090] rdma_rxe: rxe_newlink: failed to add vxcan1
[  235.227173][T13091] System zones: 1-12
[  235.237811][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3628'.
[  235.247153][T13091] EXT4-fs (loop3): 1 truncate cleaned up
[  235.257524][T13090] bridge0: entered promiscuous mode
[  235.264080][T13090] macsec1: entered allmulticast mode
[  235.269452][T13090] bridge0: entered allmulticast mode
[  235.269695][T13091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.276802][T13090] bridge0: port 4(macsec1) entered blocking state
[  235.293845][T13090] bridge0: port 4(macsec1) entered disabled state
[  235.303333][T13095] random: crng reseeded on system resumption
[  235.313628][T13090] bridge0: left allmulticast mode
[  235.318827][T13090] bridge0: left promiscuous mode
[  235.361976][T13100] loop1: detected capacity change from 0 to 512
[  235.375964][T13100] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  235.403183][T13105] random: crng reseeded on system resumption
[  235.432887][T13108] SELinux:  policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c
[  235.448644][T13108] SELinux: failed to load policy
[  235.455526][T13108] rdma_rxe: rxe_newlink: failed to add vxcan1
[  235.465847][T13110] program syz.2.3635 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  235.480070][T13108] bridge0: entered promiscuous mode
[  235.486243][T13108] macsec1: entered allmulticast mode
[  235.491859][T13108] bridge0: entered allmulticast mode
[  235.499391][T13108] bridge0: port 4(macsec1) entered blocking state
[  235.505916][T13108] bridge0: port 4(macsec1) entered disabled state
[  235.513865][T13108] bridge0: left allmulticast mode
[  235.519031][T13108] bridge0: left promiscuous mode
[  235.536097][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.561557][T13116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  235.569390][T13116] IPv6: NLM_F_CREATE should be set when creating new route
[  235.631168][T13124] loop1: detected capacity change from 0 to 764
[  235.638659][T13124] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  235.930937][T13137] random: crng reseeded on system resumption
[  236.165453][T13141] 0{X功: renamed from 
31{X功 (while UP)
[  236.175657][T13141] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  236.236429][T13144] netlink: 'syz.3.3646': attribute type 10 has an invalid length.
[  236.320924][T13148] program syz.3.3648 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  236.485051][T13156] syz2: rxe_newlink: already configured on vxcan1
[  236.509519][T13156] bridge0: entered promiscuous mode
[  236.516012][T13154] SELinux: failed to load policy
[  236.526505][T13156] macsec1: entered allmulticast mode
[  236.532560][T13156] bridge0: entered allmulticast mode
[  236.542239][T13161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  236.545598][T13156] bridge0: port 4(macsec1) entered blocking state
[  236.557912][T13156] bridge0: port 4(macsec1) entered disabled state
[  236.575497][T13156] bridge0: left allmulticast mode
[  236.581179][T13156] bridge0: left promiscuous mode
[  236.605699][T13168] 1{X功: renamed from 
30{X功 (while UP)
[  236.617158][T13168] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[  236.639035][T13170] netlink: 'syz.0.3659': attribute type 10 has an invalid length.
[  236.711985][T13176] loop0: detected capacity change from 0 to 128
[  236.767908][T13182] loop3: detected capacity change from 0 to 1024
[  236.795849][T13182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.831395][T13182] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  237.204436][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.264863][T13203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  237.278788][T13201] SELinux: failed to load policy
[  237.287836][T13201] rdma_rxe: rxe_newlink: failed to add vxcan1
[  237.294945][T13201] __nla_validate_parse: 7 callbacks suppressed
[  237.294964][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3668'.
[  237.317076][T13201] bridge0: entered promiscuous mode
[  237.322464][T13201] macsec1: entered allmulticast mode
[  237.327817][T13201] bridge0: entered allmulticast mode
[  237.334555][T13201] bridge0: port 4(macsec1) entered blocking state
[  237.341098][T13201] bridge0: port 4(macsec1) entered disabled state
[  237.350880][T13201] bridge0: left allmulticast mode
[  237.356011][T13201] bridge0: left promiscuous mode
[  237.368822][T13207] loop3: detected capacity change from 0 to 1024
[  237.397627][T13207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.440721][T13209] loop0: detected capacity change from 0 to 512
[  237.448894][T13213] netlink: 'syz.1.3672': attribute type 10 has an invalid length.
[  237.458037][T13207] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  237.460573][T13213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3672'.
[  237.511805][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.526889][T13209] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  237.589737][T13216] random: crng reseeded on system resumption
[  237.599550][T13224] loop4: detected capacity change from 0 to 128
[  237.636764][T13227] loop3: detected capacity change from 0 to 1024
[  237.648090][T13224] syz.4.3677: attempt to access beyond end of device
[  237.648090][T13224] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128
[  237.663790][T13224] syz.4.3677: attempt to access beyond end of device
[  237.663790][T13224] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128
[  237.677695][T13224] buffer_io_error: 18 callbacks suppressed
[  237.677717][T13224] Buffer I/O error on dev loop4, logical block 80, lost async page write
[  237.694176][T13224] syz.4.3677: attempt to access beyond end of device
[  237.694176][T13224] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128
[  237.708951][T13224] syz.4.3677: attempt to access beyond end of device
[  237.708951][T13224] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128
[  237.722845][T13224] Buffer I/O error on dev loop4, logical block 84, lost async page write
[  237.733997][T13224] syz.4.3677: attempt to access beyond end of device
[  237.733997][T13224] loop4: rw=2049, sector=186, nr_sectors = 8 limit=128
[  237.734368][T13227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.783889][T13224] syz.4.3677: attempt to access beyond end of device
[  237.783889][T13224] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128
[  237.797393][T13224] Buffer I/O error on dev loop4, logical block 96, lost async page write
[  237.809174][T13224] syz.4.3677: attempt to access beyond end of device
[  237.809174][T13224] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128
[  237.845438][T13227] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  237.856969][T13244] program syz.1.3684 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  237.863662][T13224] syz.4.3677: attempt to access beyond end of device
[  237.863662][T13224] loop4: rw=2049, sector=200, nr_sectors = 2 limit=128
[  237.883715][T13224] Buffer I/O error on dev loop4, logical block 100, lost async page write
[  237.937446][T13224] syz.4.3677: attempt to access beyond end of device
[  237.937446][T13224] loop4: rw=2049, sector=218, nr_sectors = 8 limit=128
[  237.954279][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.965482][T13224] Buffer I/O error on dev loop4, logical block 112, lost async page write
[  237.975694][T13224] Buffer I/O error on dev loop4, logical block 116, lost async page write
[  237.986626][T13224] Buffer I/O error on dev loop4, logical block 88, lost async page write
[  237.998769][T13224] Buffer I/O error on dev loop4, logical block 92, lost async page write
[  238.008466][T13224] Buffer I/O error on dev loop4, logical block 120, lost async page write
[  238.024392][T13224] Buffer I/O error on dev loop4, logical block 124, lost async page write
[  238.090206][T13254] netlink: 'syz.0.3688': attribute type 10 has an invalid length.
[  238.098825][T13254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3688'.
[  238.469635][   T29] kauditd_printk_skb: 689 callbacks suppressed
[  238.469672][   T29] audit: type=1326 audit(1757273393.060:17288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13262 comm="syz.4.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  238.500110][   T29] audit: type=1326 audit(1757273393.060:17289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13262 comm="syz.4.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  238.529984][   T29] audit: type=1326 audit(1757273393.120:17290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13262 comm="syz.4.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  238.555415][   T29] audit: type=1326 audit(1757273393.120:17291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13262 comm="syz.4.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  238.579212][   T29] audit: type=1326 audit(1757273393.120:17292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13262 comm="syz.4.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  238.603155][   T29] audit: type=1326 audit(1757273393.130:17293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13262 comm="syz.4.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  238.631096][T13266] loop4: detected capacity change from 0 to 512
[  238.639257][T13266] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  238.650604][   T29] audit: type=1326 audit(1757273393.130:17294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13262 comm="syz.4.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  238.674477][   T29] audit: type=1326 audit(1757273393.130:17295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13262 comm="syz.4.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  238.698129][   T29] audit: type=1326 audit(1757273393.130:17296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13262 comm="syz.4.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  238.722070][   T29] audit: type=1326 audit(1757273393.130:17297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13262 comm="syz.4.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  238.801852][T13268] random: crng reseeded on system resumption
[  238.922986][T13278] SELinux:  policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c
[  238.933502][T13277] loop1: detected capacity change from 0 to 1024
[  238.940469][T13278] SELinux: failed to load policy
[  238.960402][T13274] rdma_rxe: rxe_newlink: failed to add vxcan1
[  238.967566][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3695'.
[  238.980453][T13274] bridge0: entered promiscuous mode
[  238.985876][T13274] macsec1: entered allmulticast mode
[  238.991211][T13274] bridge0: entered allmulticast mode
[  238.998117][T13274] bridge0: port 4(macsec1) entered blocking state
[  239.004766][T13274] bridge0: port 4(macsec1) entered disabled state
[  239.013363][T13277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.028358][T13274] bridge0: left allmulticast mode
[  239.033854][T13274] bridge0: left promiscuous mode
[  239.053245][T13285] program syz.0.3698 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  239.072043][T13286] loop4: detected capacity change from 0 to 512
[  239.074069][T13277] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  239.079016][T13286] EXT4-fs: Ignoring removed mblk_io_submit option
[  239.102359][T13286] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  239.115404][T13286] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  239.133305][T13286] System zones: 1-12
[  239.147030][T13286] EXT4-fs (loop4): 1 truncate cleaned up
[  239.153570][T13286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.190222][T10948] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.328273][T13304] netlink: 'syz.3.3702': attribute type 3 has an invalid length.
[  240.402005][T13313] loop2: detected capacity change from 0 to 512
[  240.428084][T13313] EXT4-fs: Ignoring removed mblk_io_submit option
[  240.454443][T13313] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  240.477964][T13315] random: crng reseeded on system resumption
[  240.486223][T13317] program syz.1.3710 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.523677][T13313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  240.557329][T13313] System zones: 1-12
[  240.563517][T13313] EXT4-fs (loop2): 1 truncate cleaned up
[  240.570653][T13313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.593891][T11894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.627662][T13325] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3714'.
[  240.671796][T13325] 0{X功: renamed from gretap0 (while UP)
[  240.688250][T13325] 0{X功: entered allmulticast mode
[  240.694506][T13325] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  240.739302][T13336] program syz.0.3717 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.814458][T13346] program syz.3.3721 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.853170][T13352] netlink: 'syz.1.3720': attribute type 3 has an invalid length.
[  241.066618][T13361] SELinux: failed to load policy
[  241.075733][T13361] rdma_rxe: rxe_newlink: failed to add vxcan1
[  241.077100][T13359] netlink: 'syz.3.3725': attribute type 10 has an invalid length.
[  241.083421][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3726'.
[  241.086618][T13361] bridge0: entered promiscuous mode
[  241.092567][T13359] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3725'.
[  241.111487][T13361] macsec1: entered allmulticast mode
[  241.122479][T13361] bridge0: entered allmulticast mode
[  241.176542][T13361] bridge0: port 4(macsec1) entered blocking state
[  241.183248][T13361] bridge0: port 4(macsec1) entered disabled state
[  241.191137][T13361] bridge0: left allmulticast mode
[  241.196323][T13361] bridge0: left promiscuous mode
[  241.293528][T13368] loop0: detected capacity change from 0 to 764
[  241.314609][T13368] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  241.408424][T13376] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3733'.
[  241.492096][T11486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.593675][T13381] random: crng reseeded on system resumption
[  241.775325][T13384] loop4: detected capacity change from 0 to 1024
[  241.792675][T13384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.870672][T11894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.110415][T13393] SELinux: failed to load policy
[  242.117164][T13393] rdma_rxe: rxe_newlink: failed to add vxcan1
[  242.126870][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3739'.
[  242.140057][T13393] bridge0: entered promiscuous mode
[  242.145725][T13393] macsec1: entered allmulticast mode
[  242.151104][T13393] bridge0: entered allmulticast mode
[  242.159708][T13393] bridge0: port 4(macsec1) entered blocking state
[  242.166206][T13393] bridge0: port 4(macsec1) entered disabled state
[  242.176063][T13393] bridge0: left allmulticast mode
[  242.181359][T13393] bridge0: left promiscuous mode
[  242.210659][T13402] loop2: detected capacity change from 0 to 128
[  242.223130][T13402] bio_check_eod: 20 callbacks suppressed
[  242.223151][T13402] syz.2.3743: attempt to access beyond end of device
[  242.223151][T13402] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128
[  242.262674][T13402] syz.2.3743: attempt to access beyond end of device
[  242.262674][T13402] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128
[  242.352287][T13402] syz.2.3743: attempt to access beyond end of device
[  242.352287][T13402] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128
[  242.369034][T13402] syz.2.3743: attempt to access beyond end of device
[  242.369034][T13402] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128
[  242.391407][T13411] random: crng reseeded on system resumption
[  242.392258][T13402] syz.2.3743: attempt to access beyond end of device
[  242.392258][T13402] loop2: rw=2049, sector=186, nr_sectors = 8 limit=128
[  242.407925][T13407] loop4: detected capacity change from 0 to 1024
[  242.422193][T13402] syz.2.3743: attempt to access beyond end of device
[  242.422193][T13402] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128
[  242.436713][T13402] syz.2.3743: attempt to access beyond end of device
[  242.436713][T13402] loop2: rw=2049, sector=194, nr_sectors = 8 limit=128
[  242.450960][T13402] syz.2.3743: attempt to access beyond end of device
[  242.450960][T13402] loop2: rw=2049, sector=200, nr_sectors = 2 limit=128
[  242.465000][T13402] syz.2.3743: attempt to access beyond end of device
[  242.465000][T13402] loop2: rw=2049, sector=218, nr_sectors = 8 limit=128
[  242.468744][T13407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.492092][T13402] syz.2.3743: attempt to access beyond end of device
[  242.492092][T13402] loop2: rw=2049, sector=224, nr_sectors = 2 limit=128
[  242.553044][T13407] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  242.594127][T11894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.607038][T13421] vxcan1 speed is unknown, defaulting to 1000
[  242.689054][T13426] netlink: 'syz.4.3750': attribute type 3 has an invalid length.
[  242.726208][T13428] loop2: detected capacity change from 0 to 512
[  242.740912][T13428] EXT4-fs: Ignoring removed mblk_io_submit option
[  242.761614][T13428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  242.774076][T13428] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  242.783457][T13428] System zones: 1-12
[  242.787897][T13428] EXT4-fs (loop2): 1 truncate cleaned up
[  242.794911][T13428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.635814][   T29] kauditd_printk_skb: 236 callbacks suppressed
[  243.635851][   T29] audit: type=1326 audit(1757273398.230:17534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13444 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  243.666970][   T29] audit: type=1326 audit(1757273398.260:17535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13444 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  243.731582][T11486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.425113][   T29] audit: type=1326 audit(1757273398.260:17536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13444 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  244.449172][   T29] audit: type=1326 audit(1757273398.260:17537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13444 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  244.472769][   T29] audit: type=1326 audit(1757273398.260:17538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13444 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  244.476091][T13455] random: crng reseeded on system resumption
[  244.496465][   T29] audit: type=1326 audit(1757273398.270:17539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13444 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  244.496507][   T29] audit: type=1326 audit(1757273398.270:17540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13444 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  244.496540][   T29] audit: type=1326 audit(1757273398.270:17541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13444 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  244.575731][   T29] audit: type=1326 audit(1757273398.270:17542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13444 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  244.599658][   T29] audit: type=1326 audit(1757273398.270:17543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13444 comm="syz.4.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ec65ebe9 code=0x7ffc0000
[  244.800287][T13468] program syz.4.3765 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  244.890201][T13476] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3768'.
[  244.932660][T13474] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3769'.
[  244.965439][T13474] 0{X功: renamed from 
31{X功 (while UP)
[  244.973906][T13474] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  245.112979][T13483] program syz.4.3771 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  245.374244][T13492] random: crng reseeded on system resumption
[  245.381378][T13489] vxcan1 speed is unknown, defaulting to 1000
[  245.648385][T13503] loop0: detected capacity change from 0 to 512
[  245.655457][T13503] EXT4-fs: Ignoring removed mblk_io_submit option
[  245.663510][T13503] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  245.674250][T13503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  245.683559][T13503] System zones: 1-12
[  245.712881][T13503] EXT4-fs (loop0): 1 truncate cleaned up
[  245.763161][T13503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.902904][T13514] loop3: detected capacity change from 0 to 1024
[  245.945604][T13514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.965553][T13519] loop1: detected capacity change from 0 to 128
[  246.102015][T13519] buffer_io_error: 18 callbacks suppressed
[  246.102032][T13519] Buffer I/O error on dev loop1, logical block 80, lost async page write
[  246.203141][T13519] Buffer I/O error on dev loop1, logical block 84, lost async page write
[  246.258898][T13519] Buffer I/O error on dev loop1, logical block 96, lost async page write
[  246.328385][T13519] Buffer I/O error on dev loop1, logical block 100, lost async page write
[  246.389741][T13519] Buffer I/O error on dev loop1, logical block 112, lost async page write
[  246.425973][T13519] Buffer I/O error on dev loop1, logical block 116, lost async page write
[  246.435011][T13524] loop4: detected capacity change from 0 to 512
[  246.455649][T13524] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  246.461842][T13514] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  246.482801][T13519] Buffer I/O error on dev loop1, logical block 88, lost async page write
[  246.494376][T13519] Buffer I/O error on dev loop1, logical block 92, lost async page write
[  246.523422][T13519] Buffer I/O error on dev loop1, logical block 120, lost async page write
[  246.571287][T13519] Buffer I/O error on dev loop1, logical block 124, lost async page write
[  246.701901][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.766184][T13535] loop3: detected capacity change from 0 to 764
[  246.774920][T13535] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  247.186662][T11679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.889291][T13562] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3797'.
[  247.898342][T13562] 1{X功: renamed from 
30{X功 (while UP)
[  247.908600][T13562] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[  247.924647][T13566] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3798'.
[  247.967420][T13565] SELinux: failed to load policy
[  247.983565][T13565] rdma_rxe: rxe_newlink: failed to add vxcan1
[  247.993227][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3799'.
[  248.008359][T13565] bridge0: entered promiscuous mode
[  248.016226][T13573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  248.024022][T13573] IPv6: NLM_F_CREATE should be set when creating new route
[  248.026003][T13565] macsec1: entered allmulticast mode
[  248.037149][T13565] bridge0: entered allmulticast mode
[  248.045747][T13565] bridge0: port 4(macsec1) entered blocking state
[  248.052603][T13565] bridge0: port 4(macsec1) entered disabled state
[  248.063058][T13565] bridge0: left allmulticast mode
[  248.068248][T13565] bridge0: left promiscuous mode
[  248.114345][T13576] vxcan1 speed is unknown, defaulting to 1000
[  248.259783][T13588] loop2: detected capacity change from 0 to 1024
[  248.302068][T13588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.386906][T13588] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  248.515349][T11486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.572174][T13602] loop2: detected capacity change from 0 to 128
[  248.611776][T13602] bio_check_eod: 48 callbacks suppressed
[  248.611793][T13602] syz.2.3810: attempt to access beyond end of device
[  248.611793][T13602] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128
[  248.645257][   T29] kauditd_printk_skb: 508 callbacks suppressed
[  248.645281][   T29] audit: type=1326 audit(1757273403.230:18052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49ec655ba7 code=0x7ffc0000
[  248.675298][   T29] audit: type=1326 audit(1757273403.230:18053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49ec5fadb9 code=0x7ffc0000
[  248.685169][T13602] syz.2.3810: attempt to access beyond end of device
[  248.685169][T13602] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128
[  248.699283][   T29] audit: type=1326 audit(1757273403.230:18054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49ec655ba7 code=0x7ffc0000
[  248.717350][T13602] syz.2.3810: attempt to access beyond end of device
[  248.717350][T13602] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128
[  248.736980][   T29] audit: type=1326 audit(1757273403.230:18055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49ec5fadb9 code=0x7ffc0000
[  248.737017][   T29] audit: type=1326 audit(1757273403.230:18056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49ec655ba7 code=0x7ffc0000
[  248.752534][T13602] syz.2.3810: attempt to access beyond end of device
[  248.752534][T13602] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128
[  248.775493][   T29] audit: type=1326 audit(1757273403.230:18057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49ec5fadb9 code=0x7ffc0000
[  248.801945][T13602] syz.2.3810: attempt to access beyond end of device
[  248.801945][T13602] loop2: rw=2049, sector=186, nr_sectors = 8 limit=128
[  248.812888][   T29] audit: type=1326 audit(1757273403.230:18058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49ec655ba7 code=0x7ffc0000
[  248.812926][   T29] audit: type=1326 audit(1757273403.230:18059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49ec5fadb9 code=0x7ffc0000
[  248.837444][T13602] syz.2.3810: attempt to access beyond end of device
[  248.837444][T13602] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128
[  248.851362][   T29] audit: type=1326 audit(1757273403.230:18060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49ec655ba7 code=0x7ffc0000
[  248.875469][T13602] syz.2.3810: attempt to access beyond end of device
[  248.875469][T13602] loop2: rw=2049, sector=194, nr_sectors = 8 limit=128
[  248.899198][   T29] audit: type=1326 audit(1757273403.230:18061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49ec5fadb9 code=0x7ffc0000
[  248.979507][T13602] syz.2.3810: attempt to access beyond end of device
[  248.979507][T13602] loop2: rw=2049, sector=200, nr_sectors = 2 limit=128
[  248.993533][T13602] syz.2.3810: attempt to access beyond end of device
[  248.993533][T13602] loop2: rw=2049, sector=218, nr_sectors = 8 limit=128
[  249.007652][T13602] syz.2.3810: attempt to access beyond end of device
[  249.007652][T13602] loop2: rw=2049, sector=224, nr_sectors = 2 limit=128
[  249.041719][T13608] loop0: detected capacity change from 0 to 512
[  249.067004][T13608] EXT4-fs: Ignoring removed mblk_io_submit option
[  249.074002][T13608] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  249.085218][T13608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  249.093508][T13608] System zones: 1-12
[  249.098331][T13608] EXT4-fs (loop0): 1 truncate cleaned up
[  249.104807][T13608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.241158][T13614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.387100][T13623] SELinux: failed to load policy
[  249.398521][T13626] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3819'.
[  249.433421][T13623] rdma_rxe: rxe_newlink: failed to add vxcan1
[  249.449972][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3817'.
[  249.461932][T13623] bridge0: entered promiscuous mode
[  249.467485][T13623] macsec1: entered allmulticast mode
[  249.472940][T13623] bridge0: entered allmulticast mode
[  249.484028][T13623] bridge0: port 4(macsec1) entered blocking state
[  249.490963][T13623] bridge0: port 4(macsec1) entered disabled state
[  249.519249][T13623] bridge0: left allmulticast mode
[  249.524347][T13623] bridge0: left promiscuous mode
[  249.626975][T13636] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3821'.
[  249.677149][T13636] 0{X功: renamed from 
31{X功 (while UP)
[  249.715337][T13636] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  249.766036][T13648] loop4: detected capacity change from 0 to 128
[  249.775720][T13646] loop2: detected capacity change from 0 to 1024
[  249.815199][T13646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.900698][T13652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.921477][T13646] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  249.977548][T11486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.047092][T11679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.063712][T13659] vxcan1 speed is unknown, defaulting to 1000
[  250.292845][T13678] loop4: detected capacity change from 0 to 512
[  251.289212][T13678] EXT4-fs: Ignoring removed mblk_io_submit option
[  251.318410][T13678] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  251.391525][T13685] loop3: detected capacity change from 0 to 512
[  251.419642][T13685] EXT4-fs: Ignoring removed mblk_io_submit option
[  251.436725][T13678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  251.460428][T13678] System zones: 1-12
[  251.489308][T13685] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  251.502012][T13678] EXT4-fs (loop4): 1 truncate cleaned up
[  251.508543][T13678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.537726][T13685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  251.577585][T13685] System zones: 1-12
[  251.593667][T13685] EXT4-fs (loop3): 1 truncate cleaned up
[  251.624253][T13685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.770549][T13697] SELinux: failed to load policy
[  251.782233][T13697] rdma_rxe: rxe_newlink: failed to add vxcan1
[  251.789297][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3842'.
[  251.810000][T13697] bridge0: entered promiscuous mode
[  251.815800][T13697] macsec1: entered allmulticast mode
[  251.821228][T13697] bridge0: entered allmulticast mode
[  251.856001][T13697] bridge0: port 4(macsec1) entered blocking state
[  251.862669][T13697] bridge0: port 4(macsec1) entered disabled state
[  251.871703][T11894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.902069][T13697] bridge0: left allmulticast mode
[  251.907227][T13697] bridge0: left promiscuous mode
[  252.003257][T13707] loop2: detected capacity change from 0 to 128
[  252.041846][T13711] netlink: 'syz.1.3844': attribute type 3 has an invalid length.
[  252.066159][T13707] buffer_io_error: 32 callbacks suppressed
[  252.066179][T13707] Buffer I/O error on dev loop2, logical block 80, lost async page write
[  252.084689][T13707] Buffer I/O error on dev loop2, logical block 84, lost async page write
[  252.094921][T13707] Buffer I/O error on dev loop2, logical block 96, lost async page write
[  252.104471][T13707] Buffer I/O error on dev loop2, logical block 100, lost async page write
[  252.114099][T13707] Buffer I/O error on dev loop2, logical block 112, lost async page write
[  252.127963][T13714] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3847'.
[  252.143068][T13714] 1{X功: renamed from 
30{X功 (while UP)
[  252.145164][T13707] Buffer I/O error on dev loop2, logical block 116, lost async page write
[  252.160431][T13714] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[  252.162623][T13707] Buffer I/O error on dev loop2, logical block 88, lost async page write
[  252.193073][T13707] Buffer I/O error on dev loop2, logical block 92, lost async page write
[  252.209619][T13707] Buffer I/O error on dev loop2, logical block 120, lost async page write
[  252.220407][T13707] Buffer I/O error on dev loop2, logical block 124, lost async page write
[  252.257683][T13718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  252.380554][T13722] netlink: 'syz.4.3850': attribute type 10 has an invalid length.
[  252.389740][T13722] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3850'.
[  252.417903][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.442226][T13724] random: crng reseeded on system resumption
[  252.455894][T13726] program syz.3.3851 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  252.538281][T13733] loop2: detected capacity change from 0 to 1024
[  252.556871][T13735] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3856'.
[  252.567944][T13735] 0{X功: renamed from 
31{X功 (while UP)
[  252.576688][T13733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.593029][T13735] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  252.600401][T13741] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3858'.
[  252.621597][T13741] 0{X功: renamed from 
31{X功 (while UP)
[  252.641643][T13741] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  252.751761][T11486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.758072][T13755] loop0: detected capacity change from 0 to 1024
[  252.763816][T13753] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3862'.
[  252.781018][T13755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.847108][T13755] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  252.865521][T13760] netlink: 'syz.2.3865': attribute type 10 has an invalid length.
[  252.874449][T13760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3865'.
[  252.917428][T13766] random: crng reseeded on system resumption
[  252.936948][T11679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.122111][T13780] netlink: 'syz.1.3872': attribute type 10 has an invalid length.
[  253.134551][T13780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3872'.
[  253.491158][T13792] loop1: detected capacity change from 0 to 128
[  253.702176][T13792] bio_check_eod: 105 callbacks suppressed
[  253.702197][T13792] syz.1.3874: attempt to access beyond end of device
[  253.702197][T13792] loop1: rw=2049, sector=154, nr_sectors = 2 limit=128
[  253.749105][T13802] loop4: detected capacity change from 0 to 1024
[  253.762691][T13802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.777974][T13804] netlink: 'syz.2.3881': attribute type 10 has an invalid length.
[  253.791204][T13804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3881'.
[  253.801244][T13802] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  253.810184][   T29] kauditd_printk_skb: 411 callbacks suppressed
[  253.810207][   T29] audit: type=1326 audit(1757273408.400:18473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13768 comm="syz.0.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  253.848133][   T29] audit: type=1326 audit(1757273408.400:18474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13768 comm="syz.0.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82adcebe9 code=0x7ffc0000
[  253.916842][T11894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.924204][T13808] random: crng reseeded on system resumption
[  253.957456][T13814] program syz.4.3884 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  253.997794][T13818] netlink: 'syz.1.3887': attribute type 10 has an invalid length.
[  254.006404][T13818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3887'.
[  254.033578][T13820] loop4: detected capacity change from 0 to 764
[  254.061095][T13820] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  254.094905][T13828] loop0: detected capacity change from 0 to 512
[  254.115457][T13828] EXT4-fs: Ignoring removed mblk_io_submit option
[  254.139154][T13828] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  254.166105][T13830] random: crng reseeded on system resumption
[  254.174615][T13828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  254.189784][T13828] System zones: 1-12
[  254.199677][T13828] EXT4-fs (loop0): 1 truncate cleaned up
[  254.205012][   T29] audit: type=1326 audit(1757273408.800:18475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.2.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  254.210034][T13828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.230389][   T29] audit: type=1326 audit(1757273408.800:18476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.2.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  254.266989][   T29] audit: type=1326 audit(1757273408.800:18477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.2.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  254.290778][   T29] audit: type=1326 audit(1757273408.800:18478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.2.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  254.315463][   T29] audit: type=1326 audit(1757273408.800:18479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.2.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  254.339788][   T29] audit: type=1326 audit(1757273408.800:18480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.2.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  254.363815][   T29] audit: type=1326 audit(1757273408.800:18481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.2.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  254.388464][   T29] audit: type=1326 audit(1757273408.800:18482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.2.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f280491ebe9 code=0x7ffc0000
[  254.586792][T13849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  254.594179][T13849] IPv6: NLM_F_CREATE should be set when creating new route
[  254.724471][T13855] random: crng reseeded on system resumption
[  254.741799][T13861] loop3: detected capacity change from 0 to 512
[  254.748834][T13861] EXT4-fs: Ignoring removed mblk_io_submit option
[  254.755931][T13861] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  254.770225][T13861] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  254.780562][T13861] System zones: 1-12
[  254.785248][T13861] EXT4-fs (loop3): 1 truncate cleaned up
[  254.793767][T13861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.961293][T13866] netlink: 'syz.1.3904': attribute type 10 has an invalid length.
[  255.003996][T11679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.209940][T13877] random: crng reseeded on system resumption
[  255.216511][T13880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  255.323804][T13889] loop2: detected capacity change from 0 to 128
[  255.349274][T13889] syz.2.3912: attempt to access beyond end of device
[  255.349274][T13889] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128
[  255.369445][T13889] syz.2.3912: attempt to access beyond end of device
[  255.369445][T13889] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128
[  255.390659][T13889] syz.2.3912: attempt to access beyond end of device
[  255.390659][T13889] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128
[  255.408363][T13889] syz.2.3912: attempt to access beyond end of device
[  255.408363][T13889] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128
[  255.424351][T13889] syz.2.3912: attempt to access beyond end of device
[  255.424351][T13889] loop2: rw=2049, sector=186, nr_sectors = 8 limit=128
[  255.439605][T13889] syz.2.3912: attempt to access beyond end of device
[  255.439605][T13889] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128
[  255.462440][T13889] syz.2.3912: attempt to access beyond end of device
[  255.462440][T13889] loop2: rw=2049, sector=194, nr_sectors = 8 limit=128
[  255.479894][T13889] syz.2.3912: attempt to access beyond end of device
[  255.479894][T13889] loop2: rw=2049, sector=200, nr_sectors = 2 limit=128
[  255.495853][T13889] syz.2.3912: attempt to access beyond end of device
[  255.495853][T13889] loop2: rw=2049, sector=218, nr_sectors = 8 limit=128
[  255.607137][T13893] random: crng reseeded on system resumption
[  255.684901][T13896] netlink: 'syz.4.3914': attribute type 10 has an invalid length.
[  255.773543][T13904] netlink: 'syz.4.3917': attribute type 10 has an invalid length.
[  255.864975][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.882802][T13911] 1{X功: renamed from 
30{X功 (while UP)
[  255.892386][T13911] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[  256.063753][T13928] random: crng reseeded on system resumption
[  256.077116][T13930] loop3: detected capacity change from 0 to 764
[  256.084832][T13930] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  256.144791][T13933] netlink: 'syz.0.3930': attribute type 10 has an invalid length.
[  256.386756][T13952] loop3: detected capacity change from 0 to 512
[  256.394284][T13952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  256.404265][T13952] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  256.415792][T13952] netlink: zone id is out of range
[  256.421256][T13952] netlink: zone id is out of range
[  256.426518][T13952] netlink: zone id is out of range
[  256.431757][T13952] netlink: zone id is out of range
[  256.436990][T13952] netlink: zone id is out of range
[  256.443000][T13952] netlink: zone id is out of range
[  256.468235][T13954] loop3: detected capacity change from 0 to 512
[  256.475171][T13954] EXT4-fs: Ignoring removed mblk_io_submit option
[  256.482125][T13954] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  256.493360][T13954] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082]
[  256.501752][T13954] System zones: 1-12
[  256.506092][T13954] EXT4-fs (loop3): 1 truncate cleaned up
[  256.512512][T13954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.651955][T13956] ==================================================================
[  256.660747][T13956] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark
[  256.669135][T13956] 
[  256.671560][T13956] write to 0xffff888119c7d3ec of 4 bytes by task 13954 on cpu 1:
[  256.679451][T13956]  xas_set_mark+0x12b/0x140
[  256.684082][T13956]  __folio_start_writeback+0x1dd/0x440
[  256.689570][T13956]  ext4_bio_write_folio+0x5ad/0x9f0
[  256.694966][T13956]  mpage_process_page_bufs+0x4a1/0x620
[  256.700456][T13956]  mpage_prepare_extent_to_map+0x786/0xc00
[  256.706626][T13956]  ext4_do_writepages+0xa05/0x2750
[  256.711854][T13956]  ext4_writepages+0x176/0x300
[  256.716814][T13956]  do_writepages+0x1c6/0x310
[  256.721426][T13956]  file_write_and_wait_range+0x156/0x2c0
[  256.727182][T13956]  generic_buffers_fsync_noflush+0x45/0x120
[  256.733208][T13956]  ext4_sync_file+0x1ab/0x690
[  256.737894][T13956]  vfs_fsync_range+0x10a/0x130
[  256.742770][T13956]  ext4_buffered_write_iter+0x34f/0x3c0
[  256.748695][T13956]  ext4_file_write_iter+0xdbf/0xf00
[  256.753946][T13956]  iter_file_splice_write+0x666/0xa60
[  256.759710][T13956]  direct_splice_actor+0x156/0x2a0
[  256.765011][T13956]  splice_direct_to_actor+0x312/0x680
[  256.770758][T13956]  do_splice_direct+0xda/0x150
[  256.775549][T13956]  do_sendfile+0x380/0x650
[  256.780266][T13956]  __x64_sys_sendfile64+0x105/0x150
[  256.785494][T13956]  x64_sys_call+0x2bb0/0x2ff0
[  256.790184][T13956]  do_syscall_64+0xd2/0x200
[  256.794734][T13956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.800662][T13956] 
[  256.803051][T13956] read to 0xffff888119c7d3ec of 4 bytes by task 13956 on cpu 0:
[  256.810770][T13956]  filemap_write_and_wait_range+0xfc/0x340
[  256.816607][T13956]  filemap_invalidate_pages+0xa4/0x1a0
[  256.822073][T13956]  kiocb_invalidate_pages+0x6e/0x80
[  256.827281][T13956]  __iomap_dio_rw+0x5d4/0x1250
[  256.832060][T13956]  iomap_dio_rw+0x40/0x90
[  256.836552][T13956]  ext4_file_write_iter+0xad9/0xf00
[  256.841883][T13956]  iter_file_splice_write+0x666/0xa60
[  256.847276][T13956]  direct_splice_actor+0x156/0x2a0
[  256.852415][T13956]  splice_direct_to_actor+0x312/0x680
[  256.857804][T13956]  do_splice_direct+0xda/0x150
[  256.863112][T13956]  do_sendfile+0x380/0x650
[  256.867756][T13956]  __x64_sys_sendfile64+0x105/0x150
[  256.873453][T13956]  x64_sys_call+0x2bb0/0x2ff0
[  256.878368][T13956]  do_syscall_64+0xd2/0x200
[  256.882982][T13956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.889330][T13956] 
[  256.891662][T13956] value changed: 0x0a000021 -> 0x04000021
[  256.897866][T13956] 
[  256.900243][T13956] Reported by Kernel Concurrency Sanitizer on:
[  256.906752][T13956] CPU: 0 UID: 0 PID: 13956 Comm: syz.3.3937 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  256.916707][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  256.926979][T13956] ==================================================================
[  256.948631][T13956] ==================================================================
[  256.956770][T13956] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark
[  256.964775][T13956] 
[  256.967174][T13956] write to 0xffff888119c7d3ec of 4 bytes by task 13954 on cpu 0:
[  256.974910][T13956]  xas_set_mark+0x12b/0x140
[  256.980070][T13956]  __folio_start_writeback+0x1dd/0x440
[  256.985570][T13956]  ext4_bio_write_folio+0x5ad/0x9f0
[  256.990827][T13956]  mpage_process_page_bufs+0x4a1/0x620
[  256.996357][T13956]  mpage_prepare_extent_to_map+0x786/0xc00
[  257.002301][T13956]  ext4_do_writepages+0xa05/0x2750
[  257.007676][T13956]  ext4_writepages+0x176/0x300
[  257.012451][T13956]  do_writepages+0x1c6/0x310
[  257.017168][T13956]  file_write_and_wait_range+0x156/0x2c0
[  257.022916][T13956]  generic_buffers_fsync_noflush+0x45/0x120
[  257.028869][T13956]  ext4_sync_file+0x1ab/0x690
[  257.033566][T13956]  vfs_fsync_range+0x10a/0x130
[  257.038368][T13956]  ext4_buffered_write_iter+0x34f/0x3c0
[  257.044078][T13956]  ext4_file_write_iter+0xdbf/0xf00
[  257.049303][T13956]  iter_file_splice_write+0x666/0xa60
[  257.054793][T13956]  direct_splice_actor+0x156/0x2a0
[  257.059919][T13956]  splice_direct_to_actor+0x312/0x680
[  257.066227][T13956]  do_splice_direct+0xda/0x150
[  257.071120][T13956]  do_sendfile+0x380/0x650
[  257.075658][T13956]  __x64_sys_sendfile64+0x105/0x150
[  257.080989][T13956]  x64_sys_call+0x2bb0/0x2ff0
[  257.085690][T13956]  do_syscall_64+0xd2/0x200
[  257.090215][T13956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.096135][T13956] 
[  257.098459][T13956] read to 0xffff888119c7d3ec of 4 bytes by task 13956 on cpu 1:
[  257.106089][T13956]  __writeback_single_inode+0x1f9/0x7c0
[  257.111660][T13956]  writeback_single_inode+0x167/0x3e0
[  257.117270][T13956]  sync_inode_metadata+0x5b/0x90
[  257.122253][T13956]  generic_buffers_fsync_noflush+0xd9/0x120
[  257.128463][T13956]  ext4_sync_file+0x1ab/0x690
[  257.133151][T13956]  vfs_fsync_range+0x10a/0x130
[  257.137938][T13956]  ext4_buffered_write_iter+0x34f/0x3c0
[  257.143602][T13956]  ext4_file_write_iter+0xdbf/0xf00
[  257.148816][T13956]  iter_file_splice_write+0x666/0xa60
[  257.154910][T13956]  direct_splice_actor+0x156/0x2a0
[  257.160231][T13956]  splice_direct_to_actor+0x312/0x680
[  257.165729][T13956]  do_splice_direct+0xda/0x150
[  257.170785][T13956]  do_sendfile+0x380/0x650
[  257.175354][T13956]  __x64_sys_sendfile64+0x105/0x150
[  257.180783][T13956]  x64_sys_call+0x2bb0/0x2ff0
[  257.185680][T13956]  do_syscall_64+0xd2/0x200
[  257.190224][T13956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.196312][T13956] 
[  257.198898][T13956] value changed: 0x0a000021 -> 0x04000021
[  257.204613][T13956] 
[  257.206936][T13956] Reported by Kernel Concurrency Sanitizer on:
[  257.213103][T13956] CPU: 1 UID: 0 PID: 13956 Comm: syz.3.3937 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  257.223119][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  257.233279][T13956] ==================================================================
[  257.336156][T10402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.649184][    C0] net_ratelimit: 76 callbacks suppressed
[  259.649198][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog