last executing test programs:

48.103067597s ago: executing program 3 (id=374):
openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0xe8, 0x0, 0x0, 0x2, 0x0, @private=0x500, @private=0xa010100}, @address_request={0x11, 0x2}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x29, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)

47.948254187s ago: executing program 3 (id=378):
syz_clone(0xa0040080, &(0x7f00000001c0), 0x0, &(0x7f0000000300), &(0x7f0000000380), &(0x7f0000000500)="52bb5c88e7d9afd26bf532f048a4961f82b0d9f847")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)

47.841521576s ago: executing program 1 (id=381):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000004ecbc04dcf75a177ac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)

47.807968796s ago: executing program 1 (id=382):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$tipc(0x1e, 0x4, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='fsi_master_read\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
flock(0xffffffffffffffff, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
chroot(&(0x7f0000000180)='./file0\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0xb0}, 0x40804)
ptrace(0x10, r2)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet(0x2, 0x2, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x50)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x7ff, 0x200006, 0xc, 0x4964, 0x9})
ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)

47.254716463s ago: executing program 1 (id=385):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000100)={0x2884, 0xffffffffffffffff, 0x3, 0x6, 0x1, [0x0, 0x800, 0x10000800, 0x2]})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="8967ebdac897788f0312c9966ea6c497"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
fchdir(r1)
sendmmsg$unix(r0, &(0x7f0000000240)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x12, 0x0}}], 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x7, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "e3da62162895237d", "5e1cdd4af3bd2b0da0c5bdb1bd658200", "a98ae4df", "cd5019dfdf2f702b"}, 0x38)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x440, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0xb)
sendfile(r9, r7, 0x0, 0x17)
sendto$inet6(r5, &(0x7f0000000480)='&', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r5, 0x0, r10, 0x0, 0x4, 0x0)
openat(r10, &(0x7f0000000000)='./file0\x00', 0x400141, 0xe0e69bb9e87c063b)

46.986057772s ago: executing program 2 (id=388):
openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0xe8, 0x0, 0x0, 0x2, 0x0, @private=0x500, @private=0xa010100}, @address_request={0x11, 0x2}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x29, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)

46.932132902s ago: executing program 3 (id=389):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000780)=""/88, 0x58, 0x0, &(0x7f0000000800)=""/154, 0x9a}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000ded0000000000000000080001a00feff50a3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r6], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8, 0x0, 0x81}, 0x18)
r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000000)=ANY=[])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r10}, 0x10)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x43, @mcast1}, 0x1c)
recvmmsg(r11, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@nogrpid}, {@data_writeback}, {@dioread_lock}, {@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@auto_da_alloc}, {@nolazytime}, {@inlinecrypt}, {@usrquota}, {@delalloc}, {@noinit_itable}]}, 0x1, 0x56e, &(0x7f0000000b80)="$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")
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

46.726738271s ago: executing program 2 (id=391):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r2}, 0x18)

46.595879311s ago: executing program 4 (id=392):
syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5b2, &(0x7f0000002740)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff)

46.46257199s ago: executing program 2 (id=393):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000004ecbc04dcf75a177ac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)

46.46176265s ago: executing program 0 (id=394):
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
unshare(0x62040200)

46.45618448s ago: executing program 4 (id=395):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$tipc(0x1e, 0x4, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='fsi_master_read\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
flock(0xffffffffffffffff, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
chroot(&(0x7f0000000180)='./file0\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0xb0}, 0x40804)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet(0x2, 0x2, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x50)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x7ff, 0x200006, 0xc, 0x4964, 0x9})
ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)

46.322335719s ago: executing program 2 (id=396):
r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000500))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x4}], 0x10}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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")
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000480)='./file2\x00', 0x0, 0x12081, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1\x00', 0xff})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0x401}, {0x6, 0x0, 0x3, 0x1}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="fffffffff7ff00b80000000008004500001c000000000011901f858d305e3d2d00004e2000089078"], 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r8, &(0x7f0000000780)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000900)={0x0, 0x5, {0xfffffffffffffff8, @struct={0x6, 0x10000}, <r9=>0x0, 0x2, 0x1ff, 0x1, 0x2, 0x6, 0xc0, @struct={0xffff0001, 0x7}, 0x40, 0xc3, [0x7, 0xa, 0xfa5, 0x5f8c, 0x696, 0x5d0]}, {0x0, @usage=0x100000001, 0x0, 0xd4, 0x9, 0x2, 0x5, 0x6, 0x10, @usage, 0x1, 0xdee, [0x1, 0xd, 0x503, 0xb99a, 0x5, 0x4]}, {0x3, @usage=0x7, 0x0, 0x6, 0x9, 0xf1d7, 0x80, 0x7, 0x10, @usage=0x800, 0xffffe7ed, 0x0, [0x0, 0x81, 0xd8c2, 0x9, 0x4, 0x9]}, {0x4, 0x2, 0x4}})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000f80)={r9, 0xba0, 0x4, 0x1})
write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)

46.010715778s ago: executing program 3 (id=397):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r0)

45.906887288s ago: executing program 3 (id=398):
r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000500))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x4}], 0x10}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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")
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000480)='./file2\x00', 0x0, 0x12081, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'veth1\x00', 0xff})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0x401}, {0x6, 0x0, 0x3, 0x1}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="fffffffff7ff00b80000000008004500001c000000000011901f858d305e3d2d00004e2000089078"], 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r8, &(0x7f0000000780)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000900)={0x0, 0x5, {0xfffffffffffffff8, @struct={0x6, 0x10000}, 0x0, 0x2, 0x1ff, 0x1, 0x2, 0x6, 0xc0, @struct={0xffff0001, 0x7}, 0x40, 0xc3, [0x7, 0xa, 0xfa5, 0x5f8c, 0x696, 0x5d0]}, {0x0, @usage=0x100000001, 0x0, 0xd4, 0x9, 0x2, 0x5, 0x6, 0x10, @usage, 0x1, 0xdee, [0x1, 0xd, 0x503, 0xb99a, 0x5, 0x4]}, {0x3, @usage=0x7, 0x0, 0x6, 0x9, 0xf1d7, 0x80, 0x7, 0x10, @usage=0x800, 0xffffe7ed, 0x0, [0x0, 0x81, 0xd8c2, 0x9, 0x4, 0x9]}, {0x4, 0x2, 0x4}})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1300029, 0x0)
write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)

45.884130707s ago: executing program 4 (id=399):
syz_clone(0xa0040080, &(0x7f00000001c0), 0x0, &(0x7f0000000300), &(0x7f0000000380), &(0x7f0000000500)="52bb5c88e7d9afd26bf532f048a4961f82b0d9f847")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)

45.824160107s ago: executing program 2 (id=400):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0)

45.444989905s ago: executing program 0 (id=401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x83, &(0x7f00000002c0), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000100000000d8970000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r6}, 0x0, &(0x7f00000013c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r8}, 0x10)
io_setup(0x3, &(0x7f0000000340))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886ddc2", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000b456a6000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000083000000000000000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

45.277434654s ago: executing program 0 (id=402):
openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000002ae35565d8eadb7581e2219c000000000033b500000000b58d428d04760afe7a101e547383eb8dba8948a81835b2", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0xe8, 0x0, 0x0, 0x2, 0x0, @private=0x500, @private=0xa010100}, @address_request={0x11, 0x2}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x51e, &(0x7f0000000400)="$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")

44.805134982s ago: executing program 3 (id=403):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281)
syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000), 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00002f0df560995bb359000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', <r5=>0x0, 0x29, 0x6, 0x3, 0x6, 0x74, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8, 0x3, 0x7ff}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], <r6=>0x0, 0xf7, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x49, 0x0, 0x0, 0x41100, 0x10, '\x00', r5, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000980)=[r1, r1, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x1, 0x4, 0xa, 0x2}, {0x0, 0x3, 0x1000, 0x4}], 0x10, 0xe, @void, @value}, 0x94)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[])
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
recvmsg(r11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x40010063)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c0002800800014000000c00100002800c00028008000180fffffffb0900010073797a30000000000900020073797a32"], 0x88}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800ba0000000000000000000000000000181200", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r13}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000c40)=@o_path={&(0x7f0000000c00)='./file0\x00', r10, 0x4000, r11}, 0x18)

44.616402991s ago: executing program 4 (id=404):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

44.615351892s ago: executing program 0 (id=405):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) (async)
r1 = getpid()
syz_clone3(&(0x7f0000007480)={0x60040080, 0x0, &(0x7f0000007340), &(0x7f0000007380), {0x27}, &(0x7f00000073c0)=""/16, 0x10, &(0x7f0000007400)=""/53, &(0x7f0000007440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040))
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7)
sendfile(r5, r5, 0x0, 0xfffe80) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) (async)
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

43.397075026s ago: executing program 0 (id=406):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0xa37}, 0x18)
socket$packet(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

39.74486605s ago: executing program 2 (id=407):
r0 = socket$kcm(0x10, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)

37.903061841s ago: executing program 4 (id=408):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)

37.412401389s ago: executing program 0 (id=409):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000b3a100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080))
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000003600090000000000000000000100000004040000180001800600200005080000000020000600000000000000080002"], 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x2)
r5 = getpid()
process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x6, 0x5, 0xaa21, 0x8, 0xa, 0x6, 0x200, 0x1, 0x4, 0xcc37, 0x5, 0xb5, 0x649f, 0x4, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0x28d, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x80, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020001, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x7329, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d3, 0x224, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x5, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4f, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x8, 0x3, 0x4, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0xfff, 0x5, 0x1, 0x3, 0x3, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x4b1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x9, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x8, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x31e1, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x7, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0xb, 0xff, 0x5, 0x0, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xef4, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x6, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x2, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0x3, 0x10001, 0xa, 0xfffff000, 0x7f, 0x5, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0x10000, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92b, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0x48000, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x4, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x0, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x1, 0x4, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0x2, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0x3, 0x401, 0x401, 0xb, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25f, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0xfffffff8, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4fedcacd, 0x1, 0x4, 0x7f, 0x2, 0x7, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0x401, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffb, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x401, 0x631, 0x101, 0x3ff, 0x101, 0x0, 0x7ffe, 0x80000000, 0x100003, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef2, 0x0, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0x6, 0x400, 0x436, 0x3, 0x202, 0x0, 0xffff76a6, 0x0, 0xbc, 0xa8, 0x0, 0x6, 0x7, 0x1, 0x81, 0x3, 0x2, 0x3, 0x4, 0x6, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x4, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x2, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x6, 0x4, 0x923}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x18, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @alu={0x7, 0x1, 0x9, 0x5, 0x0, 0x8, 0x1}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func, @func={0x85, 0x0, 0x1, 0x0, 0xffeffffe}, @exit, @func, @tail_call, @tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'geneve1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e746572000400028014000180090001006c617374000000000400028008000340000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20050800)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))

36.929842387s ago: executing program 1 (id=410):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) (async)
sendmmsg$unix(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30}}], 0x1, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x11ef, 0xfffffffa, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) (async)
r8 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r11, 0x0, 0x8000000000002}, 0x18) (async)
mq_open(0x0, 0x6e93ebbbcc0884f2, 0x124, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async)
write$sndseq(r5, 0x0, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000003c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x588, &(0x7f0000001280)="$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") (async)
chdir(&(0x7f0000000100)='./file0\x00') (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) (async, rerun: 32)
mq_timedreceive(0xffffffffffffffff, 0x0, 0xffffffffffffffe7, 0x20004000, 0x0) (rerun: 32)
link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

36.552904705s ago: executing program 32 (id=407):
r0 = socket$kcm(0x10, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)

31.07483989s ago: executing program 4 (id=412):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000800)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
socket$l2tp(0x2, 0x2, 0x73)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a300000000014000000110001"], 0xe0}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)

26.312590209s ago: executing program 33 (id=403):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281)
syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000), 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00002f0df560995bb359000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', <r5=>0x0, 0x29, 0x6, 0x3, 0x6, 0x74, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8, 0x3, 0x7ff}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], <r6=>0x0, 0xf7, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x49, 0x0, 0x0, 0x41100, 0x10, '\x00', r5, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000980)=[r1, r1, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x1, 0x4, 0xa, 0x2}, {0x0, 0x3, 0x1000, 0x4}], 0x10, 0xe, @void, @value}, 0x94)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[])
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
recvmsg(r11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x40010063)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c0002800800014000000c00100002800c00028008000180fffffffb0900010073797a30000000000900020073797a32"], 0x88}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800ba0000000000000000000000000000181200", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r13}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000c40)=@o_path={&(0x7f0000000c00)='./file0\x00', r10, 0x4000, r11}, 0x18)

24.582722271s ago: executing program 1 (id=414):
syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5b2, &(0x7f0000002740)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff)

18.450658963s ago: executing program 34 (id=409):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000b3a100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080))
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000003600090000000000000000000100000004040000180001800600200005080000000020000600000000000000080002"], 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x2)
r5 = getpid()
process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x6, 0x5, 0xaa21, 0x8, 0xa, 0x6, 0x200, 0x1, 0x4, 0xcc37, 0x5, 0xb5, 0x649f, 0x4, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0x28d, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x80, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020001, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x7329, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d3, 0x224, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x5, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4f, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x8, 0x3, 0x4, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0xfff, 0x5, 0x1, 0x3, 0x3, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x4b1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x9, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x8, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x31e1, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x7, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0xb, 0xff, 0x5, 0x0, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xef4, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x6, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x2, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0x3, 0x10001, 0xa, 0xfffff000, 0x7f, 0x5, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0x10000, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92b, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0x48000, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x4, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x0, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x1, 0x4, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0x2, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0x3, 0x401, 0x401, 0xb, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25f, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0xfffffff8, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4fedcacd, 0x1, 0x4, 0x7f, 0x2, 0x7, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0x401, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffb, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x401, 0x631, 0x101, 0x3ff, 0x101, 0x0, 0x7ffe, 0x80000000, 0x100003, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef2, 0x0, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0x6, 0x400, 0x436, 0x3, 0x202, 0x0, 0xffff76a6, 0x0, 0xbc, 0xa8, 0x0, 0x6, 0x7, 0x1, 0x81, 0x3, 0x2, 0x3, 0x4, 0x6, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x4, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x2, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x6, 0x4, 0x923}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x18, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @alu={0x7, 0x1, 0x9, 0x5, 0x0, 0x8, 0x1}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func, @func={0x85, 0x0, 0x1, 0x0, 0xffeffffe}, @exit, @func, @tail_call, @tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'geneve1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e746572000400028014000180090001006c617374000000000400028008000340000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20050800)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))

17.164201738s ago: executing program 1 (id=416):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@nobarrier}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = gettid()
rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200))
rt_sigsuspend(&(0x7f0000000000), 0x8)
tkill(r1, 0x16)
r2 = syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x1000, 0x0, 0x222}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13})
r5 = eventfd(0x4)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r5, 0x1)
io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = dup(r6)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
mount$9p_fd(0x0, &(0x7f0000000500)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000540), 0xa08000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x6, 0xba5}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
creat(&(0x7f0000000000)='./bus\x00', 0x16)

15.077358788s ago: executing program 35 (id=412):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000800)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
socket$l2tp(0x2, 0x2, 0x73)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a300000000014000000110001"], 0xe0}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)

0s ago: executing program 36 (id=416):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@nobarrier}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = gettid()
rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200))
rt_sigsuspend(&(0x7f0000000000), 0x8)
tkill(r1, 0x16)
r2 = syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x1000, 0x0, 0x222}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13})
r5 = eventfd(0x4)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r5, 0x1)
io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = dup(r6)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
mount$9p_fd(0x0, &(0x7f0000000500)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000540), 0xa08000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x1, 0x6, 0xba5}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
creat(&(0x7f0000000000)='./bus\x00', 0x16)

kernel console output (not intermixed with test programs):

 T29] audit: type=1400 audit(1737466420.604:115): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/root/syzkaller.lDB2aH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   30.060491][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.079716][   T29] audit: type=1400 audit(1737466420.604:116): avc:  denied  { unmount } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   30.145863][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.155782][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.166250][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.176249][   T29] audit: type=1400 audit(1737466420.734:117): avc:  denied  { mounton } for  pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   30.177091][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.199052][   T29] audit: type=1400 audit(1737466420.734:118): avc:  denied  { mount } for  pid=3297 comm="syz-executor" name="/" dev="gadgetfs" ino=4372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   30.213962][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.239089][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.248951][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.259470][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.261265][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.269278][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.269292][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.304475][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.319529][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.330034][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.339912][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.350459][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.360691][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.372332][ T3298] veth0_macvtap: entered promiscuous mode
[   30.381917][   T29] audit: type=1400 audit(1737466421.054:119): avc:  denied  { read write } for  pid=3297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   30.412872][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.423313][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.433114][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.443586][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.453450][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.464031][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.474926][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.482673][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.491464][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.500195][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.508941][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.521461][ T3298] veth1_macvtap: entered promiscuous mode
[   30.531707][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.540454][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.549149][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.557847][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.575834][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.586366][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.596197][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.606660][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.616496][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.626975][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.636793][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   30.647208][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.658797][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.681428][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.691938][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.701805][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.712277][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.722131][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.732567][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.742422][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   30.752870][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   30.763511][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.787302][ T3441] syz.3.6 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   30.798399][ T3298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.807148][ T3298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.815865][ T3298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.824631][ T3298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.940901][ T3451] loop1: detected capacity change from 0 to 512
[   30.962857][ T3451] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   30.962937][ T3451] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   30.980687][ T3451] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   31.002671][ T3451] EXT4-fs (loop1): 1 truncate cleaned up
[   31.009756][ T3451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.101992][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.110636][ T3465] loop0: detected capacity change from 0 to 512
[   31.122704][ T3465] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   31.146269][ T3465] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.10: iget: bad i_size value: -6917529027641081756
[   31.165139][ T3465] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.10: couldn't read orphan inode 17 (err -117)
[   31.168631][ T3471] openvswitch: netlink: Message has 12 unknown bytes.
[   31.194155][ T3465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.224264][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.237956][ T3473] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13'.
[   31.300209][ T3477] loop1: detected capacity change from 0 to 512
[   31.315844][ T3477] EXT4-fs: Ignoring removed nobh option
[   31.335808][ T3477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.343191][ T3479] loop0: detected capacity change from 0 to 512
[   31.359221][ T3477] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.370533][ T3479] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   31.387223][ T3484] loop3: detected capacity change from 0 to 512
[   31.403421][ T3479] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.16: iget: bad i_size value: -6917529027641081756
[   31.427108][ T3479] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.16: couldn't read orphan inode 17 (err -117)
[   31.439753][ T3484] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   31.450309][ T3479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.488173][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.498786][ T3484] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.17: iget: bad i_size value: -6917529027641081756
[   31.514518][ T3484] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.17: couldn't read orphan inode 17 (err -117)
[   31.527940][ T3484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.552106][ T3487] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.15: bg 0: block 224: padding at end of block bitmap is not set
[   31.576927][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.580699][ T3494] loop0: detected capacity change from 0 to 512
[   31.593662][ T3494] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   31.615259][ T3494] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.18: iget: bad i_size value: -6917529027641081756
[   31.628476][ T3494] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.18: couldn't read orphan inode 17 (err -117)
[   31.642001][ T3494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.667933][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.730247][ T3506] loop0: detected capacity change from 0 to 2048
[   31.774117][ T3506]  loop0: p1 < > p4
[   31.778880][ T3506] loop0: p4 size 8388608 extends beyond EOD, truncated
[   31.800558][ T3506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'.
[   31.823038][ T3506] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 42880 - 0
[   31.831849][ T3506] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 42880 - 0
[   31.840643][ T3506] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 42880 - 0
[   31.849492][ T3506] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 42880 - 0
[   31.858390][ T3506] geneve2: entered promiscuous mode
[   31.863622][ T3506] geneve2: entered allmulticast mode
[   31.875967][ T2998]  loop0: p1 < > p4
[   31.880356][ T2998] loop0: p4 size 8388608 extends beyond EOD, truncated
[   31.902734][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   31.903068][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   31.925590][ T3508] loop0: detected capacity change from 0 to 128
[   32.208037][ T3516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'.
[   32.317119][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.500869][ T3526] loop1: detected capacity change from 0 to 128
[   32.932020][ T3516] syz.0.25 (3516) used greatest stack depth: 10456 bytes left
[   33.158987][ T3536] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.33'.
[   33.168976][ T3535] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.33'.
[   33.218271][ T3533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31'.
[   33.312621][ T3539] loop0: detected capacity change from 0 to 128
[   33.477423][ T3544] loop1: detected capacity change from 0 to 128
[   33.626190][ T3547] loop2: detected capacity change from 0 to 1024
[   34.519735][ T3547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.528785][ T3557] loop3: detected capacity change from 0 to 1024
[   34.561181][ T3557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.714171][ T3567] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.39'.
[   34.727233][ T3565] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.39'.
[   34.941055][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.227205][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.236225][   T29] kauditd_printk_skb: 531 callbacks suppressed
[   35.236234][   T29] audit: type=1326 audit(1737466425.894:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   35.310132][   T29] audit: type=1326 audit(1737466425.894:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   35.329264][ T3578] loop2: detected capacity change from 0 to 128
[   35.333777][   T29] audit: type=1326 audit(1737466425.954:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   35.363047][   T29] audit: type=1326 audit(1737466425.954:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   35.386374][   T29] audit: type=1326 audit(1737466425.954:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   35.409721][   T29] audit: type=1326 audit(1737466425.954:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   35.422210][ T3582] loop3: detected capacity change from 0 to 512
[   35.433029][   T29] audit: type=1326 audit(1737466425.954:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   35.441849][ T3582] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   35.462301][   T29] audit: type=1326 audit(1737466425.954:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   35.494894][   T29] audit: type=1326 audit(1737466425.954:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   35.511833][ T3585] loop0: detected capacity change from 0 to 1024
[   35.518344][   T29] audit: type=1326 audit(1737466425.954:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.4.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   35.544202][ T3582] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.45: iget: bad i_size value: -6917529027641081756
[   35.568485][ T3582] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.45: couldn't read orphan inode 17 (err -117)
[   35.671123][ T3582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.685795][ T3585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.718383][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.728593][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.768635][ T3594] loop0: detected capacity change from 0 to 512
[   35.782535][ T3594] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   35.848896][ T3594] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.49: iget: bad i_size value: -6917529027641081756
[   35.880490][ T3594] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.49: couldn't read orphan inode 17 (err -117)
[   35.934892][ T3601] loop3: detected capacity change from 0 to 512
[   35.942199][ T3594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.956492][ T3601] EXT4-fs: Ignoring removed nobh option
[   35.997734][ T3601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.028789][ T3605] loop4: detected capacity change from 0 to 512
[   36.044421][ T3601] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.069962][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.101799][ T3605] EXT4-fs: Ignoring removed nobh option
[   36.145257][ T3605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.184921][ T3605] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.253394][ T3614] loop2: detected capacity change from 0 to 512
[   36.265474][ T3610] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.50: bg 0: block 224: padding at end of block bitmap is not set
[   36.285110][ T3614] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   36.305675][ T3614] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.54: iget: bad i_size value: -6917529027641081756
[   36.318957][ T3614] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.54: couldn't read orphan inode 17 (err -117)
[   36.331579][ T3622] netlink: 48 bytes leftover after parsing attributes in process `syz.0.56'.
[   36.332297][ T3615] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.52: bg 0: block 224: padding at end of block bitmap is not set
[   36.355270][ T3614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.390150][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.399178][ T3624] netlink: 48 bytes leftover after parsing attributes in process `syz.0.57'.
[   36.445809][ T3630] loop2: detected capacity change from 0 to 512
[   36.452964][ T3630] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   36.483332][ T3632] openvswitch: netlink: Message has 12 unknown bytes.
[   36.485179][ T3630] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.58: iget: bad i_size value: -6917529027641081756
[   36.503583][ T3630] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.58: couldn't read orphan inode 17 (err -117)
[   36.516892][ T3630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.544085][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.563864][ T3636] openvswitch: netlink: Message has 12 unknown bytes.
[   36.759768][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.892048][ T3646] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.64'.
[   36.901521][ T3644] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.64'.
[   36.975406][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.154834][ T3652] loop0: detected capacity change from 0 to 512
[   37.167644][ T3652] EXT4-fs: Ignoring removed nobh option
[   37.217217][ T3652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.233777][ T3652] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.239744][ T3656] loop4: detected capacity change from 0 to 512
[   37.251302][ T3656] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   37.275659][ T3656] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.67: iget: bad i_size value: -6917529027641081756
[   37.288905][ T3656] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.67: couldn't read orphan inode 17 (err -117)
[   37.302162][ T3656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.334733][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.358023][ T3662] loop1: detected capacity change from 0 to 128
[   37.396618][ T3659] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.69: bg 0: block 224: padding at end of block bitmap is not set
[   37.420135][ T3667] loop3: detected capacity change from 0 to 512
[   37.432600][ T3667] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   37.538602][ T3669] openvswitch: netlink: Message has 12 unknown bytes.
[   37.549404][ T3667] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.72: iget: bad i_size value: -6917529027641081756
[   37.563246][ T3674] loop2: detected capacity change from 0 to 128
[   37.571855][ T3667] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.72: couldn't read orphan inode 17 (err -117)
[   38.063722][ T3678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'.
[   38.571378][ T3667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.605331][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.618999][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.029100][ T3683] loop3: detected capacity change from 0 to 512
[   39.039895][ T3683] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.047736][ T3686] loop1: detected capacity change from 0 to 128
[   39.060901][ T3685] loop0: detected capacity change from 0 to 512
[   39.078095][ T3683] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.76: iget: bad i_size value: -6917529027641081756
[   39.176854][ T3685] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.199613][ T3692] loop2: detected capacity change from 0 to 512
[   39.215976][ T3683] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.76: couldn't read orphan inode 17 (err -117)
[   39.224797][ T3692] EXT4-fs: Ignoring removed nobh option
[   39.240530][ T3683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.275653][ T3692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.295981][ T3692] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.328374][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.357771][ T3685] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.75: iget: bad i_size value: -6917529027641081756
[   39.375513][ T3685] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.75: couldn't read orphan inode 17 (err -117)
[   39.451876][ T3685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.477421][ T3703] netlink: 48 bytes leftover after parsing attributes in process `syz.4.81'.
[   39.523244][ T3700] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.78: bg 0: block 224: padding at end of block bitmap is not set
[   39.589846][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.629742][ T3707] loop0: detected capacity change from 0 to 128
[   39.669549][ T3711] openvswitch: netlink: Message has 12 unknown bytes.
[   39.707065][ T3716] loop3: detected capacity change from 0 to 2048
[   39.774154][ T3716]  loop3: p1 < > p4
[   39.778735][ T3716] loop3: p4 size 8388608 extends beyond EOD, truncated
[   39.812662][ T3716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'.
[   39.849312][ T3716] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 36340 - 0
[   39.858206][ T3716] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 36340 - 0
[   39.867004][ T3716] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 36340 - 0
[   39.875813][ T3716] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 36340 - 0
[   39.968959][ T3720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'.
[   40.042307][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.100122][ T3716] geneve2: entered promiscuous mode
[   40.105377][ T3716] geneve2: entered allmulticast mode
[   40.193091][ T2998]  loop3: p1 < > p4
[   40.208599][ T2998] loop3: p4 size 8388608 extends beyond EOD, truncated
[   40.297252][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   40.302905][ T3730] loop1: detected capacity change from 0 to 1024
[   40.319746][ T3728] openvswitch: netlink: Message has 12 unknown bytes.
[   40.329107][   T29] kauditd_printk_skb: 533 callbacks suppressed
[   40.329118][   T29] audit: type=1326 audit(1737466431.004:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   40.360055][ T3730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.372153][   T29] audit: type=1326 audit(1737466431.014:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   40.395423][   T29] audit: type=1326 audit(1737466431.014:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   40.418881][   T29] audit: type=1326 audit(1737466431.014:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   40.442153][   T29] audit: type=1326 audit(1737466431.014:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   40.465460][   T29] audit: type=1326 audit(1737466431.014:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   40.488718][   T29] audit: type=1326 audit(1737466431.034:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   40.511970][   T29] audit: type=1326 audit(1737466431.034:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   40.535433][   T29] audit: type=1326 audit(1737466431.124:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   40.558634][   T29] audit: type=1326 audit(1737466431.124:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   40.607922][ T3737] netlink: 48 bytes leftover after parsing attributes in process `syz.4.91'.
[   40.625473][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.698217][ T3747] loop2: detected capacity change from 0 to 736
[   40.716074][ T3747] Symlink component flag not implemented
[   40.721947][ T3747] Symlink component flag not implemented (122)
[   41.321157][ T3760] loop2: detected capacity change from 0 to 128
[   41.369660][ T3761] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.99'.
[   41.380602][ T3759] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.99'.
[   42.165065][ T3770] loop0: detected capacity change from 0 to 1024
[   42.176577][ T3772] loop1: detected capacity change from 0 to 512
[   42.183123][ T3772] EXT4-fs: Ignoring removed nobh option
[   42.200646][ T3770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.303556][ T3779] netlink: 48 bytes leftover after parsing attributes in process `syz.2.106'.
[   42.312908][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.332235][ T3772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.412800][ T3772] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.514617][ T3786] loop2: detected capacity change from 0 to 128
[   42.562969][ T3788] loop0: detected capacity change from 0 to 128
[   42.716888][ T3794] loop3: detected capacity change from 0 to 2048
[   42.790368][ T3795] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.105: bg 0: block 224: padding at end of block bitmap is not set
[   42.824755][ T3794]  loop3: p1 < > p4
[   42.829817][ T3794] loop3: p4 size 8388608 extends beyond EOD, truncated
[   42.837288][ T3801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.107'.
[   42.862380][ T3794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'.
[   42.915604][ T3803] loop3: detected capacity change from 0 to 512
[   42.936262][ T3803] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   43.110325][ T3803] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.114: iget: bad i_size value: -6917529027641081756
[   43.143756][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.153633][ T3803] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.114: couldn't read orphan inode 17 (err -117)
[   43.169549][ T3803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.267841][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.305480][ T3810] loop1: detected capacity change from 0 to 512
[   43.313105][ T3810] EXT4-fs: Ignoring removed nobh option
[   43.323256][ T3812] openvswitch: netlink: Message has 12 unknown bytes.
[   43.331824][ T3810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.345033][ T3810] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.423211][ T3817] loop2: detected capacity change from 0 to 736
[   43.452112][ T3817] Symlink component flag not implemented
[   43.457826][ T3817] Symlink component flag not implemented (122)
[   43.485247][ T3824] openvswitch: netlink: Message has 12 unknown bytes.
[   43.545359][ T3816] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.115: bg 0: block 224: padding at end of block bitmap is not set
[   43.679625][ T3827] openvswitch: netlink: Message has 12 unknown bytes.
[   44.211185][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.367665][ T3842] loop1: detected capacity change from 0 to 128
[   44.370549][ T3840] loop2: detected capacity change from 0 to 2048
[   44.389581][ T3844] loop0: detected capacity change from 0 to 128
[   44.446599][ T3840]  loop2: p1 < > p4
[   44.520116][ T3840] loop2: p4 size 8388608 extends beyond EOD, truncated
[   44.538933][ T2998]  loop2: p1 < > p4
[   44.543535][ T2998] loop2: p4 size 8388608 extends beyond EOD, truncated
[   45.033885][ T3852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.122'.
[   45.369425][ T3854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'.
[   45.378654][ T3853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'.
[   45.412799][ T3854] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 54710 - 0
[   45.421714][ T3854] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 54710 - 0
[   45.430509][ T3854] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 54710 - 0
[   45.439369][ T3854] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 54710 - 0
[   45.461631][ T3854] geneve2: entered promiscuous mode
[   45.466879][ T3854] geneve2: entered allmulticast mode
[   45.563583][   T29] kauditd_printk_skb: 206 callbacks suppressed
[   45.563596][   T29] audit: type=1326 audit(1737466436.234:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   45.575555][ T2998]  loop2: p1 < > p4
[   45.593091][   T29] audit: type=1326 audit(1737466436.234:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   45.597401][ T2998] loop2: p4 size 8388608 extends beyond EOD, 
[   45.620330][   T29] audit: type=1326 audit(1737466436.234:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   45.620339][ T2998] truncated
[   45.653071][   T29] audit: type=1326 audit(1737466436.234:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   45.676389][   T29] audit: type=1326 audit(1737466436.234:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   45.699704][   T29] audit: type=1326 audit(1737466436.234:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   45.722991][   T29] audit: type=1326 audit(1737466436.234:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   45.746353][   T29] audit: type=1326 audit(1737466436.234:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   45.769849][   T29] audit: type=1326 audit(1737466436.234:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   45.793555][   T29] audit: type=1326 audit(1737466436.234:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   45.873398][ T3868] loop0: detected capacity change from 0 to 512
[   45.878983][ T3870] loop2: detected capacity change from 0 to 736
[   45.886850][ T3868] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   45.892455][ T3865] loop4: detected capacity change from 0 to 2048
[   45.914805][ T3870] Symlink component flag not implemented
[   45.920515][ T3870] Symlink component flag not implemented (122)
[   45.925145][ T3868] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.131: iget: bad i_size value: -6917529027641081756
[   45.936145][ T3865]  loop4: p1 < > p4
[   45.940639][ T3868] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.131: couldn't read orphan inode 17 (err -117)
[   45.956299][ T3868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.956379][ T3865] loop4: p4 size 8388608 extends beyond EOD, truncated
[   45.995268][ T3875] loop2: detected capacity change from 0 to 512
[   46.001772][ T3875] EXT4-fs: Ignoring removed nobh option
[   46.001941][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.019244][ T2998]  loop4: p1 < > p4
[   46.023718][ T2998] loop4: p4 size 8388608 extends beyond EOD, truncated
[   46.039964][ T3875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.052612][ T3875] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.155884][ T3865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'.
[   46.172923][ T3865] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 33640 - 0
[   46.181742][ T3865] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 33640 - 0
[   46.190556][ T3865] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 33640 - 0
[   46.199395][ T3865] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 33640 - 0
[   46.247036][ T3865] geneve2: entered promiscuous mode
[   46.252308][ T3865] geneve2: entered allmulticast mode
[   46.282064][ T3893] loop0: detected capacity change from 0 to 128
[   46.306631][ T2998]  loop4: p1 < > p4
[   46.311033][ T2998] loop4: p4 size 8388608 extends beyond EOD, truncated
[   46.418038][ T3891] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.136: bg 0: block 224: padding at end of block bitmap is not set
[   46.455524][ T3899] loop3: detected capacity change from 0 to 512
[   46.461329][ T3897] loop1: detected capacity change from 0 to 1024
[   46.462100][ T3899] EXT4-fs: Ignoring removed nobh option
[   46.499595][ T3901] netlink: 48 bytes leftover after parsing attributes in process `syz.4.143'.
[   46.592537][ T3907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'.
[   46.652178][ T3899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.681238][ T3899] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.713040][ T3897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.803562][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.853311][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.961878][ T3915] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.142: bg 0: block 224: padding at end of block bitmap is not set
[   47.190822][ T3923] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.147'.
[   47.201526][ T3919] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.147'.
[   47.296168][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.607318][ T3943] loop4: detected capacity change from 0 to 128
[   47.696020][ T3953] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.154'.
[   47.706216][ T3941] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.154'.
[   47.728959][ T3950] netlink: 48 bytes leftover after parsing attributes in process `syz.0.158'.
[   47.772708][ T3957] loop0: detected capacity change from 0 to 1024
[   47.802700][ T3961] loop1: detected capacity change from 0 to 512
[   47.805699][ T3957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.809324][ T3961] EXT4-fs: Ignoring removed nobh option
[   47.839467][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.859867][ T3961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.873336][ T3961] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.024030][ T3967] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.161: bg 0: block 224: padding at end of block bitmap is not set
[   48.064146][ T3970] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.162'.
[   48.073789][ T3966] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.162'.
[   48.144569][ T3974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.164'.
[   48.349797][ T3979] loop2: detected capacity change from 0 to 128
[   48.496238][ T3983] loop4: detected capacity change from 0 to 2048
[   48.576132][ T3983]  loop4: p1 < > p4
[   48.604207][ T3983] loop4: p4 size 8388608 extends beyond EOD, truncated
[   48.790445][ T2998]  loop4: p1 < > p4
[   48.820496][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.835600][ T3987] loop0: detected capacity change from 0 to 512
[   48.848767][ T2998] loop4: p4 size 8388608 extends beyond EOD, truncated
[   48.860370][ T3987] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   48.906145][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   48.926928][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   48.946305][ T3987] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.168: iget: bad i_size value: -6917529027641081756
[   48.968776][ T3987] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.168: couldn't read orphan inode 17 (err -117)
[   48.981661][ T3987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.021201][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.342459][ T4011] loop2: detected capacity change from 0 to 2048
[   49.410480][ T4015] loop0: detected capacity change from 0 to 128
[   49.424259][ T4011]  loop2: p1 < > p4
[   49.429322][ T4011] loop2: p4 size 8388608 extends beyond EOD, truncated
[   49.438508][ T4017] loop3: detected capacity change from 0 to 128
[   49.451631][ T2998]  loop2: p1 < > p4
[   49.458063][ T2998] loop2: p4 size 8388608 extends beyond EOD, truncated
[   49.551169][ T4023] loop4: detected capacity change from 0 to 512
[   49.561464][ T4023] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   49.572414][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   49.616040][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   49.636632][ T4023] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.180: iget: bad i_size value: -6917529027641081756
[   49.653595][ T4023] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.180: couldn't read orphan inode 17 (err -117)
[   49.666950][ T4023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.695867][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.793080][ T4033] loop4: detected capacity change from 0 to 128
[   49.961964][ T4036] loop1: detected capacity change from 0 to 512
[   49.982865][ T4036] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   50.004803][ T4036] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.183: iget: bad i_size value: -6917529027641081756
[   50.022339][ T4036] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.183: couldn't read orphan inode 17 (err -117)
[   50.035766][ T4036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.047619][ T4040] openvswitch: netlink: Message has 12 unknown bytes.
[   50.060209][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.088995][ T4043] loop1: detected capacity change from 0 to 128
[   50.378496][ T4053] openvswitch: netlink: Message has 12 unknown bytes.
[   50.645810][ T4060] loop2: detected capacity change from 0 to 512
[   50.679519][ T4060] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   50.766373][ T4060] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.190: iget: bad i_size value: -6917529027641081756
[   50.809192][   T29] kauditd_printk_skb: 461 callbacks suppressed
[   50.809205][   T29] audit: type=1326 audit(1737466441.484:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   50.813866][ T4060] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.190: couldn't read orphan inode 17 (err -117)
[   50.815500][   T29] audit: type=1326 audit(1737466441.484:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   50.873821][   T29] audit: type=1326 audit(1737466441.484:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   50.888304][ T4060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.897062][   T29] audit: type=1326 audit(1737466441.484:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   50.932786][   T29] audit: type=1326 audit(1737466441.484:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   50.956154][   T29] audit: type=1326 audit(1737466441.484:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   50.979461][   T29] audit: type=1326 audit(1737466441.484:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   51.002799][   T29] audit: type=1326 audit(1737466441.484:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   51.026097][   T29] audit: type=1326 audit(1737466441.484:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   51.049413][   T29] audit: type=1326 audit(1737466441.484:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   51.136442][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.147095][ T4075] loop0: detected capacity change from 0 to 512
[   51.190598][ T4075] EXT4-fs: Ignoring removed nobh option
[   51.218567][ T4079] openvswitch: netlink: Message has 12 unknown bytes.
[   51.220134][ T4077] loop1: detected capacity change from 0 to 512
[   51.245572][ T4075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.283850][ T4075] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.284908][ T4077] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   51.372545][ T4077] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.196: iget: bad i_size value: -6917529027641081756
[   51.404599][ T4077] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.196: couldn't read orphan inode 17 (err -117)
[   51.430520][ T4085] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.193: bg 0: block 224: padding at end of block bitmap is not set
[   51.437387][ T4077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.477459][ T4091] loop4: detected capacity change from 0 to 1024
[   51.510005][ T4091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.544053][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.575131][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.584239][ T4095] __nla_validate_parse: 5 callbacks suppressed
[   51.584250][ T4095] netlink: 48 bytes leftover after parsing attributes in process `syz.2.199'.
[   51.983294][ T4115] loop2: detected capacity change from 0 to 128
[   52.004456][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.664023][ T4134] openvswitch: netlink: Message has 12 unknown bytes.
[   53.475857][ T4142] loop0: detected capacity change from 0 to 736
[   53.554099][ T4146] loop3: detected capacity change from 0 to 512
[   53.585280][ T4142] Symlink component flag not implemented
[   53.593228][ T4142] Symlink component flag not implemented (122)
[   53.617792][ T4146] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   53.643494][ T4153] openvswitch: netlink: Message has 12 unknown bytes.
[   53.684758][ T4146] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.214: iget: bad i_size value: -6917529027641081756
[   53.814580][ T4146] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.214: couldn't read orphan inode 17 (err -117)
[   54.059911][ T4165] loop4: detected capacity change from 0 to 512
[   54.126449][ T4165] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   54.204074][ T4171] loop3: detected capacity change from 0 to 128
[   54.260372][ T4165] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.219: iget: bad i_size value: -6917529027641081756
[   54.319864][ T4165] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.219: couldn't read orphan inode 17 (err -117)
[   54.392346][ T4185] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.223'.
[   54.420452][ T4181] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.223'.
[   54.472329][ T4188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.221'.
[   54.542649][ T4193] netlink: 48 bytes leftover after parsing attributes in process `syz.2.226'.
[   54.662339][ T4203] loop0: detected capacity change from 0 to 2048
[   54.715200][ T4203]  loop0: p1 < > p4
[   54.720295][ T4203] loop0: p4 size 8388608 extends beyond EOD, truncated
[   54.837236][ T2998]  loop0: p1 < > p4
[   54.842190][ T2998] loop0: p4 size 8388608 extends beyond EOD, truncated
[   54.984584][ T4203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'.
[   55.292222][ T4213] loop0: detected capacity change from 0 to 128
[   55.511374][ T4217] loop4: detected capacity change from 0 to 512
[   55.543253][ T4217] EXT4-fs: Ignoring removed nobh option
[   55.727430][ T4227] netlink: 48 bytes leftover after parsing attributes in process `syz.2.235'.
[   56.076879][ T4217] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.328924][ T4234] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.234: bg 0: block 224: padding at end of block bitmap is not set
[   56.541302][   T29] kauditd_printk_skb: 449 callbacks suppressed
[   56.541328][   T29] audit: type=1326 audit(1737466447.214:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c1305d29 code=0x7ffc0000
[   56.577145][ T4245] netlink: 48 bytes leftover after parsing attributes in process `syz.1.243'.
[   56.596162][ T4242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.242'.
[   56.604012][   T29] audit: type=1326 audit(1737466447.254:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   56.628524][   T29] audit: type=1326 audit(1737466447.254:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   56.651912][   T29] audit: type=1326 audit(1737466447.254:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   56.675401][   T29] audit: type=1326 audit(1737466447.254:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   56.698714][   T29] audit: type=1326 audit(1737466447.254:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   56.722090][   T29] audit: type=1326 audit(1737466447.254:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   56.745440][   T29] audit: type=1326 audit(1737466447.254:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   56.768710][   T29] audit: type=1326 audit(1737466447.254:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   56.792051][   T29] audit: type=1326 audit(1737466447.254:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   56.797787][ T4248] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.240'.
[   56.824930][ T4247] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.240'.
[   56.898595][ T4252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.245'.
[   56.955020][ T4254] loop3: detected capacity change from 0 to 128
[   57.961026][ T4268] loop2: detected capacity change from 0 to 512
[   57.967861][ T4268] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   58.004000][ T4274] loop0: detected capacity change from 0 to 128
[   58.011059][ T4268] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.250: iget: bad i_size value: -6917529027641081756
[   58.024603][ T4268] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.250: couldn't read orphan inode 17 (err -117)
[   58.037480][ T4272] loop1: detected capacity change from 0 to 2048
[   58.120052][ T4280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'.
[   58.235297][ T4272]  loop1: p1 < > p4
[   59.047774][ T4291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'.
[   59.058975][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'.
[   59.068069][ T4272] loop1: p4 size 8388608 extends beyond EOD, truncated
[   59.405278][ T4292] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 51963 - 0
[   59.414145][ T4292] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 51963 - 0
[   59.422988][ T4292] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 51963 - 0
[   59.431863][ T4292] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 51963 - 0
[   59.481179][ T4296] netlink: 48 bytes leftover after parsing attributes in process `syz.0.255'.
[   59.506869][ T4292] geneve2: entered promiscuous mode
[   59.512093][ T4292] geneve2: entered allmulticast mode
[   59.817206][ T4303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.258'.
[   60.360266][ T4327] loop2: detected capacity change from 0 to 2048
[   60.424090][ T4327]  loop2: p1 < > p4
[   60.428354][ T4327] loop2: p4 size 8388608 extends beyond EOD, truncated
[   60.438911][ T2998]  loop2: p1 < > p4
[   60.452366][ T2998] loop2: p4 size 8388608 extends beyond EOD, truncated
[   60.455500][ T4332] loop0: detected capacity change from 0 to 512
[   60.475933][ T4332] EXT4-fs: Ignoring removed i_version option
[   60.486855][ T4327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'.
[   60.488338][ T4334] loop3: detected capacity change from 0 to 512
[   60.503677][ T4334] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   60.513773][ T2998]  loop2: p1 < > p4
[   60.517897][ T2998] loop2: p4 size 8388608 extends beyond EOD, truncated
[   60.525060][ T4332] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.542901][ T4334] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.269: iget: bad i_size value: -6917529027641081756
[   60.559260][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   60.574117][ T4340] loop2: detected capacity change from 0 to 512
[   60.583571][ T4340] =======================================================
[   60.583571][ T4340] WARNING: The mand mount option has been deprecated and
[   60.583571][ T4340]          and is ignored by this kernel. Remove the mand
[   60.583571][ T4340]          option from the mount to silence this warning.
[   60.583571][ T4340] =======================================================
[   60.592809][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   60.655290][ T4334] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.269: couldn't read orphan inode 17 (err -117)
[   60.683882][ T4332] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   60.690919][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   60.698683][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   60.710098][ T4340] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.739120][ T4332] binfmt_misc: register: failed to install interpreter file ./file2
[   60.787441][ T4354] netlink: 'syz.4.276': attribute type 21 has an invalid length.
[   60.797620][ T4332] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   60.808370][ T4354] netlink: 'syz.4.276': attribute type 4 has an invalid length.
[   60.833621][ T4359] loop3: detected capacity change from 0 to 128
[   61.041918][ T4371] loop1: detected capacity change from 0 to 512
[   61.067603][ T4375] loop4: detected capacity change from 0 to 1024
[   61.076117][ T4371] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   61.137389][ T4375] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.157416][ T4371] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.283: iget: bad i_size value: -6917529027641081756
[   61.187030][ T4375] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #15: comm syz.4.284: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 40196(4), depth 0(0)
[   61.224380][ T4371] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.283: couldn't read orphan inode 17 (err -117)
[   61.407349][ T4385] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #15: comm syz.4.284: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 40196(4), depth 0(0)
[   61.437861][ T4375] tipc: Started in network mode
[   61.442866][ T4375] tipc: Node identity , cluster identity 4711
[   61.449039][ T4375] tipc: Failed to set node id, please configure manually
[   61.456062][ T4375] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   61.511287][ T4392] gtp0: entered promiscuous mode
[   61.516285][ T4392] gtp0: entered allmulticast mode
[   61.556118][   T29] kauditd_printk_skb: 233 callbacks suppressed
[   61.556129][   T29] audit: type=1326 audit(1737466452.234:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   61.585770][   T29] audit: type=1326 audit(1737466452.234:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   61.609096][   T29] audit: type=1326 audit(1737466452.234:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   61.632496][   T29] audit: type=1326 audit(1737466452.234:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   61.655792][   T29] audit: type=1326 audit(1737466452.234:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   61.679113][   T29] audit: type=1326 audit(1737466452.234:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   61.702395][   T29] audit: type=1326 audit(1737466452.234:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   61.725991][   T29] audit: type=1326 audit(1737466452.234:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   61.749620][   T29] audit: type=1326 audit(1737466452.234:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   61.762103][ T4419] loop4: detected capacity change from 0 to 736
[   61.772924][   T29] audit: type=1326 audit(1737466452.234:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616f105d29 code=0x7ffc0000
[   61.811903][ T4419] Symlink component flag not implemented
[   61.817863][ T4419] Symlink component flag not implemented (122)
[   61.943378][ T4425] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   61.949903][ T4425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   61.957565][ T4425] vhci_hcd vhci_hcd.0: Device attached
[   61.970107][ T4427] vhci_hcd: connection closed
[   61.970543][   T11] vhci_hcd: stop threads
[   61.979840][   T11] vhci_hcd: release socket
[   61.984414][   T11] vhci_hcd: disconnect device
[   62.259857][ T4431] FAULT_INJECTION: forcing a failure.
[   62.259857][ T4431] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   62.273202][ T4431] CPU: 0 UID: 0 PID: 4431 Comm: syz.0.300 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[   62.283427][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   62.293534][ T4431] Call Trace:
[   62.296810][ T4431]  <TASK>
[   62.299732][ T4431]  dump_stack_lvl+0xf2/0x150
[   62.304445][ T4431]  dump_stack+0x15/0x1a
[   62.308608][ T4431]  should_fail_ex+0x223/0x230
[   62.313371][ T4431]  should_fail+0xb/0x10
[   62.317520][ T4431]  should_fail_usercopy+0x1a/0x20
[   62.322662][ T4431]  _copy_from_iter+0xd5/0xd00
[   62.327346][ T4431]  ? kmalloc_reserve+0x16e/0x190
[   62.332278][ T4431]  ? __build_skb_around+0x196/0x1f0
[   62.337521][ T4431]  ? __alloc_skb+0x21f/0x310
[   62.342112][ T4431]  ? __virt_addr_valid+0x1ed/0x250
[   62.347227][ T4431]  ? __check_object_size+0x364/0x520
[   62.352547][ T4431]  netlink_sendmsg+0x460/0x6e0
[   62.357294][ T4431]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.362609][ T4431]  __sock_sendmsg+0x140/0x180
[   62.367335][ T4431]  ____sys_sendmsg+0x312/0x410
[   62.372102][ T4431]  __sys_sendmsg+0x19d/0x230
[   62.376686][ T4431]  __x64_sys_sendmsg+0x46/0x50
[   62.381483][ T4431]  x64_sys_call+0x2734/0x2dc0
[   62.386238][ T4431]  do_syscall_64+0xc9/0x1c0
[   62.390720][ T4431]  ? clear_bhb_loop+0x55/0xb0
[   62.395374][ T4431]  ? clear_bhb_loop+0x55/0xb0
[   62.400041][ T4431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.405917][ T4431] RIP: 0033:0x7fc6233c5d29
[   62.410354][ T4431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.430025][ T4431] RSP: 002b:00007fc621a31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.438497][ T4431] RAX: ffffffffffffffda RBX: 00007fc6235b5fa0 RCX: 00007fc6233c5d29
[   62.446454][ T4431] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003
[   62.454473][ T4431] RBP: 00007fc621a31090 R08: 0000000000000000 R09: 0000000000000000
[   62.462496][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.470477][ T4431] R13: 0000000000000000 R14: 00007fc6235b5fa0 R15: 00007ffea8d23428
[   62.478500][ T4431]  </TASK>
[   62.599069][ T4441] __nla_validate_parse: 6 callbacks suppressed
[   62.599082][ T4441] netlink: 48 bytes leftover after parsing attributes in process `syz.4.305'.
[   62.668768][ T4447] loop0: detected capacity change from 0 to 736
[   62.709411][ T4447] Symlink component flag not implemented
[   62.732698][ T4447] Symlink component flag not implemented (122)
[   62.953871][ T4474] openvswitch: netlink: Message has 12 unknown bytes.
[   62.965730][ T4472] loop2: detected capacity change from 0 to 128
[   62.972317][ T4467] vlan2: entered promiscuous mode
[   62.977785][ T4467] bond0: entered promiscuous mode
[   62.982820][ T4467] bond_slave_0: entered promiscuous mode
[   62.988585][ T4467] bond_slave_1: entered promiscuous mode
[   62.999504][ T4467] bond0: left promiscuous mode
[   63.004688][ T4467] bond_slave_0: left promiscuous mode
[   63.010372][ T4467] bond_slave_1: left promiscuous mode
[   63.205360][ T4479] netlink: 48 bytes leftover after parsing attributes in process `syz.4.319'.
[   63.591676][ T4489] loop4: detected capacity change from 0 to 512
[   63.598485][ T4489] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   63.654624][ T4489] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.323: iget: bad i_size value: -6917529027641081756
[   63.670428][ T4489] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.323: couldn't read orphan inode 17 (err -117)
[   63.692139][ T4494] loop0: detected capacity change from 0 to 2048
[   63.724630][ T4500] FAULT_INJECTION: forcing a failure.
[   63.724630][ T4500] name failslab, interval 1, probability 0, space 0, times 0
[   63.734086][ T4494]  loop0: p1 < > p4
[   63.737460][ T4500] CPU: 1 UID: 0 PID: 4500 Comm: syz.4.327 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[   63.751411][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   63.761461][ T4500] Call Trace:
[   63.764723][ T4500]  <TASK>
[   63.767638][ T4500]  dump_stack_lvl+0xf2/0x150
[   63.772224][ T4500]  dump_stack+0x15/0x1a
[   63.776420][ T4500]  should_fail_ex+0x223/0x230
[   63.781086][ T4500]  should_failslab+0x8f/0xb0
[   63.785749][ T4500]  kmem_cache_alloc_noprof+0x52/0x320
[   63.791167][ T4500]  ? skb_clone+0x154/0x1f0
[   63.795618][ T4500]  skb_clone+0x154/0x1f0
[   63.799974][ T4500]  __netlink_deliver_tap+0x2bd/0x4f0
[   63.805253][ T4500]  netlink_unicast+0x64a/0x670
[   63.810036][ T4500]  netlink_sendmsg+0x5cc/0x6e0
[   63.814792][ T4500]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.820089][ T4500]  __sock_sendmsg+0x140/0x180
[   63.824870][ T4500]  ____sys_sendmsg+0x312/0x410
[   63.829784][ T4500]  __sys_sendmsg+0x19d/0x230
[   63.834372][ T4500]  __x64_sys_sendmsg+0x46/0x50
[   63.839188][ T4500]  x64_sys_call+0x2734/0x2dc0
[   63.843850][ T4500]  do_syscall_64+0xc9/0x1c0
[   63.848370][ T4500]  ? clear_bhb_loop+0x55/0xb0
[   63.853136][ T4500]  ? clear_bhb_loop+0x55/0xb0
[   63.857858][ T4500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.863759][ T4500] RIP: 0033:0x7fcc369d5d29
[   63.868159][ T4500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.887751][ T4500] RSP: 002b:00007fcc35041038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.896148][ T4500] RAX: ffffffffffffffda RBX: 00007fcc36bc5fa0 RCX: 00007fcc369d5d29
[   63.904174][ T4500] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[   63.912128][ T4500] RBP: 00007fcc35041090 R08: 0000000000000000 R09: 0000000000000000
[   63.920081][ T4500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.928103][ T4500] R13: 0000000000000000 R14: 00007fcc36bc5fa0 R15: 00007ffe92720098
[   63.936063][ T4500]  </TASK>
[   63.940223][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'.
[   63.953541][ T4494] loop0: p4 size 8388608 extends beyond EOD, truncated
[   63.990710][ T4506] loop4: detected capacity change from 0 to 512
[   63.999589][ T4506] EXT4-fs: Ignoring removed nobh option
[   64.010106][ T2998]  loop0: p1 < > p4
[   64.014797][ T2998] loop0: p4 size 8388608 extends beyond EOD, truncated
[   64.015382][ T4502] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.038202][ T4506] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.064498][ T4512] netlink: 56 bytes leftover after parsing attributes in process `syz.3.332'.
[   64.132925][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   64.143758][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   64.160779][ T4512] bridge0: port 3(veth0_to_bridge) entered blocking state
[   64.167948][ T4512] bridge0: port 3(veth0_to_bridge) entered disabled state
[   64.175307][ T4512] veth0_to_bridge: entered allmulticast mode
[   64.181825][ T4512] veth0_to_bridge: entered promiscuous mode
[   64.187972][ T4512] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   64.200332][ T4512] bridge0: port 3(veth0_to_bridge) entered blocking state
[   64.207479][ T4512] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   64.318120][ T4515] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.329: bg 0: block 224: padding at end of block bitmap is not set
[   64.422346][ T4522] syz.3.334[4522] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.422460][ T4522] syz.3.334[4522] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.476634][ T4522] syz.3.334[4522] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   64.492313][ T4524] loop0: detected capacity change from 0 to 512
[   64.512707][ T4525] Zero length message leads to an empty skb
[   64.529040][ T4524] EXT4-fs: Ignoring removed i_version option
[   64.553806][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'.
[   64.562770][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.570186][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.575218][ T4524] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.591113][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.598625][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.620380][ T4524] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   64.654338][ T4524] binfmt_misc: register: failed to install interpreter file ./file2
[   64.683411][ T4532] loop0: detected capacity change from 0 to 512
[   64.691496][ T4532] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.337: corrupted in-inode xattr: e_value size too large
[   64.705739][ T4532] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.337: couldn't read orphan inode 15 (err -117)
[   64.718621][ T4532] EXT4-fs (loop0): shut down requested (2)
[   64.725196][ T4532] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   64.734345][ T4532] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   64.770012][ T4532] FAULT_INJECTION: forcing a failure.
[   64.770012][ T4532] name failslab, interval 1, probability 0, space 0, times 0
[   64.782690][ T4532] CPU: 1 UID: 0 PID: 4532 Comm: syz.0.337 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[   64.792921][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   64.803058][ T4532] Call Trace:
[   64.806337][ T4532]  <TASK>
[   64.809265][ T4532]  dump_stack_lvl+0xf2/0x150
[   64.813986][ T4532]  dump_stack+0x15/0x1a
[   64.818172][ T4532]  should_fail_ex+0x223/0x230
[   64.822852][ T4532]  ? inode_doinit_use_xattr+0x3d/0x2b0
[   64.828384][ T4532]  should_failslab+0x8f/0xb0
[   64.833053][ T4532]  __kmalloc_cache_noprof+0x4e/0x320
[   64.838333][ T4532]  ? lockref_get+0x101/0x160
[   64.842922][ T4532]  inode_doinit_use_xattr+0x3d/0x2b0
[   64.848245][ T4532]  inode_doinit_with_dentry+0x5e2/0x840
[   64.853783][ T4532]  selinux_inode_permission+0x24c/0x410
[   64.859397][ T4532]  security_inode_permission+0x76/0xc0
[   64.864977][ T4532]  inode_permission+0xbf/0x300
[   64.869735][ T4532]  link_path_walk+0x5c1/0x830
[   64.874454][ T4532]  path_openat+0x1af/0x1fa0
[   64.879032][ T4532]  ? kstrtoull+0x110/0x140
[   64.883448][ T4532]  ? kstrtouint_from_user+0xb0/0xe0
[   64.888638][ T4532]  do_filp_open+0x107/0x230
[   64.893149][ T4532]  do_sys_openat2+0xab/0x120
[   64.897746][ T4532]  __x64_sys_open+0xe6/0x110
[   64.902393][ T4532]  x64_sys_call+0x13e1/0x2dc0
[   64.907061][ T4532]  do_syscall_64+0xc9/0x1c0
[   64.911576][ T4532]  ? clear_bhb_loop+0x55/0xb0
[   64.916243][ T4532]  ? clear_bhb_loop+0x55/0xb0
[   64.920944][ T4532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.926843][ T4532] RIP: 0033:0x7fc6233c5d29
[   64.931245][ T4532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.950840][ T4532] RSP: 002b:00007fc621a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   64.959243][ T4532] RAX: ffffffffffffffda RBX: 00007fc6235b5fa0 RCX: 00007fc6233c5d29
[   64.967250][ T4532] RDX: 0000000000000000 RSI: 0000000000064842 RDI: 00000000200005c0
[   64.975214][ T4532] RBP: 00007fc621a31090 R08: 0000000000000000 R09: 0000000000000000
[   64.983307][ T4532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.991267][ T4532] R13: 0000000000000000 R14: 00007fc6235b5fa0 R15: 00007ffea8d23428
[   64.999295][ T4532]  </TASK>
[   65.008180][ T4530] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.336'.
[   65.017932][ T4534] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.336'.
[   65.030275][ T4537] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   65.047273][ T4536] loop3: detected capacity change from 0 to 128
[   65.050530][ T4537] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   65.064282][ T4532] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   65.073173][ T4537] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   65.082889][ T4537] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   65.091820][ T4537] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   65.100903][ T4532] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   65.100954][ T3298] EXT4-fs unmount: 24 callbacks suppressed
[   65.100965][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.109671][ T4532] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   65.109688][ T4532] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[   65.216455][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.303396][ T4543] loop2: detected capacity change from 0 to 2048
[   65.424242][ T4560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.338'.
[   65.546103][ T4543]  loop2: p1 < > p4
[   65.560321][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'.
[   65.670964][ T4543] loop2: p4 size 8388608 extends beyond EOD, truncated
[   65.680908][ T2998]  loop2: p1 < > p4
[   65.686070][ T2998] loop2: p4 size 8388608 extends beyond EOD, truncated
[   65.759700][ T4578] loop2: detected capacity change from 0 to 512
[   65.794476][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   65.798289][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   65.814356][ T4578] EXT4-fs: Ignoring removed nobh option
[   65.831290][ T4580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.840169][ T4580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.923562][ T4584] loop3: detected capacity change from 0 to 512
[   65.924707][ T4578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.944981][ T4584] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   65.959977][ T4578] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.973772][ T4585] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set
[   65.989800][ T4584] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.353: iget: bad i_size value: -6917529027641081756
[   66.007576][ T4584] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.353: couldn't read orphan inode 17 (err -117)
[   66.020245][ T4584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.062054][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.112213][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.618054][ T4613] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.358'.
[   66.676204][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.686000][   T29] kauditd_printk_skb: 292 callbacks suppressed
[   66.686011][   T29] audit: type=1400 audit(1737466457.354:2883): avc:  denied  { write } for  pid=4614 comm="syz.4.362" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   66.715751][   T29] audit: type=1400 audit(1737466457.364:2884): avc:  denied  { ioctl } for  pid=4614 comm="syz.4.362" path="socket:[7510]" dev="sockfs" ino=7510 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   66.741189][   T29] audit: type=1400 audit(1737466457.364:2885): avc:  denied  { ioctl } for  pid=4614 comm="syz.4.362" path="socket:[7511]" dev="sockfs" ino=7511 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   66.746600][ T4615] vlan2: entered allmulticast mode
[   66.765944][   T29] audit: type=1400 audit(1737466457.364:2886): avc:  denied  { read } for  pid=4614 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   66.851020][ T4619] FAULT_INJECTION: forcing a failure.
[   66.851020][ T4619] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   66.864161][ T4619] CPU: 0 UID: 0 PID: 4619 Comm: syz.2.363 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[   66.874441][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   66.884604][ T4619] Call Trace:
[   66.887956][ T4619]  <TASK>
[   66.890945][ T4619]  dump_stack_lvl+0xf2/0x150
[   66.895561][ T4619]  dump_stack+0x15/0x1a
[   66.899721][ T4619]  should_fail_ex+0x223/0x230
[   66.904413][ T4619]  should_fail+0xb/0x10
[   66.908582][ T4619]  should_fail_usercopy+0x1a/0x20
[   66.913662][ T4619]  _copy_from_user+0x1c/0xa0
[   66.918265][ T4619]  move_addr_to_kernel+0x82/0x120
[   66.923330][ T4619]  copy_msghdr_from_user+0x271/0x2a0
[   66.928637][ T4619]  __sys_sendmmsg+0x1e8/0x4b0
[   66.929828][   T29] audit: type=1326 audit(1737466457.544:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   66.933397][ T4619]  __x64_sys_sendmmsg+0x57/0x70
[   66.956738][   T29] audit: type=1326 audit(1737466457.544:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   66.961478][ T4619]  x64_sys_call+0x29aa/0x2dc0
[   66.984632][   T29] audit: type=1326 audit(1737466457.544:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   66.989283][ T4619]  do_syscall_64+0xc9/0x1c0
[   67.012515][   T29] audit: type=1326 audit(1737466457.544:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   67.016973][ T4619]  ? clear_bhb_loop+0x55/0xb0
[   67.040258][   T29] audit: type=1326 audit(1737466457.544:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   67.044852][ T4619]  ? clear_bhb_loop+0x55/0xb0
[   67.068093][   T29] audit: type=1326 audit(1737466457.544:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   67.072724][ T4619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.102098][ T4619] RIP: 0033:0x7fe8448b5d29
[   67.106558][ T4619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.126232][ T4619] RSP: 002b:00007fe842f06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   67.134667][ T4619] RAX: ffffffffffffffda RBX: 00007fe844aa6080 RCX: 00007fe8448b5d29
[   67.142626][ T4619] RDX: 0000000000000001 RSI: 0000000020000bc0 RDI: 0000000000000004
[   67.150579][ T4619] RBP: 00007fe842f06090 R08: 0000000000000000 R09: 0000000000000000
[   67.158580][ T4619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.166537][ T4619] R13: 0000000000000001 R14: 00007fe844aa6080 R15: 00007ffed26881d8
[   67.174496][ T4619]  </TASK>
[   67.288581][ T4637] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.310814][ T4640] loop4: detected capacity change from 0 to 512
[   67.320890][ T4640] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   67.359683][ T4640] EXT4-fs (loop4): 1 truncate cleaned up
[   67.381049][ T4640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.409578][ T4648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4648 comm=syz.3.373
[   67.422273][ T4648] capability: warning: `syz.3.373' uses deprecated v2 capabilities in a way that may be insecure
[   67.437451][ T4640] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[   67.595158][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.295839][ T4682] SELinux:  Context system_u:object_r:lvm_control_t:s0 is not valid (left unmapped).
[   68.382173][ T4689] FAULT_INJECTION: forcing a failure.
[   68.382173][ T4689] name failslab, interval 1, probability 0, space 0, times 0
[   68.394835][ T4689] CPU: 1 UID: 0 PID: 4689 Comm: syz.0.387 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[   68.405067][ T4689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   68.415115][ T4689] Call Trace:
[   68.418389][ T4689]  <TASK>
[   68.421328][ T4689]  dump_stack_lvl+0xf2/0x150
[   68.425925][ T4689]  dump_stack+0x15/0x1a
[   68.430155][ T4689]  should_fail_ex+0x223/0x230
[   68.434836][ T4689]  ? resv_map_alloc+0x57/0x190
[   68.439597][ T4689]  should_failslab+0x8f/0xb0
[   68.444193][ T4689]  __kmalloc_cache_noprof+0x4e/0x320
[   68.449479][ T4689]  resv_map_alloc+0x57/0x190
[   68.454126][ T4689]  hugetlbfs_get_inode+0x64/0x380
[   68.459150][ T4689]  hugetlb_file_setup+0x188/0x3c0
[   68.464252][ T4689]  ksys_mmap_pgoff+0x172/0x330
[   68.469062][ T4689]  x64_sys_call+0x1940/0x2dc0
[   68.473753][ T4689]  do_syscall_64+0xc9/0x1c0
[   68.478257][ T4689]  ? clear_bhb_loop+0x55/0xb0
[   68.482952][ T4689]  ? clear_bhb_loop+0x55/0xb0
[   68.487626][ T4689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.493512][ T4689] RIP: 0033:0x7fc6233c5d29
[   68.497955][ T4689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.517579][ T4689] RSP: 002b:00007fc621a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   68.525988][ T4689] RAX: ffffffffffffffda RBX: 00007fc6235b5fa0 RCX: 00007fc6233c5d29
[   68.534029][ T4689] RDX: 000000000300000c RSI: 0000000000c00000 RDI: 0000000020400000
[   68.541997][ T4689] RBP: 00007fc621a31090 R08: ffffffffffffffff R09: 0000000000000000
[   68.549963][ T4689] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001
[   68.557964][ T4689] R13: 0000000000000001 R14: 00007fc6235b5fa0 R15: 00007ffea8d23428
[   68.565934][ T4689]  </TASK>
[   68.675501][ T4696] program syz.3.389 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.691053][ T4696] loop3: detected capacity change from 0 to 1024
[   68.698097][ T4696] EXT4-fs: inline encryption not supported
[   68.705553][ T4696] EXT4-fs (loop3): filesystem too large to mount safely on this system
[   68.845781][ T4702] FAULT_INJECTION: forcing a failure.
[   68.845781][ T4702] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   68.858886][ T4702] CPU: 0 UID: 0 PID: 4702 Comm: syz.0.390 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[   68.869123][ T4702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   68.879173][ T4702] Call Trace:
[   68.882440][ T4702]  <TASK>
[   68.885367][ T4702]  dump_stack_lvl+0xf2/0x150
[   68.890012][ T4702]  dump_stack+0x15/0x1a
[   68.894177][ T4702]  should_fail_ex+0x223/0x230
[   68.898905][ T4702]  should_fail+0xb/0x10
[   68.903054][ T4702]  should_fail_usercopy+0x1a/0x20
[   68.908087][ T4702]  _copy_from_user+0x1c/0xa0
[   68.912690][ T4702]  __se_sys_io_uring_register+0x118f/0x2160
[   68.918643][ T4702]  ? 0xffffffff81000000
[   68.922791][ T4702]  ? selinux_file_permission+0x22a/0x360
[   68.928436][ T4702]  ? fput+0x1c4/0x200
[   68.932462][ T4702]  ? ksys_write+0x176/0x1b0
[   68.936977][ T4702]  __x64_sys_io_uring_register+0x55/0x70
[   68.942685][ T4702]  x64_sys_call+0x2c52/0x2dc0
[   68.947355][ T4702]  do_syscall_64+0xc9/0x1c0
[   68.951863][ T4702]  ? clear_bhb_loop+0x55/0xb0
[   68.956549][ T4702]  ? clear_bhb_loop+0x55/0xb0
[   68.961221][ T4702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.967145][ T4702] RIP: 0033:0x7fc6233c5d29
[   68.971555][ T4702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.991175][ T4702] RSP: 002b:00007fc621a31038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[   68.999614][ T4702] RAX: ffffffffffffffda RBX: 00007fc6235b5fa0 RCX: 00007fc6233c5d29
[   69.007587][ T4702] RDX: 0000000020000440 RSI: 0000000000000021 RDI: 0000000000000004
[   69.015557][ T4702] RBP: 00007fc621a31090 R08: 0000000000000000 R09: 0000000000000000
[   69.023522][ T4702] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[   69.031634][ T4702] R13: 0000000000000000 R14: 00007fc6235b5fa0 R15: 00007ffea8d23428
[   69.039613][ T4702]  </TASK>
[   69.047887][ T4705] loop4: detected capacity change from 0 to 736
[   69.083456][ T4705] Symlink component flag not implemented
[   69.089250][ T4705] Symlink component flag not implemented (122)
[   69.267564][ T4717] loop2: detected capacity change from 0 to 512
[   69.409813][ T4717] EXT4-fs: Ignoring removed i_version option
[   69.462980][ T4717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.608545][ T4717] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.685340][ T4729] loop3: detected capacity change from 0 to 512
[   69.701125][ T4729] EXT4-fs: Ignoring removed i_version option
[   69.766627][ T3302] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #4: comm syz-executor: corrupted inode contents
[   69.814762][ T4729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.837344][ T3302] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #4: comm syz-executor: mark_inode_dirty error
[   70.075275][ T4729] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.165396][ T3302] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #4: comm syz-executor: corrupted inode contents
[   70.214249][ T3302] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz-executor: mark_inode_dirty error
[   70.252725][ T3302] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz-executor: Failed to acquire dquot type 1
[   70.276338][ T4741] loop0: detected capacity change from 0 to 512
[   70.294813][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.306959][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.319142][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.322823][ T4741] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   70.331406][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.352214][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.364697][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.376798][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.389119][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.401237][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.413535][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   70.438481][ T4742] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[   70.488046][ T4741] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.402: iget: bad i_size value: -6917529027641081756
[   70.607323][ T4741] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.402: couldn't read orphan inode 17 (err -117)
[   70.664753][ T4741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.724022][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.784474][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.582594][ T4753] __nla_validate_parse: 2 callbacks suppressed
[   71.582609][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'.
[   72.155351][ T4755] vlan2: entered allmulticast mode
[   74.230219][ T3302] syz-executor (3302) used greatest stack depth: 10368 bytes left
[   75.303683][    C1] net_ratelimit: 95554 callbacks suppressed
[   75.303696][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   75.303734][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.309632][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   75.321841][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.333462][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   75.345454][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.357646][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   75.369571][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   75.381175][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   75.393198][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   79.747841][   T29] kauditd_printk_skb: 261 callbacks suppressed
[   79.747855][   T29] audit: type=1400 audit(1737466470.424:3151): avc:  denied  { mounton } for  pid=4767 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   80.313668][    C1] net_ratelimit: 164225 callbacks suppressed
[   80.313682][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   80.313726][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.319710][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   80.331759][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.344201][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   80.356407][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.368039][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   80.380062][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   80.391987][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   80.404231][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   83.742235][   T29] audit: type=1326 audit(1737466474.414:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6233c5d29 code=0x7ffc0000
[   83.910974][   T29] audit: type=1326 audit(1737466474.444:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6233c5d29 code=0x7ffc0000
[   84.134516][   T29] audit: type=1326 audit(1737466474.804:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc6233c5d29 code=0x7ffc0000
[   85.323728][    C1] net_ratelimit: 137110 callbacks suppressed
[   85.323747][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   85.323844][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   85.329773][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   85.341895][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.353730][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   85.365708][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.377638][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.389776][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   85.401573][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.413456][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   86.699597][   T29] audit: type=1326 audit(1737466477.374:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   86.928764][   T29] audit: type=1326 audit(1737466477.454:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   86.954121][   T29] audit: type=1326 audit(1737466477.454:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   86.981388][   T29] audit: type=1326 audit(1737466477.454:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   87.006616][   T29] audit: type=1326 audit(1737466477.454:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   87.032362][   T29] audit: type=1326 audit(1737466477.454:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   87.057573][   T29] audit: type=1326 audit(1737466477.454:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   87.084869][   T29] audit: type=1326 audit(1737466477.454:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   87.110112][   T29] audit: type=1326 audit(1737466477.454:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   87.135292][   T29] audit: type=1326 audit(1737466477.454:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4786 comm="syz.4.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc369d5d29 code=0x7ffc0000
[   87.934426][ T4787] netlink: 48 bytes leftover after parsing attributes in process `syz.4.412'.
[   90.333730][    C1] net_ratelimit: 100652 callbacks suppressed
[   90.333746][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.333800][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.339814][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   90.351980][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   90.363616][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   90.375701][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.387556][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   90.399543][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.411454][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   90.423564][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   95.343761][    C0] net_ratelimit: 80021 callbacks suppressed
[   95.343792][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   95.343918][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   95.349828][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   95.361643][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   95.373727][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   95.385503][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   95.397537][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   95.409422][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[   95.421533][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   95.433250][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.353664][    C0] net_ratelimit: 79455 callbacks suppressed
[  100.353680][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.353694][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  100.359769][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  100.371501][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  100.383572][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  100.395324][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.407442][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.419510][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.431129][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  100.443088][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  101.386437][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  101.386449][   T29] audit: type=1400 audit(1737466492.064:3172): avc:  denied  { mounton } for  pid=4800 comm="syz.1.416" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  101.561849][ T4805] 9pnet_fd: Insufficient options for proto=fd
[  105.363710][    C0] net_ratelimit: 78736 callbacks suppressed
[  105.363726][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.363778][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.369723][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.381677][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  105.393763][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  105.405451][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  105.417516][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  105.429288][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  105.441389][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  105.453208][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.373672][    C1] net_ratelimit: 81262 callbacks suppressed
[  110.373687][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.373756][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  110.379992][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.391697][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.403525][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  110.415467][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  110.427368][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  110.439502][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  110.451183][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  110.463230][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  115.383740][    C0] net_ratelimit: 80168 callbacks suppressed
[  115.383768][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  115.383998][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  115.389804][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  115.401623][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  115.413745][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  115.425531][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  115.437524][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  115.449464][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  115.461574][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  115.473286][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.393736][    C0] net_ratelimit: 80574 callbacks suppressed
[  120.393759][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.393751][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.393840][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.399748][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  120.411797][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  120.423636][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  120.435577][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  120.447473][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  120.459489][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.471256][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.403801][    C0] net_ratelimit: 80316 callbacks suppressed
[  125.403814][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.403882][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.409855][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.421796][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  125.433832][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  125.445562][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  125.457599][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  125.469386][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  125.481497][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  125.493341][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.413731][    C0] net_ratelimit: 79889 callbacks suppressed
[  130.413746][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.413871][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.419752][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.431693][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  130.443790][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.455492][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  130.467537][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  130.479327][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  130.491448][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  130.503256][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.423763][    C1] net_ratelimit: 81555 callbacks suppressed
[  135.423778][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.423865][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.429778][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  135.441852][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  135.453573][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  135.465648][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  135.477425][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  135.489511][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.501325][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  135.513315][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.433638][    C1] net_ratelimit: 81415 callbacks suppressed
[  140.433652][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  140.433779][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.439625][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  140.451700][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  140.463461][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  140.475626][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.487355][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.499343][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.511448][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  140.523329][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.443637][    C1] net_ratelimit: 80406 callbacks suppressed
[  145.443654][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  145.443682][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  145.449594][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  145.462024][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  145.473791][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.485883][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.497820][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.509589][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.521640][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  145.533559][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.453761][    C0] net_ratelimit: 82462 callbacks suppressed
[  150.453792][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.453839][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.459772][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.471819][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.483781][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  150.495587][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  150.507455][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.519419][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  150.531439][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  150.543277][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  155.463734][    C1] net_ratelimit: 75567 callbacks suppressed
[  155.463750][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  155.463769][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  155.463843][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  155.469765][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  155.481887][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  155.493693][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  155.505690][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  155.517572][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  155.529589][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  155.541669][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.473656][    C0] net_ratelimit: 73224 callbacks suppressed
[  160.473684][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  160.473845][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.479704][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.491806][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.503596][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.515486][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.527349][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  160.539275][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.551232][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  160.563056][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  165.483631][    C0] net_ratelimit: 74158 callbacks suppressed
[  165.483647][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.483843][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.489797][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  165.501680][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.513374][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  165.525387][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.537231][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  165.549190][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  165.561086][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  165.572926][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  167.523821][    C1] ==================================================================
[  167.531931][    C1] BUG: KCSAN: data-race in br_fdb_update / br_fdb_update
[  167.538984][    C1] 
[  167.541297][    C1] read to 0xffff888103e41d40 of 8 bytes by interrupt on cpu 0:
[  167.548834][    C1]  br_fdb_update+0x10e/0x480
[  167.553429][    C1]  br_handle_frame_finish+0x32e/0xe70
[  167.558805][    C1]  br_nf_hook_thresh+0x1e5/0x220
[  167.563753][    C1]  br_nf_pre_routing_finish_ipv6+0x575/0x5a0
[  167.569734][    C1]  br_nf_pre_routing_ipv6+0x1f6/0x2a0
[  167.575105][    C1]  br_nf_pre_routing+0x517/0xbc0
[  167.580055][    C1]  br_handle_frame+0x4dd/0x9a0
[  167.584820][    C1]  __netif_receive_skb_core+0xba7/0x2400
[  167.590450][    C1]  __netif_receive_skb+0x5a/0x280
[  167.595478][    C1]  process_backlog+0x22e/0x440
[  167.600245][    C1]  __napi_poll+0x63/0x3c0
[  167.604573][    C1]  net_rx_action+0x3a1/0x7f0
[  167.609172][    C1]  handle_softirqs+0xbf/0x280
[  167.613857][    C1]  do_softirq+0x5e/0x90
[  167.618017][    C1]  __local_bh_enable_ip+0x6e/0x70
[  167.623047][    C1]  update_defense_level+0x575/0x5b0
[  167.628246][    C1]  defense_work_handler+0x1f/0x80
[  167.633274][    C1]  process_scheduled_works+0x483/0x9a0
[  167.638739][    C1]  worker_thread+0x51d/0x6f0
[  167.643335][    C1]  kthread+0x1d1/0x210
[  167.647394][    C1]  ret_from_fork+0x4b/0x60
[  167.651808][    C1]  ret_from_fork_asm+0x1a/0x30
[  167.656570][    C1] 
[  167.658880][    C1] write to 0xffff888103e41d40 of 8 bytes by interrupt on cpu 1:
[  167.666503][    C1]  br_fdb_update+0x142/0x480
[  167.671104][    C1]  br_handle_frame_finish+0x32e/0xe70
[  167.676470][    C1]  br_nf_hook_thresh+0x1e5/0x220
[  167.681416][    C1]  br_nf_pre_routing_finish_ipv6+0x575/0x5a0
[  167.687394][    C1]  br_nf_pre_routing_ipv6+0x1f6/0x2a0
[  167.692764][    C1]  br_nf_pre_routing+0x517/0xbc0
[  167.697709][    C1]  br_handle_frame+0x4dd/0x9a0
[  167.702475][    C1]  __netif_receive_skb_core+0xba7/0x2400
[  167.708104][    C1]  __netif_receive_skb+0x5a/0x280
[  167.713136][    C1]  process_backlog+0x22e/0x440
[  167.717902][    C1]  __napi_poll+0x63/0x3c0
[  167.722228][    C1]  net_rx_action+0x3a1/0x7f0
[  167.726822][    C1]  handle_softirqs+0xbf/0x280
[  167.731508][    C1]  do_softirq+0x5e/0x90
[  167.735675][    C1]  __local_bh_enable_ip+0x6e/0x70
[  167.740710][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  167.745652][    C1]  batadv_dat_purge+0x1e0/0x260
[  167.750504][    C1]  process_scheduled_works+0x483/0x9a0
[  167.755971][    C1]  worker_thread+0x51d/0x6f0
[  167.760567][    C1]  kthread+0x1d1/0x210
[  167.764627][    C1]  ret_from_fork+0x4b/0x60
[  167.769040][    C1]  ret_from_fork_asm+0x1a/0x30
[  167.773801][    C1] 
[  167.776112][    C1] value changed: 0x00000000ffffcc13 -> 0x00000000ffffcc14
[  167.783206][    C1] 
[  167.785517][    C1] Reported by Kernel Concurrency Sanitizer on:
[  167.791654][    C1] CPU: 1 UID: 0 PID: 4760 Comm: kworker/u8:8 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0
[  167.802150][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  167.812203][    C1] Workqueue: bat_events batadv_dat_purge
[  167.817837][    C1] ==================================================================
[  168.070006][   T29] audit: type=1400 audit(1737466558.654:3173): avc:  denied  { write } for  pid=3286 comm="syz-executor" path="pipe:[2237]" dev="pipefs" ino=2237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  170.493653][    C0] net_ratelimit: 70120 callbacks suppressed
[  170.493669][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  170.493699][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.493905][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.499833][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.511691][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.523519][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.535520][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  170.547455][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  170.559261][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  170.571131][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  170.917568][   T29] audit: type=1400 audit(1737466561.384:3174): avc:  denied  { unlink } for  pid=2980 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  175.503726][    C0] net_ratelimit: 72756 callbacks suppressed
[  175.503740][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  175.503803][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  175.509850][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.521694][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  175.533701][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.545607][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  175.557736][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:13:66:31:b9:eb, vlan:0)
[  175.569649][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  175.581422][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  175.593517][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)