last executing test programs:

2m13.17040376s ago: executing program 2 (id=6828):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x26, &(0x7f0000000000)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1}, 0x1)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x49}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

2m12.316451476s ago: executing program 2 (id=6850):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0)
socket(0xa, 0x2400000001, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
close(r0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x0, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0)

2m12.285199477s ago: executing program 2 (id=6851):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x26, &(0x7f0000000000)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1}, 0x1)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x49}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xfff3}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xfff9, 0x1, 0x1, 0x9}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x880)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1ff, 0xe)

2m11.371701154s ago: executing program 2 (id=6871):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"})

2m11.341308015s ago: executing program 2 (id=6873):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090)

2m11.288100795s ago: executing program 2 (id=6874):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x4040800)
r4 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00')
read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = dup(r2)
write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r8])

1m56.26542779s ago: executing program 32 (id=6874):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x4040800)
r4 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00')
read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = dup(r2)
write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r8])

3.68087521s ago: executing program 0 (id=9810):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0)={0x200000, 0x0, 0x1}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000240)={0x401, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e21, @remote}}}, 0x108)
close_range(r2, 0xffffffffffffffff, 0x0)

3.603434932s ago: executing program 0 (id=9812):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000000), 0x8000c5, &(0x7f0000004300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3814013, &(0x7f0000000b40)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,overriderockperm,nojoliet,nojoliet,overriderockperm,dmode=0x0000000000000003,dmode=0x0000000000000002,mode=0x0000000000000080,hide,block=0x0000000000000200,map=acorn,overriderockperm,check=relaxed,gid=', @ANYRESDEC=r2, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRES32=r1], 0x5, 0xa62, &(0x7f0000000fc0)="$eJzs3ctvnOdeB/Dv60vs45QkpyeUEvXEk5Tk+PQYx3ZoQtTFIbEniQ++INuRGrFoSuOgKIZCC1JbITWVEKtWIIFYwK5CLFhV6oayQN0g2NEVCyTUf6FiFVZG7ztje3wZj+M6sZt+PtbMvJff+zy/9/p4rk/4blk5vmFsZaW67XH81j89hYw5xK5Nfv3pZ5+Ut48e5ki682rxz0l/klrSk+TFpHdicn5upkNBD5I7Sb5MiiR9aTzuyp0Uf5nn1se/TPH3Zb1tHdltyXSywvfaQR9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwGBUTk6OjY8WRTM3eer3WkNS2mJicnyuysrJ1zuoyDV9UvX4XX3SsNynKW/r7V7v6fvHk+uwXktTO5qXG2EtVh+TpzwdHXzjx2o96ulaXb5fNt9K3+2Lfff+DB28uLy+9s+3cotjHrA6ZxjFyoz47tTA3NXP1Rr02tTBXu3Lp0uiFm9cXatenpusLtxcW6zO1ifn61cW5+drQxE9rY1euXKzVR27P3Zq9MTkyXV+dePnXx0dHL9V+MfI79avzC3OzF34xsjBxc2p6emr2RhVTzi5jLpcH4m9PLdYW61dnarV795eXLm7KrDubjt8yaKzT+pRB452CxkfHx8fGxsfHPmr2nr024dKrV169PDraM9rwXJoD2RLxhA5aDpcftN/N+38Rhz3qarT/yXSmMptbeT21bf8mMpn5zGWmzfym1fb/3IX6jtWmpf1vtvI9LfNPlXdnc7o52t+m/W+Ty9P7ezfv54M8yJtZznKW8s6BZ9Th7x+vZT+32o3UM5upLGQuU5nJ1WpKrTmlliu5lEsZzRu5mcEspCfXM5Xp1LOQ21nIYurVETWR+dRzNYuZy3xqGcpEfppaxnIlV3IxtdQzktuZy63M5kYmc7Uq5V7uV9v94g45rgWN7SZofIegLY15u/Z/zeZF6pv/OeEZ1LXjXn4CV3HYm5Vm+3+kc+jQxIbRnieXFAAAALCvfvU/cuzk8//+P0mRH1fvy1+fmq6PHnRaAAAAwD6qPq73UvnQWw79OIXn/wAAAPCsKarv2BVJBjLYGFr9JpQXAQAAAOAZUb3/fzrF4PoEz/8BAADgGdP5N/Y7RhTDqz//W7vbeLzbjGiMFQPXp6brIxNz06+N5Xz1KwPVNw22lNadFL3V1w9eyZlG1JmBxuPAeollnf1l1NjIa2N5JWebKzL0cvnw8tA2keONyJ80In/SGtmdDZEXy0gAeNad3aE93m37/0qGGxHDp6omv+fUhja4u2pZR7WsAHBYrPWx83/NLs22af9PN34b4HS79v83dnj+X0Y8n3uDjY8UjOStvJ3l3M1wmp84GNyu1NXeCBofQxju8GrAQPMjC19d7srwltcD+tfWtTV2KeMZ3vYVgZZyi9UcLjbiup/UXgCAp+vsju3wavtfvUjetv0f3vn5f0ub6yOFAHAYrPVg/7gDg7sPPuh1BAA20koDAAAAAAAAAAAAAAAAAAAAAAAAAADA/tvVD/j/5/lkeXkp2WtnAdsMfPVv//JLbWM+Ppr0P06GOw90ZV9y7kuyL+v+5Aa6kzz2Uh9mX2r/eR57qXIf7/dG6Dss++IAB4qH+db79IAvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVRdK93fSupC/JaJILTz+rJ+fhQSewX2p7W6x4lEd5L8f2Ox0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO+75u//d6XxeLQxKT1dybkkd5L87kHn+Dj6O8x/9JTyOHz+oLpv+f3/rqQ3K0V6srKyspIUvROT83Mz5aFQ9JXzv/70s0/KW9siP1wd2NqrQllAWcOGziWaNbRM6d241A+rpQYml9598Cdv/1Ft8lp1YF5bvD49OXNj/rfWA18oPm90gdDaDcJqvn927l//qmXykWbln6enMfTRlmw313u9qndya72/st1maFPvLtxfXhova1qsv774p3/Y1Trr+ZxJXh5KhjbW9PvlrU1NZzZvz42Kb4q/KI7lb3On2v/l1ihWinIXHa/W/wf37i8vjbz19vLdtZw+vP9eSwEnMpjk7sazrENOg9X1ZFtHq1p7y1pHq6Dy7mSH8nbUUuLY+nbdsA4/rA6Zgcdah1r7dah02O7NjC5uzmilPEn++o9/lPM77um+bUo8367GnTr2KL4p/ru4mf/Kn7eEdZX7/1y2PTu3KaKKbDlSWuf1bFjnc+trPt46443NZfbsWCP76+P8Xn5zbf93Vdf/1vNmvM15s3Y9+nnLxDbnzeqp1ea86Nt4pm45L5o6nRdbz9R/OL6lRdlYa05uapGaV592yzTzPNmIapPnL+dnSc+px7qi/KzDFaXT8m3P/50U3xR/Vwzlf/NQ/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDhVyTd203vSs4lOZHkeDleS1Y2xzzcQ31dA8Ve0tw3e8n5u6dou6LFozzKezn2tDMCAAAAAAAA4Mm4Nvn1p599Ut6q9+O782tdzTm1pCfJieJveicm5+dmOhTUm9xZfUu/f/uQNpNzp7x7bn38y3LsxQ71HezHBwDgO+3/AwAA//90sm6p")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
chown(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
write$sndseq(r4, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000000c0)={0x80, 0x1f4, 0x7fff, 0x9, 0xfffff4f1, 0x4})
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="5c226eda6eced9f53c3cc27331c2d424bfdc588808ec6e3328001214b0e9671ce5908a012eb8a6687904eac04913909353e113af45c619abd581a1df73df450e8a93e1703e16a3cd650e3cca8c615a2de932663b0270522a9a12af8919ff1488f642db2d3962dadd97929b8188067e57a0ad28a235ae83cd37b2f8471a0c8ef130661a189a8033149dc1b32d021ad596113bd1484f11554ccb57e4a2ce59d96e16b3d45e583c2e44fb5dc51f0cbc4cbf18c2a473261caed45d64c35c84b20cd898a61dd5b18121b801eddc0550a403eff921d87324954d995285806558f95b5e6b27a5b6f0210800c018b095def847effabb3cf757e04c5bc91cf6eda60394e76eae86a5890426c3e1156f5958c60ad2473fcbaeccfd9a1e78db6c7e4a94c4db1e912d97cef2811bed9fad4dcdf62a4cdd61694a4351323160b90465140c2e79aeb861f485c7fa23172d6a2935e0e48548b4d38cacb3d2498fa9"], 0x1, 0x1ef, &(0x7f00000002c0)="$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")

3.523601893s ago: executing program 1 (id=9813):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
kexec_load(0x5, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
poll(0x0, 0x0, 0x7f)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r5, 0xa, 0x13)
sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x78, r4, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000)
fcntl$setlease(r5, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
fsopen(0x0, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8)
sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
shutdown(r6, 0x1)

3.425244675s ago: executing program 0 (id=9815):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000030000000180001801400020076657468"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

3.366268896s ago: executing program 0 (id=9817):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'ip6tnl0\x00', 0x3}, 0x18)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0)

3.251409558s ago: executing program 0 (id=9819):
syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8905, 0x10000, 0x3, 0x2ce}, &(0x7f0000000240), &(0x7f0000000600))
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r1, 0x0)
listen(r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000002000000000000000000000000000021c59b907e87320b7f03694b794ec3da2c5e5997926d12a280493dcb9871097c52a91cfd54045a2a51698712f9e2c1d144c31b991e817204bf41b92e0c12d717ba2d44d3390540198058e7fec5e79e77679b92c951a6ecfcc2"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000300), &(0x7f00000003c0)=@tcp6=r1, 0x1}, 0x20)
recvmmsg(r1, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000000ac0)=""/4093, 0xffd}], 0x1}, 0x3}], 0x1, 0x40018020, 0x0)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000200), 0x1, 0x257, &(0x7f0000000ac0)="$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")
ftruncate(0xffffffffffffffff, 0x2007ffc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_writepages_result\x00', r6}, 0x18)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
pwritev2(r4, &(0x7f0000000100)=[{0x0}], 0x1, 0x5412, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

2.923387125s ago: executing program 0 (id=9827):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x4040800)
r3 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00')
read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = dup(r2)
write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x8}, 0x18)
syz_usb_connect(0x2, 0x64, 0x0, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="02070005090000002dbd7000fedbdf250700190000"], 0x48}}, 0x4040014)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.804931197s ago: executing program 3 (id=9831):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf256b0000"], 0x28}}, 0x50)

2.692231839s ago: executing program 3 (id=9833):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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")

2.525733852s ago: executing program 1 (id=9837):
r0 = socket$unix(0x1, 0x1, 0x0)
mmap(&(0x7f000020f000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r2=>0x0})
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
r10 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x7fff}, 0x18)
unshare(0x22020600)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000280)=@req={0x5, 0xb, 0x6, 0x7}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

2.028737252s ago: executing program 1 (id=9839):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
io_setup(0x9, &(0x7f0000001d00)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000100)="331e76", 0x3, 0x7, 0x0, 0x2}])

1.999556172s ago: executing program 5 (id=9840):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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")

1.963473833s ago: executing program 3 (id=9841):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1.934423453s ago: executing program 1 (id=9842):
syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8905, 0x10000, 0x3, 0x2ce}, &(0x7f0000000240), &(0x7f0000000600))
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r1, 0x0)
listen(r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000002000000000000000000000000000021c59b907e87320b7f03694b794ec3da2c5e5997926d12a280493dcb9871097c52a91cfd54045a2a51698712f9e2c1d144c31b991e817204bf41b92e0c12d717ba2d44d3390540198058e7fec5e79e77679b92c951a6ecfcc2"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000300), &(0x7f00000003c0)=@tcp6=r1, 0x1}, 0x20)
recvmmsg(r1, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000000ac0)=""/4093, 0xffd}], 0x1}, 0x3}], 0x1, 0x40018020, 0x0)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000200), 0x1, 0x257, &(0x7f0000000ac0)="$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")
ftruncate(0xffffffffffffffff, 0x2007ffc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_writepages_result\x00', r6}, 0x18)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
pwritev2(r4, &(0x7f0000000100)=[{0x0}], 0x1, 0x5412, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})

1.867523595s ago: executing program 3 (id=9844):
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580))
writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000140)='\\Z', 0x2}], 0x1)

1.612959629s ago: executing program 3 (id=9846):
socket$inet(0x2, 0x1, 0x0)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x3, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100002", 0x17}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x33, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x4000)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x82, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t')
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x2, 0xb, 0xf5, 0x0, 0xd, 0x5, 0x7, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x44040)
socket$key(0xf, 0x3, 0x2)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
signalfd4(r5, &(0x7f0000000400)={[0xe5c4]}, 0x8, 0x80800)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)

1.58702139s ago: executing program 5 (id=9847):
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000780)={[{@barrier}, {@nodioread_nolock}, {@resuid}, {@barrier}, {@noload}, {@dioread_lock}]}, 0x1, 0x599, &(0x7f0000001280)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r0}, 0x18)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
lsetxattr$security_capability(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680), &(0x7f00000006c0)=@v1={0x1000000, [{0x6f0, 0x5}]}, 0xc, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000008c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0xf, {"cfea89440f9d4e4dc81d8ce84a1ab16e"}, 0x800, 0x80000001, 0x4313}, @ib={0x1b, 0x3, 0x8000, {"a491b0c92bd9a7d937d4ce152206d728"}, 0x8, 0x654c, 0xfc}}}, 0x118)
ioprio_set$pid(0x0, 0x0, 0x4004)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x10003, 0xffffffff)
io_uring_setup(0x4d3f, &(0x7f00000005c0)={0x0, 0x9640, 0x400, 0x1, 0x4, 0x0, r1})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff02000000000000000000000000000100000000320000000200000020010000000000000000000000000001000000000000080000000000030000000000000000000000000000000000000000000000000000002b00000002", @ANYBLOB="7735b25946c6b77ddb548d12cd4f79a72340f49b797d5cb8fad41ff1cb6664ac80a660bc869f9bd37308eca91e3bb93d17c1064d299ffefd3996e3f4a6e88f6b01441d00e2bafe5e03b1402c541defb152f2fd346d19e01e4e6ff30d16b85fa121fd881247155a9b38ffa9754abc236a68725bbb2d1206d901aa2b38acebf04a029f98c3afbd18f9d7e1ffc9194b798657622aca4ced86e824e9ad2f3eb296955d13455430f6a2bbfba3b491e9bb5264c2b70c289db5fd34b04e40d98f5e467d1e08a09bbf1bb2b943098639c8ac7e4a2cabb280bb4b931da855fe072d57017f07ab06386abd622730e8e9ed56b5c846758e83773b97c66b2c"], 0x23c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000500)={0x6, 0x0, 0x4}, 0xff01)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmmsg(r6, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x26, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000000c0)=0x110, 0x4)

1.57306391s ago: executing program 1 (id=9848):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)

1.459146962s ago: executing program 1 (id=9849):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000003600)={0x0, 0x0, 0x0}, 0x4040800)
r4 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00')
read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r7 = dup(r2)
write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x8}, 0x18)
syz_usb_connect(0x2, 0x64, 0x0, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="02070005090000002dbd7000fedbdf250700190000"], 0x48}}, 0x4040014)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

700.408637ms ago: executing program 4 (id=9854):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b000000"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580))
writev(r1, &(0x7f00000004c0)=[{0x0}], 0x1)

645.386678ms ago: executing program 5 (id=9855):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r1, &(0x7f00000001c0)="d16e8ab207ec21d424c9faf48dfaad60284a723bd8dab3118c3f23ec43c5a3cd961c7abe", &(0x7f0000000300)=""/16, 0x4}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='-', 0x1}], 0x1)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
rmdir(&(0x7f0000004340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000070a01010000020000000900020073797a32000000000900010073367a300000000000000000000086f35679e338e40394a71ac4bc78606b7bd8ab552cbf36f576bf855611556fe76c08081415626c13bb0b005eea8e9bf3c3993d159063d7073bd3761a4b2591c3a1869a2f6f3930e188a3306593256e1bcca53ac47dea74ca8f22cf72a5a6ffea56c599ccc9cda1ec0aad6f1aa500000000000000007c0688f945303f82073786418d17ea3e6f51ff29c4d7cfdee2e5eae7"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

599.303168ms ago: executing program 4 (id=9856):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xc2f, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xc21, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc0d, 0x0, @wg=@data={0x4, 0x7407, 0x4, "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"}}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10000, 0x0)

571.355019ms ago: executing program 5 (id=9857):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000007000000008000000100000000000000", @ANYRES32=0x0], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

538.74406ms ago: executing program 4 (id=9858):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}], 0x7}}], 0x1, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff, 0x0}, &(0x7f0000000000)=0x40)

518.11794ms ago: executing program 5 (id=9859):
r0 = socket$unix(0x1, 0x1, 0x0)
mmap(&(0x7f000020f000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r2=>0x0})
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
r10 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x7fff}, 0x18)
unshare(0x22020600)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000280)=@req={0x5, 0xb, 0x6, 0x7}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

434.045822ms ago: executing program 4 (id=9860):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)

400.686032ms ago: executing program 4 (id=9861):
r0 = socket$unix(0x1, 0x1, 0x0)
mmap(&(0x7f000020f000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r2=>0x0})
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
r10 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x7fff}, 0x18)
unshare(0x22020600)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000280)=@req={0x5, 0xb, 0x6, 0x7}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

292.521835ms ago: executing program 5 (id=9862):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1060}}, 0x4000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioperm(0x3c, 0x1, 0x8)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r3, 0x2000009)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
socket$unix(0x1, 0x5, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1b, 0x5, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(r9, r9, 0x8, &(0x7f0000000140)={0x1d, 0x5, 0xfefffff9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x200101, 0x10}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001000077b6000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000500"/28], 0x50)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

165.743557ms ago: executing program 4 (id=9863):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18)
semop(0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r7 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0xfffffffe, 0x4000000})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettaction={0x14, 0x32, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000011)
ioctl$TCSETS2(r4, 0x402c542b, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000004c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x800003, 0x60001, 0xc, 0x800, 0x7, 0x0, [{0x7, 0x9}, {0x47, 0x1, 0xfffffffc}, {0x3, 0x2, 0x40081}, {0x7, 0x9, 0xfffffffa}, {0x8, 0x5c6, 0x3}, {0x8, 0x0, 0x7}, {0x8b9, 0x8, 0x7}, {0x3, 0x5, 0x3}, {0x6}, {0x6, 0x5, 0x7}, {0x2, 0x104, 0x3}, {0x7, 0xb, 0x4}]})
ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000))

0s ago: executing program 3 (id=9864):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])

kernel console output (not intermixed with test programs):

ff)
[  499.246239][T32209] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  499.258777][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.272678][T32209] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  499.287473][T32362] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.8336: lblock 0 mapped to illegal pblock 0 (length 1)
[  499.303498][T32209] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  499.320258][T32362] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.8336: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  499.362705][T31952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  499.386283][T32209] 8021q: adding VLAN 0 to HW filter on device bond0
[  499.404699][T32209] 8021q: adding VLAN 0 to HW filter on device team0
[  499.415571][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.422729][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  499.436089][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.443446][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  499.541339][T32394] loop5: detected capacity change from 0 to 512
[  499.564389][T32209] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.575038][T32394] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  499.583703][T32394] System zones: 0-2, 18-18, 34-35
[  499.590049][T32394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.603627][T32394] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  499.625867][T32404] loop4: detected capacity change from 0 to 128
[  499.652695][T32404] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8349'.
[  499.665185][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.795291][T32209] veth0_vlan: entered promiscuous mode
[  499.816208][T32209] veth1_vlan: entered promiscuous mode
[  499.835441][T32209] veth0_macvtap: entered promiscuous mode
[  499.843504][T32209] veth1_macvtap: entered promiscuous mode
[  499.857416][T32209] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.871474][T32209] batman_adv: batadv0: Interface activated: batadv_slave_1
[  499.884470][ T4637] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.913463][ T4637] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.935645][ T4637] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.974338][ T4637] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.986846][T32433] loop3: detected capacity change from 0 to 128
[  500.000425][T32435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8278'.
[  500.025256][T32433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8360'.
[  500.033767][T32439] loop5: detected capacity change from 0 to 512
[  500.037417][T32435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8278'.
[  500.071556][T32439] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  500.082622][T32439] System zones: 0-2, 18-18, 34-35
[  500.089160][T32439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.109636][T32439] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  500.222771][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.312626][ T6962] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.354489][T32474] loop5: detected capacity change from 0 to 512
[  500.380382][ T6962] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.414382][T32474] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  500.440907][T32474] System zones: 0-2, 18-18, 34-35
[  500.451564][T32474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.466018][ T6962] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.490711][T32474] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  500.541702][ T6962] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.596589][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.625371][T32452] chnl_net:caif_netlink_parms(): no params data found
[  500.691658][T32452] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.699276][T32452] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.706591][T32452] bridge_slave_0: entered allmulticast mode
[  500.713575][T32452] bridge_slave_0: entered promiscuous mode
[  500.725282][ T6962] dummy0: left allmulticast mode
[  500.730442][ T6962] dummy0: left promiscuous mode
[  500.735693][ T6962] bridge0: port 3(dummy0) entered disabled state
[  500.743259][ T6962] bridge_slave_1: left allmulticast mode
[  500.748994][ T6962] bridge_slave_1: left promiscuous mode
[  500.754962][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.763459][ T6962] bridge_slave_0: left allmulticast mode
[  500.769172][ T6962] bridge_slave_0: left promiscuous mode
[  500.774949][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.882853][ T6962] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  500.892303][ T6962] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.902167][ T6962] 
 (unregistering): (slave macvlan1): Releasing backup interface
[  500.913113][ T6962] 
 (unregistering): Released all slaves
[  500.923284][ T6962] bond0 (unregistering): (slave vxcan3): Releasing backup interface
[  500.932595][ T6962] vxcan3: left promiscuous mode
[  500.938363][ T6962] bond0 (unregistering): Released all slaves
[  500.946812][T32452] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.954866][T32452] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.966189][T32452] bridge_slave_1: entered allmulticast mode
[  500.972929][T32452] bridge_slave_1: entered promiscuous mode
[  500.997688][ T6962] tipc: Disabling bearer <udp:s>
[  501.003283][ T6962] tipc: Left network mode
[  501.010167][T32452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.027031][T32452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.048244][ T6962] hsr_slave_0: left promiscuous mode
[  501.055192][ T6962] hsr_slave_1: left promiscuous mode
[  501.061318][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.070056][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.097363][ T6962] pimreg (unregistering): left allmulticast mode
[  501.185774][T32513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8383'.
[  501.221212][T32452] team0: Port device team_slave_0 added
[  501.228876][T32452] team0: Port device team_slave_1 added
[  501.270312][T32452] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.277318][T32452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  501.303733][T32452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  501.320269][T32452] batman_adv: batadv0: Adding interface: batadv_slave_1
[  501.327468][T32452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  501.353586][T32452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  501.501593][T32545] loop0: detected capacity change from 0 to 1024
[  501.531894][T32545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  501.562838][T32452] hsr_slave_0: entered promiscuous mode
[  501.577613][T32545] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.581654][T32452] hsr_slave_1: entered promiscuous mode
[  501.606633][T32545] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.8392: lblock 0 mapped to illegal pblock 0 (length 1)
[  501.610124][T32556] loop5: detected capacity change from 0 to 512
[  501.621189][T32545] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.8392: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  501.677513][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  501.697905][T32556] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  501.707876][T32556] System zones: 0-2, 18-18, 34-35
[  501.724398][T32556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.737897][T32556] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.813460][T32575] loop0: detected capacity change from 0 to 512
[  501.826154][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.840061][T32575] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  501.848493][T32575] System zones: 0-2, 18-18, 34-35
[  501.861368][T32575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.891541][T32575] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.973842][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.062930][T32452] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  502.091757][T32452] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  502.113914][T32452] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  502.133995][T32452] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  502.226085][T32452] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.252117][T32639] loop5: detected capacity change from 0 to 1024
[  502.262460][T32452] 8021q: adding VLAN 0 to HW filter on device team0
[  502.275840][ T4637] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.283100][ T4637] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.295281][ T4637] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.302401][ T4637] bridge0: port 2(bridge_slave_1) entered forwarding state
[  502.313649][T32639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.335320][T32452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  502.345959][T32452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  502.370330][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.402759][   T29] kauditd_printk_skb: 910 callbacks suppressed
[  502.402780][   T29] audit: type=1326 audit(2000000028.790:80579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.1.8414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240aceec9 code=0x7ffc0000
[  502.448528][T32658] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  502.450719][   T29] audit: type=1326 audit(2000000028.790:80580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.1.8414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb240aceec9 code=0x7ffc0000
[  502.563542][T32452] 8021q: adding VLAN 0 to HW filter on device batadv0
[  502.566769][   T29] audit: type=1326 audit(2000000028.790:80581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.1.8414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240aceec9 code=0x7ffc0000
[  502.597536][   T29] audit: type=1326 audit(2000000028.790:80582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.1.8414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb240aceec9 code=0x7ffc0000
[  502.621229][   T29] audit: type=1326 audit(2000000028.790:80583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.1.8414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240aceec9 code=0x7ffc0000
[  502.645499][   T29] audit: type=1326 audit(2000000028.790:80584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.1.8414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240aceec9 code=0x7ffc0000
[  502.670074][   T29] audit: type=1326 audit(2000000028.790:80585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.1.8414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb240acd97f code=0x7ffc0000
[  502.694115][   T29] audit: type=1326 audit(2000000028.790:80586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.1.8414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb240aceec9 code=0x7ffc0000
[  502.696680][T32452] veth0_vlan: entered promiscuous mode
[  502.718563][   T29] audit: type=1326 audit(2000000028.790:80587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32653 comm="syz.1.8414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb240aceec9 code=0x7ffc0000
[  502.733762][T32452] veth1_vlan: entered promiscuous mode
[  502.762311][   T29] audit: type=1326 audit(2000000028.840:80588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32656 comm="syz.5.8413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  502.847231][T32452] veth0_macvtap: entered promiscuous mode
[  502.860767][T32452] veth1_macvtap: entered promiscuous mode
[  502.887774][T32452] batman_adv: batadv0: Interface activated: batadv_slave_0
[  502.905912][T32452] batman_adv: batadv0: Interface activated: batadv_slave_1
[  502.939365][  T379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.971829][  T379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  503.001395][  T379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  503.005951][T32695] loop0: detected capacity change from 0 to 1024
[  503.025741][  T379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.053797][T32695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  503.113533][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.128082][T32706] loop5: detected capacity change from 0 to 1024
[  503.150484][T32706] EXT4-fs: Mount option(s) incompatible with ext3
[  503.229700][T32720] loop1: detected capacity change from 0 to 512
[  503.237048][T32720] EXT4-fs: Ignoring removed oldalloc option
[  503.243061][T32720] EXT4-fs: test_dummy_encryption option not supported
[  503.271768][T32731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.286355][T32731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.422995][T32757] loop0: detected capacity change from 0 to 1024
[  503.440925][T32757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  503.468085][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.534329][  T312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.544951][  T312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.835001][  T343] FAULT_INJECTION: forcing a failure.
[  503.835001][  T343] name failslab, interval 1, probability 0, space 0, times 0
[  503.847920][  T343] CPU: 0 UID: 0 PID: 343 Comm: syz.0.8443 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  503.847997][  T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  503.848086][  T343] Call Trace:
[  503.848135][  T343]  <TASK>
[  503.848148][  T343]  __dump_stack+0x1d/0x30
[  503.848209][  T343]  dump_stack_lvl+0xe8/0x140
[  503.848228][  T343]  dump_stack+0x15/0x1b
[  503.848245][  T343]  should_fail_ex+0x265/0x280
[  503.848321][  T343]  ? __se_sys_memfd_create+0x1cc/0x590
[  503.848378][  T343]  should_failslab+0x8c/0xb0
[  503.848465][  T343]  __kmalloc_cache_noprof+0x4c/0x320
[  503.848553][  T343]  ? fput+0x8f/0xc0
[  503.848645][  T343]  __se_sys_memfd_create+0x1cc/0x590
[  503.848698][  T343]  __x64_sys_memfd_create+0x31/0x40
[  503.848762][  T343]  x64_sys_call+0x2ac2/0x3000
[  503.848785][  T343]  do_syscall_64+0xd2/0x200
[  503.848833][  T343]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  503.848924][  T343]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  503.848965][  T343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.849064][  T343] RIP: 0033:0x7f02ce4deec9
[  503.849083][  T343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  503.849105][  T343] RSP: 002b:00007f02ccf3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  503.849130][  T343] RAX: ffffffffffffffda RBX: 00000000000005e0 RCX: 00007f02ce4deec9
[  503.849145][  T343] RDX: 00007f02ccf3eef0 RSI: 0000000000000000 RDI: 00007f02ce562960
[  503.849157][  T343] RBP: 0000200000000bc0 R08: 00007f02ccf3ebb7 R09: 00007f02ccf3ee40
[  503.849190][  T343] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0
[  503.849203][  T343] R13: 00007f02ccf3eef0 R14: 00007f02ccf3eeb0 R15: 00002000000005c0
[  503.849294][  T343]  </TASK>
[  504.214824][  T369] loop3: detected capacity change from 0 to 1024
[  504.223740][  T369] EXT4-fs: Mount option(s) incompatible with ext3
[  504.227056][  T371] 9pnet_fd: Insufficient options for proto=fd
[  504.266133][  T373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8456'.
[  504.362543][  T382] atomic_op ffff88810393dd28 conn xmit_atomic 0000000000000000
[  504.403217][  T377] bridge: RTM_NEWNEIGH with invalid ether address
[  504.483857][  T396] loop0: detected capacity change from 0 to 1024
[  504.512367][  T396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  504.529080][  T396] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  504.537959][  T408] netlink: 'syz.5.8468': attribute type 3 has an invalid length.
[  504.545765][  T396] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.8465: lblock 0 mapped to illegal pblock 0 (length 1)
[  504.599318][  T396] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.8465: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  504.637317][  T419] 9pnet: Could not find request transport: fd<r=
[  504.647977][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  504.878307][  T463] atomic_op ffff8881196ed128 conn xmit_atomic 0000000000000000
[  504.913404][  T463] bridge: RTM_NEWNEIGH with invalid ether address
[  505.076947][  T488] loop3: detected capacity change from 0 to 512
[  505.085522][  T484] loop5: detected capacity change from 0 to 1024
[  505.101336][  T488] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  505.110780][  T488] System zones: 0-2, 18-18, 34-35
[  505.117099][  T484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  505.129932][  T488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  505.145343][  T484] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  505.163793][  T484] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.8481: lblock 0 mapped to illegal pblock 0 (length 1)
[  505.189339][  T488] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  505.204516][  T484] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.8481: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  505.225059][T32452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.247612][  T512] FAULT_INJECTION: forcing a failure.
[  505.247612][  T512] name failslab, interval 1, probability 0, space 0, times 0
[  505.251481][  T514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.260462][  T512] CPU: 0 UID: 0 PID: 512 Comm: syz.3.8486 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  505.260502][  T512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  505.260524][  T512] Call Trace:
[  505.260532][  T512]  <TASK>
[  505.260545][  T512]  __dump_stack+0x1d/0x30
[  505.260576][  T512]  dump_stack_lvl+0xe8/0x140
[  505.260606][  T512]  dump_stack+0x15/0x1b
[  505.260631][  T512]  should_fail_ex+0x265/0x280
[  505.260665][  T512]  should_failslab+0x8c/0xb0
[  505.260694][  T512]  kmem_cache_alloc_noprof+0x50/0x310
[  505.260725][  T512]  ? vm_area_dup+0x33/0x2c0
[  505.260763][  T512]  vm_area_dup+0x33/0x2c0
[  505.260799][  T512]  __split_vma+0xe9/0x650
[  505.260831][  T512]  ? avc_has_perm+0xf7/0x180
[  505.260866][  T512]  vms_gather_munmap_vmas+0x17a/0x7b0
[  505.260915][  T512]  ? __rcu_read_unlock+0x4f/0x70
[  505.260948][  T512]  ? mntput_no_expire+0x6f/0x460
[  505.260987][  T512]  do_vmi_align_munmap+0x1a4/0x3d0
[  505.261049][  T512]  do_vmi_munmap+0x1db/0x220
[  505.261097][  T512]  mremap_at+0x110/0x630
[  505.261133][  T512]  __se_sys_mremap+0x6ea/0xb40
[  505.261176][  T512]  ? fput+0x8f/0xc0
[  505.261211][  T512]  ? ksys_write+0x192/0x1a0
[  505.261258][  T512]  __x64_sys_mremap+0x67/0x80
[  505.261299][  T512]  x64_sys_call+0x2a28/0x3000
[  505.261329][  T512]  do_syscall_64+0xd2/0x200
[  505.261375][  T512]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  505.261413][  T512]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  505.261456][  T512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.261488][  T512] RIP: 0033:0x7f2d99d0eec9
[  505.261509][  T512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  505.261537][  T512] RSP: 002b:00007f2d98777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  505.261562][  T512] RAX: ffffffffffffffda RBX: 00007f2d99f65fa0 RCX: 00007f2d99d0eec9
[  505.261580][  T512] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000200000400000
[  505.261598][  T512] RBP: 00007f2d98777090 R08: 00002000008b5000 R09: 0000000000000000
[  505.261616][  T512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  505.261634][  T512] R13: 00007f2d99f66038 R14: 00007f2d99f65fa0 R15: 00007fff34e12328
[  505.261663][  T512]  </TASK>
[  505.485942][  T529] loop3: detected capacity change from 0 to 1024
[  505.486555][  T514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.497908][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  505.513411][  T529] EXT4-fs: Mount option(s) incompatible with ext3
[  505.621240][  T547] atomic_op ffff8881034b9d28 conn xmit_atomic 0000000000000000
[  505.637115][  T538] bridge: RTM_NEWNEIGH with invalid ether address
[  505.734676][  T562] openvswitch: netlink: Message has 6 unknown bytes.
[  505.743372][  T562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8495'.
[  505.767511][  T562] netlink: 'syz.5.8495': attribute type 2 has an invalid length.
[  506.104147][  T617] loop0: detected capacity change from 0 to 1024
[  506.130370][  T617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  506.169879][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.241733][  T625] SELinux:  Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped).
[  506.318785][  T631] 9pnet_fd: Insufficient options for proto=fd
[  506.781242][  T671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=671 comm=syz.1.8523
[  506.801644][  T672] loop5: detected capacity change from 0 to 128
[  506.836253][  T672] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8522'.
[  506.849279][  T674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8523'.
[  506.882759][  T676] FAULT_INJECTION: forcing a failure.
[  506.882759][  T676] name failslab, interval 1, probability 0, space 0, times 0
[  506.895744][  T676] CPU: 1 UID: 0 PID: 676 Comm: syz.4.8524 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  506.895779][  T676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  506.895794][  T676] Call Trace:
[  506.895801][  T676]  <TASK>
[  506.895810][  T676]  __dump_stack+0x1d/0x30
[  506.895831][  T676]  dump_stack_lvl+0xe8/0x140
[  506.895859][  T676]  dump_stack+0x15/0x1b
[  506.895881][  T676]  should_fail_ex+0x265/0x280
[  506.895919][  T676]  should_failslab+0x8c/0xb0
[  506.895940][  T676]  kmem_cache_alloc_node_noprof+0x57/0x320
[  506.895967][  T676]  ? __alloc_skb+0x101/0x320
[  506.895994][  T676]  __alloc_skb+0x101/0x320
[  506.896012][  T676]  ? audit_log_start+0x342/0x720
[  506.896077][  T676]  audit_log_start+0x3a0/0x720
[  506.896122][  T676]  ? kstrtouint+0x76/0xc0
[  506.896149][  T676]  audit_seccomp+0x48/0x100
[  506.896187][  T676]  ? __seccomp_filter+0x82d/0x1250
[  506.896290][  T676]  __seccomp_filter+0x83e/0x1250
[  506.896354][  T676]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  506.896391][  T676]  ? vfs_write+0x7e8/0x960
[  506.896477][  T676]  __secure_computing+0x82/0x150
[  506.896506][  T676]  syscall_trace_enter+0xcf/0x1e0
[  506.896539][  T676]  do_syscall_64+0xac/0x200
[  506.896587][  T676]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  506.896620][  T676]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  506.896655][  T676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.896681][  T676] RIP: 0033:0x7f447e8ceec9
[  506.896701][  T676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  506.896723][  T676] RSP: 002b:00007f447d337038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  506.896773][  T676] RAX: ffffffffffffffda RBX: 00007f447eb25fa0 RCX: 00007f447e8ceec9
[  506.896790][  T676] RDX: 00000000ffffffff RSI: 0000200000000080 RDI: ffffffff80000201
[  506.896819][  T676] RBP: 00007f447d337090 R08: 0000000000000000 R09: 0000000000000000
[  506.896833][  T676] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  506.896846][  T676] R13: 00007f447eb26038 R14: 00007f447eb25fa0 R15: 00007ffdab84d138
[  506.896866][  T676]  </TASK>
[  507.203789][  T682] 9pnet_fd: Insufficient options for proto=fd
[  507.225334][  T685] ALSA: seq fatal error: cannot create timer (-19)
[  507.367619][  T714] loop3: detected capacity change from 0 to 512
[  507.387871][  T714] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  507.403507][  T714] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  507.425055][  T714] EXT4-fs (loop3): 1 truncate cleaned up
[  507.443134][  T714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  507.487491][T32452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.515712][  T743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  507.520588][  T746] netlink: 'syz.3.8548': attribute type 83 has an invalid length.
[  507.535318][  T743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  507.578601][   T29] kauditd_printk_skb: 570 callbacks suppressed
[  507.578622][   T29] audit: type=1326 audit(2000000033.960:81157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  507.611720][   T29] audit: type=1326 audit(2000000033.960:81158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  507.635427][   T29] audit: type=1326 audit(2000000033.970:81159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  507.658943][   T29] audit: type=1326 audit(2000000033.970:81160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  507.682812][   T29] audit: type=1326 audit(2000000033.970:81161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  507.707046][   T29] audit: type=1326 audit(2000000033.970:81162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  507.731312][   T29] audit: type=1326 audit(2000000033.970:81163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  507.755309][   T29] audit: type=1326 audit(2000000033.970:81164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  507.778938][   T29] audit: type=1326 audit(2000000033.970:81165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  507.802867][   T29] audit: type=1326 audit(2000000033.970:81166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.3.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  507.968315][  T797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8556'.
[  507.977689][  T797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8556'.
[  508.113301][  T824] netlink: 'syz.5.8562': attribute type 13 has an invalid length.
[  508.138995][  T824] gretap0: refused to change device tx_queue_len
[  508.150667][  T824] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  508.344823][  T864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.355928][  T864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.474188][  T883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8576'.
[  508.910009][  T940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8587'.
[  508.930317][  T942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8588'.
[  508.931572][  T940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8587'.
[  509.034057][  T957] loop3: detected capacity change from 0 to 128
[  509.435009][ T1001] __nla_validate_parse: 7 callbacks suppressed
[  509.435030][ T1001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8615'.
[  509.453836][ T1001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8615'.
[  509.883447][ T1069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8628'.
[  509.923885][ T1069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8628'.
[  509.939362][ T1074] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1074 comm=syz.3.8629
[  510.023162][ T1088] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  510.257231][ T1122] loop1: detected capacity change from 0 to 512
[  510.264095][ T1122] EXT4-fs: Ignoring removed i_version option
[  510.277419][ T1122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  510.293148][ T1122] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  510.375514][ T1122] EXT4-fs error (device loop1): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.1.8638: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  510.398360][ T1122] EXT4-fs error (device loop1): ext4_get_first_dir_block:3540: inode #12: comm syz.1.8638: directory missing '.'
[  510.476886][T32209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.520860][ T1153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8641'.
[  510.530312][ T1153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8641'.
[  510.693536][ T1184] netlink: 'syz.1.8650': attribute type 1 has an invalid length.
[  510.701521][ T1184] netlink: 'syz.1.8650': attribute type 4 has an invalid length.
[  510.709581][ T1184] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8650'.
[  510.753211][ T1190] loop1: detected capacity change from 0 to 1024
[  510.773382][ T1190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  510.794249][ T1190] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.8651: Allocating blocks 385-513 which overlap fs metadata
[  510.820556][ T1190] EXT4-fs (loop1): pa ffff8881004b3620: logic 16, phys. 129, len 24
[  510.828834][ T1190] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  510.857436][T32209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.881222][ T1207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8653'.
[  510.890926][ T1207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8653'.
[  511.104725][ T1238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8665'.
[  511.126979][ T1243] loop0: detected capacity change from 0 to 128
[  511.311904][ T1276] loop3: detected capacity change from 0 to 1024
[  511.320976][ T1276] EXT4-fs: Mount option(s) incompatible with ext3
[  511.640618][ T1316] atomic_op ffff888119bad928 conn xmit_atomic 0000000000000000
[  511.651701][ T1316] bridge: RTM_NEWNEIGH with invalid ether address
[  511.742522][ T1324] 9pnet_fd: Insufficient options for proto=fd
[  511.977807][ T1365] pimreg: entered allmulticast mode
[  511.986652][ T1365] pimreg: left allmulticast mode
[  512.569326][ T1452] FAULT_INJECTION: forcing a failure.
[  512.569326][ T1452] name failslab, interval 1, probability 0, space 0, times 0
[  512.582339][ T1452] CPU: 1 UID: 0 PID: 1452 Comm: syz.3.8719 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  512.582402][ T1452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  512.582479][ T1452] Call Trace:
[  512.582487][ T1452]  <TASK>
[  512.582497][ T1452]  __dump_stack+0x1d/0x30
[  512.582527][ T1452]  dump_stack_lvl+0xe8/0x140
[  512.582553][ T1452]  dump_stack+0x15/0x1b
[  512.582576][ T1452]  should_fail_ex+0x265/0x280
[  512.582681][ T1452]  should_failslab+0x8c/0xb0
[  512.582717][ T1452]  __kmalloc_cache_node_noprof+0x54/0x320
[  512.582751][ T1452]  ? __get_vm_area_node+0x106/0x1d0
[  512.582795][ T1452]  __get_vm_area_node+0x106/0x1d0
[  512.582832][ T1452]  __vmalloc_node_range_noprof+0x273/0xe00
[  512.582870][ T1452]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  512.582924][ T1452]  ? selinux_file_open+0x2df/0x330
[  512.583021][ T1452]  ? __rcu_read_unlock+0x34/0x70
[  512.583087][ T1452]  ? is_bpf_text_address+0x141/0x160
[  512.583214][ T1452]  ? avc_has_perm_noaudit+0x1b1/0x200
[  512.583246][ T1452]  ? cred_has_capability+0x210/0x280
[  512.583293][ T1452]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  512.583381][ T1452]  __vmalloc_noprof+0x83/0xc0
[  512.583416][ T1452]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  512.583511][ T1452]  bpf_prog_alloc_no_stats+0x47/0x3b0
[  512.583541][ T1452]  ? bpf_prog_alloc+0x2a/0x150
[  512.583581][ T1452]  bpf_prog_alloc+0x3c/0x150
[  512.583646][ T1452]  bpf_prog_load+0x506/0x1100
[  512.583719][ T1452]  ? security_bpf+0x2b/0x90
[  512.583764][ T1452]  __sys_bpf+0x469/0x7c0
[  512.583816][ T1452]  __x64_sys_bpf+0x41/0x50
[  512.583873][ T1452]  x64_sys_call+0x2aee/0x3000
[  512.583904][ T1452]  do_syscall_64+0xd2/0x200
[  512.583947][ T1452]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  512.583983][ T1452]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  512.584041][ T1452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.584207][ T1452] RIP: 0033:0x7f2d99d0eec9
[  512.584282][ T1452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.584309][ T1452] RSP: 002b:00007f2d98777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  512.584336][ T1452] RAX: ffffffffffffffda RBX: 00007f2d99f65fa0 RCX: 00007f2d99d0eec9
[  512.584355][ T1452] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005
[  512.584428][ T1452] RBP: 00007f2d98777090 R08: 0000000000000000 R09: 0000000000000000
[  512.584447][ T1452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.584464][ T1452] R13: 00007f2d99f66038 R14: 00007f2d99f65fa0 R15: 00007fff34e12328
[  512.584490][ T1452]  </TASK>
[  512.584553][ T1452] syz.3.8719: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[  512.859474][ T1452] CPU: 1 UID: 0 PID: 1452 Comm: syz.3.8719 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  512.859542][ T1452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  512.859560][ T1452] Call Trace:
[  512.859569][ T1452]  <TASK>
[  512.859579][ T1452]  __dump_stack+0x1d/0x30
[  512.859608][ T1452]  dump_stack_lvl+0xe8/0x140
[  512.859670][ T1452]  dump_stack+0x15/0x1b
[  512.859693][ T1452]  warn_alloc+0x12b/0x1a0
[  512.859736][ T1452]  __vmalloc_node_range_noprof+0x297/0xe00
[  512.859775][ T1452]  ? selinux_file_open+0x2df/0x330
[  512.859856][ T1452]  ? __rcu_read_unlock+0x34/0x70
[  512.859903][ T1452]  ? is_bpf_text_address+0x141/0x160
[  512.859946][ T1452]  ? avc_has_perm_noaudit+0x1b1/0x200
[  512.860016][ T1452]  ? cred_has_capability+0x210/0x280
[  512.860062][ T1452]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  512.860104][ T1452]  __vmalloc_noprof+0x83/0xc0
[  512.860190][ T1452]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  512.860329][ T1452]  bpf_prog_alloc_no_stats+0x47/0x3b0
[  512.860371][ T1452]  ? bpf_prog_alloc+0x2a/0x150
[  512.860425][ T1452]  bpf_prog_alloc+0x3c/0x150
[  512.860466][ T1452]  bpf_prog_load+0x506/0x1100
[  512.860622][ T1452]  ? security_bpf+0x2b/0x90
[  512.860791][ T1452]  __sys_bpf+0x469/0x7c0
[  512.860886][ T1452]  __x64_sys_bpf+0x41/0x50
[  512.860924][ T1452]  x64_sys_call+0x2aee/0x3000
[  512.860954][ T1452]  do_syscall_64+0xd2/0x200
[  512.860997][ T1452]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  512.861137][ T1452]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  512.861204][ T1452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.861230][ T1452] RIP: 0033:0x7f2d99d0eec9
[  512.861322][ T1452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.861349][ T1452] RSP: 002b:00007f2d98777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  512.861374][ T1452] RAX: ffffffffffffffda RBX: 00007f2d99f65fa0 RCX: 00007f2d99d0eec9
[  512.861392][ T1452] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005
[  512.861409][ T1452] RBP: 00007f2d98777090 R08: 0000000000000000 R09: 0000000000000000
[  512.861426][ T1452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.861442][ T1452] R13: 00007f2d99f66038 R14: 00007f2d99f65fa0 R15: 00007fff34e12328
[  512.861495][ T1452]  </TASK>
[  512.861506][ T1452] Mem-Info:
[  513.092713][   T29] kauditd_printk_skb: 580 callbacks suppressed
[  513.092733][   T29] audit: type=1326 audit(2000000039.460:81747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1432 comm="syz.5.8718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  513.094519][ T1452] active_anon:5284 inactive_anon:16 isolated_anon:0
[  513.094519][ T1452]  active_file:25422 inactive_file:2842 isolated_file:0
[  513.094519][ T1452]  unevictable:0 dirty:357 writeback:0
[  513.094519][ T1452]  slab_reclaimable:3601 slab_unreclaimable:18525
[  513.094519][ T1452]  mapped:37216 shmem:175 pagetables:1783
[  513.094519][ T1452]  sec_pagetables:0 bounce:0
[  513.094519][ T1452]  kernel_misc_reclaimable:0
[  513.094519][ T1452]  free:1837921 free_pcp:13376 free_cma:0
[  513.100767][   T29] audit: type=1326 audit(2000000039.460:81748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1432 comm="syz.5.8718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  513.124439][ T1452] Node 0 active_anon:21136kB inactive_anon:64kB active_file:101688kB inactive_file:11368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148864kB dirty:1428kB writeback:0kB shmem:700kB kernel_stack:3776kB pagetables:7132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  513.124522][ T1452] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  513.124647][ T1452] lowmem_reserve[]: 0 2883 7862 7862
[  513.124683][ T1452] Node 0 DMA32 free:2949212kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952744kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB
[  513.124823][ T1452] lowmem_reserve[]: 0 0 4978 4978
[  513.291333][ T1452] Node 0 Normal free:4391268kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20788kB inactive_anon:64kB active_file:101688kB inactive_file:11368kB unevictable:0kB writepending:1428kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:50172kB local_pcp:2760kB free_cma:0kB
[  513.323903][ T1452] lowmem_reserve[]: 0 0 0 0
[  513.328470][ T1452] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  513.341504][ T1452] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 3*32kB (M) 2*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949212kB
[  513.357775][ T1452] Node 0 Normal: 863*4kB (UME) 749*8kB (UME) 536*16kB (UME) 442*32kB (UME) 223*64kB (UME) 166*128kB (UME) 91*256kB (UME) 37*512kB (UME) 79*1024kB (UM) 73*2048kB (UME) 989*4096kB (UM) = 4391268kB
[  513.377268][ T1452] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  513.386710][ T1452] 28478 total pagecache pages
[  513.391504][ T1452] 46 pages in swap cache
[  513.395762][ T1452] Free swap  = 124812kB
[  513.395774][ T1452] Total swap = 124996kB
[  513.395784][ T1452] 2097051 pages RAM
[  513.408194][ T1452] 0 pages HighMem/MovableOnly
[  513.412956][ T1452] 80465 pages reserved
[  513.513811][ T1521] loop5: detected capacity change from 0 to 256
[  513.523754][ T1521] FAT-fs (loop5): error, clusters badly computed (0 != 128)
[  513.531214][ T1521] FAT-fs (loop5): Filesystem has been set read-only
[  513.537970][   T29] audit: type=1326 audit(2000000039.920:81749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  513.558978][ T1521] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  513.561993][   T29] audit: type=1326 audit(2000000039.920:81750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  513.594444][   T29] audit: type=1326 audit(2000000039.920:81751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  513.619005][   T29] audit: type=1326 audit(2000000039.920:81752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  513.643507][   T29] audit: type=1326 audit(2000000039.920:81753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  513.667138][   T29] audit: type=1326 audit(2000000039.920:81754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  513.690732][   T29] audit: type=1326 audit(2000000039.920:81755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  513.715553][   T29] audit: type=1326 audit(2000000039.920:81756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1522 comm="syz.3.8730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  513.741090][ T1521] SELinux: failed to load policy
[  513.807894][ T1547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1547 comm=syz.0.8736
[  513.986366][ T1560] atomic_op ffff88810393d928 conn xmit_atomic 0000000000000000
[  514.025748][ T1559] bridge: RTM_NEWNEIGH with invalid ether address
[  514.573282][ T1608] __nla_validate_parse: 11 callbacks suppressed
[  514.573304][ T1608] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8754'.
[  514.588940][ T1608] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8754'.
[  514.675177][ T1627] FAULT_INJECTION: forcing a failure.
[  514.675177][ T1627] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  514.684538][ T1625] loop0: detected capacity change from 0 to 1024
[  514.688775][ T1627] CPU: 0 UID: 0 PID: 1627 Comm: syz.5.8756 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  514.688815][ T1627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  514.688834][ T1627] Call Trace:
[  514.688842][ T1627]  <TASK>
[  514.688853][ T1627]  __dump_stack+0x1d/0x30
[  514.688927][ T1627]  dump_stack_lvl+0xe8/0x140
[  514.688956][ T1627]  dump_stack+0x15/0x1b
[  514.688990][ T1627]  should_fail_ex+0x265/0x280
[  514.689082][ T1627]  should_fail+0xb/0x20
[  514.689110][ T1627]  should_fail_usercopy+0x1a/0x20
[  514.689145][ T1627]  _copy_from_user+0x1c/0xb0
[  514.689268][ T1627]  get_timespec64+0x4c/0x100
[  514.689303][ T1627]  __x64_sys_recvmmsg+0xa3/0x170
[  514.689415][ T1627]  x64_sys_call+0x27aa/0x3000
[  514.689448][ T1627]  do_syscall_64+0xd2/0x200
[  514.689494][ T1627]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  514.689597][ T1627]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  514.689641][ T1627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.689753][ T1627] RIP: 0033:0x7fc99e7deec9
[  514.689783][ T1627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  514.689809][ T1627] RSP: 002b:00007fc99d247038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  514.689837][ T1627] RAX: ffffffffffffffda RBX: 00007fc99ea35fa0 RCX: 00007fc99e7deec9
[  514.689855][ T1627] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000005
[  514.689874][ T1627] RBP: 00007fc99d247090 R08: 0000200000003700 R09: 0000000000000000
[  514.689892][ T1627] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001
[  514.689910][ T1627] R13: 00007fc99ea36038 R14: 00007fc99ea35fa0 R15: 00007ffd249d8af8
[  514.689969][ T1627]  </TASK>
[  514.882473][ T1625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  514.913575][ T1625] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  514.963629][ T1625] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.8755: lblock 0 mapped to illegal pblock 0 (length 1)
[  514.997954][ T1625] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.8755: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  515.039594][ T1660] loop3: detected capacity change from 0 to 2048
[  515.049903][ T1664] atomic_op ffff888118687528 conn xmit_atomic 0000000000000000
[  515.050691][ T1661] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8766'.
[  515.068583][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  515.092627][ T1661] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8766'.
[  515.105740][ T1660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.161845][ T1677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.170542][ T1677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  515.171668][ T1660] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  515.512206][ T1739] 9pnet: Could not find request transport: fd0x0000000000000004
[  515.599821][ T1754] atomic_op ffff8881196ed128 conn xmit_atomic 0000000000000000
[  515.695533][ T1766] loop1: detected capacity change from 0 to 128
[  515.722730][ T1766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8782'.
[  515.785915][T32452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.831555][ T1783] loop3: detected capacity change from 0 to 512
[  515.868342][ T1783] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  515.881194][ T1783] System zones: 0-2, 18-18, 34-35
[  515.899662][ T1795] loop5: detected capacity change from 0 to 128
[  515.916791][ T1783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.949226][ T1795] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8789'.
[  515.968820][ T1783] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  515.994273][T32452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.073575][ T1816] atomic_op ffff88810393c128 conn xmit_atomic 0000000000000000
[  516.145474][ T1822] netlink: 100 bytes leftover after parsing attributes in process `syz.5.8797'.
[  516.175720][ T1822] tipc: Started in network mode
[  516.180933][ T1822] tipc: Node identity 36f648a47f3, cluster identity 4711
[  516.188430][ T1822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  516.197138][ T1822] syzkaller0: entered promiscuous mode
[  516.202843][ T1822] syzkaller0: entered allmulticast mode
[  516.214784][ T1821] tipc: Resetting bearer <eth:syzkaller0>
[  516.224090][ T1826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8799'.
[  516.236203][ T1826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8799'.
[  516.236987][ T1821] tipc: Disabling bearer <eth:syzkaller0>
[  516.281513][ T1830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8801'.
[  516.489223][ T1853] atomic_op ffff88810393f128 conn xmit_atomic 0000000000000000
[  516.537933][ T1857] tipc: Started in network mode
[  516.543052][ T1857] tipc: Node identity da91005465f5, cluster identity 4711
[  516.550419][ T1857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  516.559917][ T1857] syzkaller0: entered promiscuous mode
[  516.565518][ T1857] syzkaller0: entered allmulticast mode
[  516.575067][ T1856] tipc: Resetting bearer <eth:syzkaller0>
[  516.600165][ T1859] netlink: 'syz.3.8814': attribute type 3 has an invalid length.
[  516.609712][ T1856] tipc: Disabling bearer <eth:syzkaller0>
[  516.795623][ T1879] pimreg: entered allmulticast mode
[  516.812305][ T1879] pimreg: left allmulticast mode
[  516.844095][ T1886] atomic_op ffff88810393c928 conn xmit_atomic 0000000000000000
[  516.937099][ T1893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  516.946786][ T1893] syzkaller0: entered promiscuous mode
[  516.952989][ T1893] syzkaller0: entered allmulticast mode
[  516.964072][ T1892] tipc: Resetting bearer <eth:syzkaller0>
[  516.973903][ T1892] tipc: Disabling bearer <eth:syzkaller0>
[  517.224796][ T1936] tipc: Started in network mode
[  517.230466][ T1936] tipc: Node identity 9eb441ce29cc, cluster identity 4711
[  517.238039][ T1936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  517.246473][ T1936] syzkaller0: entered promiscuous mode
[  517.252421][ T1936] syzkaller0: entered allmulticast mode
[  517.263194][ T1935] tipc: Resetting bearer <eth:syzkaller0>
[  517.275271][ T1935] tipc: Disabling bearer <eth:syzkaller0>
[  517.347749][ T1946] loop0: detected capacity change from 0 to 128
[  517.457192][ T1955] loop4: detected capacity change from 0 to 128
[  517.601555][ T1973] loop3: detected capacity change from 0 to 128
[  517.625766][ T1976] atomic_op ffff88810b0d5128 conn xmit_atomic 0000000000000000
[  517.789495][ T1985] loop4: detected capacity change from 0 to 2048
[  517.896096][ T2009] loop3: detected capacity change from 0 to 128
[  518.056300][ T2028] ALSA: seq fatal error: cannot create timer (-19)
[  518.202734][ T2063] loop3: detected capacity change from 0 to 128
[  518.251204][   T29] kauditd_printk_skb: 570 callbacks suppressed
[  518.251222][   T29] audit: type=1326 audit(2000000044.640:82327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="syz.0.8909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ce4deec9 code=0x7ffc0000
[  518.300463][   T29] audit: type=1326 audit(2000000044.670:82328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="syz.0.8909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ce4deec9 code=0x7ffc0000
[  518.324054][   T29] audit: type=1326 audit(2000000044.670:82329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="syz.0.8909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02ce4deec9 code=0x7ffc0000
[  518.348039][   T29] audit: type=1326 audit(2000000044.670:82330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="syz.0.8909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ce4deec9 code=0x7ffc0000
[  518.371739][   T29] audit: type=1326 audit(2000000044.670:82331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="syz.0.8909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f02ce4deec9 code=0x7ffc0000
[  518.395499][   T29] audit: type=1326 audit(2000000044.670:82332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="syz.0.8909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ce4deec9 code=0x7ffc0000
[  518.419477][   T29] audit: type=1326 audit(2000000044.670:82333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="syz.0.8909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ce4deec9 code=0x7ffc0000
[  518.503606][   T29] audit: type=1326 audit(2000000044.890:82334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2097 comm="syz.4.8915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447e8ceec9 code=0x7ffc0000
[  518.527624][   T29] audit: type=1326 audit(2000000044.890:82335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2097 comm="syz.4.8915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447e8ceec9 code=0x7ffc0000
[  518.552775][   T29] audit: type=1326 audit(2000000044.890:82336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.3.8912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  518.718909][ T2124] loop4: detected capacity change from 0 to 128
[  518.902755][ T2150] tipc: Started in network mode
[  518.907756][ T2150] tipc: Node identity 1e2b7cd02a44, cluster identity 4711
[  518.915217][ T2150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  518.969482][ T2175] syzkaller0: entered promiscuous mode
[  518.975023][ T2175] syzkaller0: entered allmulticast mode
[  519.043760][ T2148] tipc: Resetting bearer <eth:syzkaller0>
[  519.072175][ T2188] 9pnet_fd: Insufficient options for proto=fd
[  519.139362][ T2148] tipc: Disabling bearer <eth:syzkaller0>
[  519.207075][ T2210] ALSA: seq fatal error: cannot create timer (-19)
[  519.244078][ T2215] openvswitch: netlink: Message has 6 unknown bytes.
[  519.311477][ T2215] netlink: 'syz.1.8942': attribute type 2 has an invalid length.
[  519.586817][ T2284] __nla_validate_parse: 22 callbacks suppressed
[  519.586840][ T2284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8962'.
[  519.704262][ T2303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8965'.
[  519.774147][ T2317] openvswitch: netlink: Message has 6 unknown bytes.
[  519.931018][ T2345] loop0: detected capacity change from 0 to 512
[  519.941799][ T2345] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  519.950342][ T2345] System zones: 0-2, 18-18, 34-35
[  519.956437][ T2345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.969305][ T2345] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  519.996669][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.155204][ T2384] netlink: 'syz.0.8974': attribute type 3 has an invalid length.
[  520.511988][ T2424] netlink: 'syz.0.8981': attribute type 10 has an invalid length.
[  520.523610][ T2424] team0: Port device dummy0 added
[  520.537638][ T2424] netlink: 'syz.0.8981': attribute type 10 has an invalid length.
[  520.548514][ T2424] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  520.560660][ T2424] team0: Failed to send options change via netlink (err -105)
[  520.568374][ T2424] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  520.568900][ T2437] loop5: detected capacity change from 0 to 128
[  520.577833][ T2424] team0: Port device dummy0 removed
[  520.591845][ T2424] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  520.608452][ T2437] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8984'.
[  520.671041][ T2440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8985'.
[  520.680444][ T2440] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8985'.
[  521.056194][ T2483] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8999'.
[  521.071897][ T2483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  521.079026][ T2483] syzkaller0: entered promiscuous mode
[  521.084612][ T2483] syzkaller0: entered allmulticast mode
[  521.106618][ T2481] tipc: Resetting bearer <eth:syzkaller0>
[  521.119566][ T2481] tipc: Disabling bearer <eth:syzkaller0>
[  521.125746][ T2493] netlink: 'syz.1.9010': attribute type 3 has an invalid length.
[  521.147232][ T2489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9008'.
[  521.346359][ T2531] openvswitch: netlink: Message has 6 unknown bytes.
[  521.389482][ T2538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9020'.
[  521.408366][ T2540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9021'.
[  521.429724][ T2538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9020'.
[  521.432878][ T2540] loop3: detected capacity change from 0 to 256
[  521.446933][ T2547] netlink: 'syz.4.9022': attribute type 3 has an invalid length.
[  521.476609][ T2540] FAT-fs (loop3): error, clusters badly computed (0 != 128)
[  521.484093][ T2540] FAT-fs (loop3): Filesystem has been set read-only
[  521.496965][ T2540] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  521.516256][ T2553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  521.526807][ T2552] tipc: Disabling bearer <eth:syzkaller0>
[  521.570859][ T2540] SELinux: failed to load policy
[  521.610775][ T2564] ALSA: seq fatal error: cannot create timer (-19)
[  521.839810][ T2605] ALSA: seq fatal error: cannot create timer (-19)
[  522.024603][ T2643] loop1: detected capacity change from 0 to 512
[  522.050594][ T2643] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  522.072302][ T2643] System zones: 0-2, 18-18, 34-35
[  522.081298][ T2643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.110878][ T2643] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  522.163485][T32209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.170553][ T2667] loop3: detected capacity change from 0 to 128
[  522.452998][ T2705] openvswitch: netlink: Message has 6 unknown bytes.
[  522.562133][ T2722] loop1: detected capacity change from 0 to 512
[  522.592822][ T2722] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  522.602030][ T2722] System zones: 0-2, 18-18, 34-35
[  522.608288][ T2722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.623377][ T2722] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  522.650271][ T2736] netlink: 'syz.3.9065': attribute type 3 has an invalid length.
[  522.660922][T32209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.863303][ T2760] openvswitch: netlink: Message has 6 unknown bytes.
[  522.976948][ T2770] loop3: detected capacity change from 0 to 512
[  523.000687][ T2770] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  523.009397][ T2770] System zones: 0-2, 18-18, 34-35
[  523.027206][ T2770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.041573][ T2770] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  523.066882][T32452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.203565][ T2792] openvswitch: netlink: Message has 6 unknown bytes.
[  523.258731][   T29] kauditd_printk_skb: 988 callbacks suppressed
[  523.258751][   T29] audit: type=1326 audit(2000000049.640:83325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.3.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  523.288743][   T29] audit: type=1326 audit(2000000049.640:83326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.3.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  523.312366][   T29] audit: type=1326 audit(2000000049.640:83327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.3.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  523.337266][   T29] audit: type=1326 audit(2000000049.640:83328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.3.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  523.361652][   T29] audit: type=1326 audit(2000000049.640:83329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.3.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  523.385669][   T29] audit: type=1326 audit(2000000049.640:83330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.3.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  523.407375][ T2802] loop1: detected capacity change from 0 to 512
[  523.415215][   T29] audit: type=1326 audit(2000000049.650:83331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.3.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  523.440592][   T29] audit: type=1326 audit(2000000049.650:83332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.3.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  523.440646][   T29] audit: type=1326 audit(2000000049.650:83333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.3.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  523.440686][   T29] audit: type=1326 audit(2000000049.650:83334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.3.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d99d0eec9 code=0x7ffc0000
[  523.515358][ T2802] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  523.524366][ T2802] System zones: 0-2, 18-18, 34-35
[  523.531348][ T2802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.531476][ T2802] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  523.557883][T32209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.654171][ T2820] atomic_op ffff888118684528 conn xmit_atomic 0000000000000000
[  523.780348][ T2835] ALSA: seq fatal error: cannot create timer (-19)
[  524.228762][ T2906] atomic_op ffff88810b0d7528 conn xmit_atomic 0000000000000000
[  524.673077][ T2976] __nla_validate_parse: 17 callbacks suppressed
[  524.673100][ T2976] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9134'.
[  524.767143][ T2989] atomic_op ffff888119793128 conn xmit_atomic 0000000000000000
[  524.793208][ T2989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9135'.
[  524.967052][ T3020] netlink: 100 bytes leftover after parsing attributes in process `syz.5.9141'.
[  525.035315][ T3035] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9143'.
[  525.051880][ T3035] tipc: Started in network mode
[  525.056825][ T3035] tipc: Node identity 2a80ec272bbc, cluster identity 4711
[  525.064199][ T3035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  525.074335][ T3035] syzkaller0: entered promiscuous mode
[  525.080155][ T3035] syzkaller0: entered allmulticast mode
[  525.093508][ T3034] tipc: Resetting bearer <eth:syzkaller0>
[  525.102308][ T3034] tipc: Disabling bearer <eth:syzkaller0>
[  525.262251][ T3070] ALSA: seq fatal error: cannot create timer (-19)
[  525.294096][ T3075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9149'.
[  525.320691][ T3077] 9pnet: Could not find request transport: fd0x0000000000000004
[  525.337332][ T3082] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9152'.
[  525.391734][ T3093] 9pnet_fd: Insufficient options for proto=fd
[  525.397880][ T3094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9156'.
[  525.538716][ T3110] 9pnet: Could not find request transport: fd0x0000000000000004
[  525.799204][ T3149] netlink: 'syz.3.9178': attribute type 3 has an invalid length.
[  525.813455][ T3152] loop5: detected capacity change from 0 to 1024
[  525.848902][ T3152] EXT4-fs: Mount option(s) incompatible with ext3
[  525.914354][ T3169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9187'.
[  525.995072][ T3184] 9pnet_fd: Insufficient options for proto=fd
[  527.108396][ T3376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9227'.
[  527.253089][ T3405] loop5: detected capacity change from 0 to 512
[  527.276701][ T3405] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  527.285735][ T3405] System zones: 0-2, 18-18, 34-35
[  527.292598][ T3405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  527.308246][ T3405] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  527.397779][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.593320][ T3440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9244'.
[  527.832012][ T3472] netlink: 'syz.5.9260': attribute type 3 has an invalid length.
[  527.929970][ T3489] netlink: 'syz.3.9269': attribute type 3 has an invalid length.
[  528.199214][ T3542] netlink: 'syz.0.9282': attribute type 3 has an invalid length.
[  528.257839][ T3553] loop3: detected capacity change from 0 to 128
[  528.370112][   T29] kauditd_printk_skb: 824 callbacks suppressed
[  528.370131][   T29] audit: type=1326 audit(2000000054.760:84159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.5.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  528.401157][   T29] audit: type=1326 audit(2000000054.760:84160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.5.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  528.425017][   T29] audit: type=1326 audit(2000000054.760:84161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.5.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  528.448696][   T29] audit: type=1326 audit(2000000054.760:84162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.5.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  528.472854][   T29] audit: type=1326 audit(2000000054.760:84163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.5.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  528.497062][   T29] audit: type=1326 audit(2000000054.760:84164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.5.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  528.521439][   T29] audit: type=1326 audit(2000000054.760:84165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.5.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  528.545231][   T29] audit: type=1326 audit(2000000054.760:84166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.5.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  528.569356][   T29] audit: type=1326 audit(2000000054.760:84167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.5.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  528.593514][   T29] audit: type=1326 audit(2000000054.760:84168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.5.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99e7deec9 code=0x7ffc0000
[  528.755846][ T3601] netlink: 'syz.0.9295': attribute type 3 has an invalid length.
[  529.278566][ T3677] loop5: detected capacity change from 0 to 128
[  529.888709][ T3724] __nla_validate_parse: 6 callbacks suppressed
[  529.888763][ T3724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9328'.
[  529.908003][ T3727] atomic_op ffff888123009528 conn xmit_atomic 0000000000000000
[  530.014892][ T3736] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  530.144618][ T3731] infiniband syz0: set active
[  530.149494][ T3731] infiniband syz0: added bond_slave_0
[  530.200004][ T3731] RDS/IB: syz0: added
[  530.216392][ T3731] smc: adding ib device syz0 with port count 1
[  530.253026][ T3731] smc:    ib device syz0 port 1 has pnetid 
[  530.394568][ T3755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9334'.
[  530.479145][ T3765] netlink: 'syz.3.9337': attribute type 3 has an invalid length.
[  530.662373][ T3775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9342'.
[  530.818200][ T3787] netlink: 'syz.4.9348': attribute type 3 has an invalid length.
[  530.895195][ T3789] atomic_op ffff888119badd28 conn xmit_atomic 0000000000000000
[  531.056819][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9353'.
[  531.066256][ T3799] netlink: 'syz.1.9353': attribute type 1 has an invalid length.
[  531.074364][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9353'.
[  531.083517][ T3802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9354'.
[  531.110621][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9353'.
[  531.119758][ T3799] netlink: 'syz.1.9353': attribute type 1 has an invalid length.
[  531.127506][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9353'.
[  531.507013][ T3838] loop0: detected capacity change from 0 to 1024
[  531.529656][ T3842] atomic_op ffff88812868dd28 conn xmit_atomic 0000000000000000
[  531.537417][ T3838] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  531.567468][ T3838] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  531.595379][ T3838] EXT4-fs (loop0): orphan cleanup on readonly fs
[  531.600467][ T3852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9371'.
[  531.639582][ T3838] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.9366: Failed to acquire dquot type 0
[  531.658308][ T3838] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.9366: Failed to acquire dquot type 0
[  531.698387][ T3838] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.9366: Freeing blocks not in datazone - block = 0, count = 4096
[  531.716268][ T3838] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.9366: Failed to acquire dquot type 0
[  531.737375][ T3838] EXT4-fs (loop0): 1 orphan inode deleted
[  531.781751][ T3838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  531.877527][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.139645][ T3894] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  532.525587][ T3907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9385'.
[  532.563159][ T3904] atomic_op ffff88812db67128 conn xmit_atomic 0000000000000000
[  533.345989][ T3961] loop3: detected capacity change from 0 to 2048
[  533.358360][ T3956] infiniband syz!: set active
[  533.363216][ T3956] infiniband syz!: added team_slave_0
[  533.402635][   T29] kauditd_printk_skb: 2623 callbacks suppressed
[  533.402655][   T29] audit: type=1400 audit(2000000059.760:86786): avc:  denied  { bind } for  pid=3963 comm="syz.1.9401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  533.428696][   T29] audit: type=1400 audit(2000000059.760:86787): avc:  denied  { write } for  pid=3963 comm="syz.1.9401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  533.448547][   T29] audit: type=1400 audit(2000000059.760:86788): avc:  denied  { create } for  pid=3963 comm="syz.1.9401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  533.468180][   T29] audit: type=1400 audit(2000000059.760:86789): avc:  denied  { setopt } for  pid=3963 comm="syz.1.9401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  533.488202][   T29] audit: type=1400 audit(2000000059.760:86790): avc:  denied  { watch watch_reads } for  pid=3963 comm="syz.1.9401" path="/179" dev="tmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  533.500112][ T3968] atomic_op ffff88812868dd28 conn xmit_atomic 0000000000000000
[  533.511615][   T29] audit: type=1400 audit(2000000059.760:86791): avc:  denied  { prog_load } for  pid=3967 comm="syz.4.9402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  533.538578][   T29] audit: type=1400 audit(2000000059.760:86792): avc:  denied  { mac_admin } for  pid=3963 comm="syz.1.9401" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  533.546053][ T3961]  loop3: p1 < > p4
[  533.560003][   T29] audit: type=1400 audit(2000000059.760:86794): avc:  denied  { bpf } for  pid=3967 comm="syz.4.9402" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  533.564241][ T3956] RDS/IB: syz!: added
[  533.584903][   T29] audit: type=1400 audit(2000000059.760:86793): avc:  denied  { relabelto } for  pid=3963 comm="syz.1.9401" name="file0" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  533.594042][ T3961] loop3: p4 size 8388608 extends beyond EOD, truncated
[  533.616253][   T29] audit: type=1400 audit(2000000059.760:86796): avc:  denied  { associate } for  pid=3963 comm="syz.1.9401" name="file0" dev="tmpfs" ino=1004 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  533.651320][ T3956] smc: adding ib device syz! with port count 1
[  533.666032][ T3956] smc:    ib device syz! port 1 has pnetid 
[  533.919983][ T3983] netlink: 'syz.1.9406': attribute type 3 has an invalid length.
[  534.324559][ T4019] atomic_op ffff888119792d28 conn xmit_atomic 0000000000000000
[  534.618675][ T4041] loop1: detected capacity change from 0 to 2048
[  534.661893][ T4041] EXT4-fs: Ignoring removed i_version option
[  534.704432][ T4061] syz0: rxe_newlink: already configured on bond_slave_0
[  534.725421][ T4041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  534.749722][ T4041] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.330468][ T4097] __nla_validate_parse: 5 callbacks suppressed
[  535.330521][ T4097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9437'.
[  535.359277][ T4096] atomic_op ffff88812407d928 conn xmit_atomic 0000000000000000
[  535.423451][ T4103] loop0: detected capacity change from 0 to 1024
[  535.434576][ T4096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9435'.
[  535.454137][ T4103] EXT4-fs: Mount option(s) incompatible with ext3
[  535.607739][ T4113] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  535.607998][ T4108] SELinux: ebitmap: truncated map
[  535.636364][ T4108] SELinux: failed to load policy
[  535.719817][ T4108] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  535.806356][ T4125] loop1: detected capacity change from 0 to 128
[  535.907561][ T4131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9452'.
[  535.922973][ T4125] netlink: 264 bytes leftover after parsing attributes in process `syz.1.9450'.
[  536.155535][ T4149] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  536.163552][ T4153] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  536.273297][ T4163] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  536.290151][ T4161] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  536.353305][ T4167] loop3: detected capacity change from 0 to 1024
[  536.372379][ T4167] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  536.390723][ T4167] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  536.408893][ T4167] EXT4-fs (loop3): orphan cleanup on readonly fs
[  536.429594][ T4167] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9468: Failed to acquire dquot type 0
[  536.455045][ T4167] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9468: Failed to acquire dquot type 0
[  536.485776][ T4173] loop0: detected capacity change from 0 to 8192
[  536.508327][ T4167] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.9468: Freeing blocks not in datazone - block = 0, count = 4096
[  536.537192][ T4167] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9468: Failed to acquire dquot type 0
[  536.562689][ T4167] EXT4-fs (loop3): 1 orphan inode deleted
[  536.571356][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  536.626996][T32452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.713572][ T4192] loop0: detected capacity change from 0 to 1024
[  536.739596][ T4194] atomic_op ffff88812db65d28 conn xmit_atomic 0000000000000000
[  536.759492][ T4192] EXT4-fs: Mount option(s) incompatible with ext3
[  536.806654][ T4189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9477'.
[  536.896694][ T4205] FAULT_INJECTION: forcing a failure.
[  536.896694][ T4205] name failslab, interval 1, probability 0, space 0, times 0
[  536.909474][ T4205] CPU: 0 UID: 0 PID: 4205 Comm: syz.3.9492 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  536.909502][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  536.909518][ T4205] Call Trace:
[  536.909532][ T4205]  <TASK>
[  536.909541][ T4205]  __dump_stack+0x1d/0x30
[  536.909564][ T4205]  dump_stack_lvl+0xe8/0x140
[  536.909584][ T4205]  dump_stack+0x15/0x1b
[  536.909601][ T4205]  should_fail_ex+0x265/0x280
[  536.909625][ T4205]  should_failslab+0x8c/0xb0
[  536.909644][ T4205]  kmem_cache_alloc_noprof+0x50/0x310
[  536.909667][ T4205]  ? vm_area_dup+0x33/0x2c0
[  536.909693][ T4205]  vm_area_dup+0x33/0x2c0
[  536.909718][ T4205]  __split_vma+0xe9/0x650
[  536.909744][ T4205]  ? save_fpregs_to_fpstate+0x100/0x160
[  536.909784][ T4205]  vms_gather_munmap_vmas+0x17a/0x7b0
[  536.909829][ T4205]  ? __rcu_read_unlock+0x4f/0x70
[  536.909859][ T4205]  ? mntput_no_expire+0x6f/0x460
[  536.909892][ T4205]  do_vmi_align_munmap+0x1a4/0x3d0
[  536.909946][ T4205]  do_vmi_munmap+0x1db/0x220
[  536.909989][ T4205]  mremap_at+0x110/0x630
[  536.910020][ T4205]  __se_sys_mremap+0x6ea/0xb40
[  536.910049][ T4205]  ? fput+0x8f/0xc0
[  536.910073][ T4205]  ? ksys_write+0x192/0x1a0
[  536.910109][ T4205]  __x64_sys_mremap+0x67/0x80
[  536.910136][ T4205]  x64_sys_call+0x2a28/0x3000
[  536.910163][ T4205]  do_syscall_64+0xd2/0x200
[  536.910201][ T4205]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  536.910227][ T4205]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  536.910262][ T4205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.910289][ T4205] RIP: 0033:0x7f2d99d0eec9
[  536.910306][ T4205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  536.910325][ T4205] RSP: 002b:00007f2d98777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  536.910344][ T4205] RAX: ffffffffffffffda RBX: 00007f2d99f65fa0 RCX: 00007f2d99d0eec9
[  536.910356][ T4205] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000200000400000
[  536.910373][ T4205] RBP: 00007f2d98777090 R08: 00002000008b5000 R09: 0000000000000000
[  536.910389][ T4205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  536.910403][ T4205] R13: 00007f2d99f66038 R14: 00007f2d99f65fa0 R15: 00007fff34e12328
[  536.910422][ T4205]  </TASK>
[  536.984035][ T4209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9482'.
[  537.045451][ T4212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9483'.
[  537.473044][ T4241] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9499'.
[  537.574996][ T4245] 9pnet_fd: Insufficient options for proto=fd
[  537.593967][ T4249] loop3: detected capacity change from 0 to 1024
[  537.618251][ T4249] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  537.655625][ T4249] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  537.675199][ T4249] EXT4-fs (loop3): orphan cleanup on readonly fs
[  537.713989][ T4249] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9502: Failed to acquire dquot type 0
[  537.737117][ T4249] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9502: Failed to acquire dquot type 0
[  537.740614][ T4261] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  537.758794][ T4249] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.9502: Freeing blocks not in datazone - block = 0, count = 4096
[  537.777513][ T4249] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9502: Failed to acquire dquot type 0
[  537.805981][ T4249] EXT4-fs (loop3): 1 orphan inode deleted
[  537.823164][ T4249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  537.894434][T32452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.008100][ T4275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9513'.
[  538.113572][ T4276] loop5: detected capacity change from 0 to 1024
[  538.115440][ T4279] loop1: detected capacity change from 0 to 1024
[  538.131092][ T4279] EXT4-fs: Mount option(s) incompatible with ext3
[  538.148436][ T4268] pimreg: entered allmulticast mode
[  538.154065][ T4276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  538.227391][ T4258] pimreg: left allmulticast mode
[  538.233882][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.355602][ T4290] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9518'.
[  538.409146][   T29] kauditd_printk_skb: 2445 callbacks suppressed
[  538.409164][   T29] audit: type=1400 audit(2000000064.800:89229): avc:  denied  { map_create } for  pid=4292 comm="syz.5.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  538.437005][   T29] audit: type=1400 audit(2000000064.800:89230): avc:  denied  { perfmon } for  pid=4292 comm="syz.5.9520" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  538.458099][   T29] audit: type=1400 audit(2000000064.800:89231): avc:  denied  { map_read map_write } for  pid=4292 comm="syz.5.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  538.478721][   T29] audit: type=1400 audit(2000000064.800:89232): avc:  denied  { prog_load } for  pid=4292 comm="syz.5.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  538.498024][   T29] audit: type=1400 audit(2000000064.800:89233): avc:  denied  { bpf } for  pid=4292 comm="syz.5.9520" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  538.519070][   T29] audit: type=1400 audit(2000000064.800:89234): avc:  denied  { mounton } for  pid=4292 comm="syz.5.9520" path="/440/file0" dev="tmpfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  538.542174][   T29] audit: type=1400 audit(2000000064.820:89235): avc:  denied  { write } for  pid=4291 comm="syz.3.9519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  538.563160][   T29] audit: type=1400 audit(2000000064.870:89236): avc:  denied  { prog_load } for  pid=4295 comm="syz.0.9521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  538.582734][   T29] audit: type=1400 audit(2000000064.870:89237): avc:  denied  { bpf } for  pid=4295 comm="syz.0.9521" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  538.603070][ T4300] audit: audit_backlog=65 > audit_backlog_limit=64
[  538.660950][ T4303] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  539.303105][ T4360] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  539.393311][ T4370] veth1_to_bridge: entered promiscuous mode
[  539.438703][ T4373] loop0: detected capacity change from 0 to 1024
[  539.451884][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.460354][ T4368] loop1: detected capacity change from 0 to 1024
[  539.464614][ T4373] EXT4-fs: Mount option(s) incompatible with ext3
[  539.475075][ T4368] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  539.489176][ T4368] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  539.491971][ T4370] bridge_slave_1 (unregistering): left allmulticast mode
[  539.504360][ T4370] bridge_slave_1 (unregistering): left promiscuous mode
[  539.509107][ T4368] EXT4-fs (loop1): orphan cleanup on readonly fs
[  539.511608][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.520037][ T4368] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.9546: Failed to acquire dquot type 0
[  539.537213][ T4368] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.9546: Failed to acquire dquot type 0
[  539.550468][ T4368] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.9546: Freeing blocks not in datazone - block = 0, count = 4096
[  539.565022][ T4368] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.9546: Failed to acquire dquot type 0
[  539.577373][ T4368] EXT4-fs (loop1): 1 orphan inode deleted
[  539.587896][ T4368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  539.628540][T32209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.802305][ T4494] __nla_validate_parse: 7 callbacks suppressed
[  540.802321][ T4494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9569'.
[  540.894587][ T4504] loop0: detected capacity change from 0 to 1024
[  540.907359][ T4505] atomic_op ffff8881200f9928 conn xmit_atomic 0000000000000000
[  540.927525][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9570'.
[  540.938573][ T4504] EXT4-fs: Mount option(s) incompatible with ext3
[  541.146026][ T4523] IPVS: Unknown mcast interface: veth1_to_bridge
[  541.156038][ T4523] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  541.675718][ T4557] atomic_op ffff8881196ed928 conn xmit_atomic 0000000000000000
[  541.687251][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9582'.
[  542.046775][ T4568] loop4: detected capacity change from 0 to 1024
[  542.066232][ T4571] netlink: 'syz.3.9588': attribute type 3 has an invalid length.
[  542.079885][ T4568] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  542.106754][ T4568] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  542.126556][ T4568] EXT4-fs (loop4): orphan cleanup on readonly fs
[  542.136622][ T4568] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.9586: Failed to acquire dquot type 0
[  542.153221][ T4568] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.9586: Failed to acquire dquot type 0
[  542.165979][ T4568] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.9586: Freeing blocks not in datazone - block = 0, count = 4096
[  542.195888][ T4568] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.9586: Failed to acquire dquot type 0
[  542.287263][ T4568] EXT4-fs (loop4): 1 orphan inode deleted
[  542.309855][ T4587] atomic_op ffff88812ce27528 conn xmit_atomic 0000000000000000
[  542.335538][ T4568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  542.361784][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9594'.
[  542.426170][T31952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.633033][ T4607] loop4: detected capacity change from 0 to 1024
[  542.644674][ T4607] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  542.674092][ T4607] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  542.683298][ T4607] EXT4-fs (loop4): orphan cleanup on readonly fs
[  542.700275][ T4620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9603'.
[  542.702183][ T4607] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.9600: Failed to acquire dquot type 0
[  542.779424][ T4607] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.9600: Failed to acquire dquot type 0
[  542.797856][ T4607] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.9600: Freeing blocks not in datazone - block = 0, count = 4096
[  542.818377][ T4607] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.9600: Failed to acquire dquot type 0
[  542.831431][ T4607] EXT4-fs (loop4): 1 orphan inode deleted
[  542.838430][ T4607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  542.908660][ T4639] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  542.916070][ T4636] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  542.937118][T31952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.186497][ T4661] netlink: 'syz.0.9612': attribute type 3 has an invalid length.
[  543.419246][   T29] kauditd_printk_skb: 2214 callbacks suppressed
[  543.419266][   T29] audit: type=1400 audit(2000000069.800:91432): avc:  denied  { mounton } for  pid=4682 comm="syz.0.9617" path="/259/file0" dev="tmpfs" ino=1426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  543.461806][   T29] audit: type=1400 audit(2000000069.810:91433): avc:  denied  { read write } for  pid=28318 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  543.486266][   T29] audit: type=1400 audit(2000000069.810:91434): avc:  denied  { open } for  pid=28318 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  543.511316][   T29] audit: type=1400 audit(2000000069.810:91435): avc:  denied  { ioctl } for  pid=28318 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  543.537570][   T29] audit: type=1400 audit(2000000069.840:91436): avc:  denied  { mount } for  pid=4682 comm="syz.0.9617" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  543.562458][   T29] audit: type=1400 audit(2000000069.860:91437): avc:  denied  { map_create } for  pid=4687 comm="syz.5.9619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  543.581867][   T29] audit: type=1400 audit(2000000069.860:91438): avc:  denied  { perfmon } for  pid=4687 comm="syz.5.9619" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  543.595968][ T4695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9620'.
[  543.603046][   T29] audit: type=1400 audit(2000000069.860:91439): avc:  denied  { map_read map_write } for  pid=4687 comm="syz.5.9619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  543.603074][   T29] audit: type=1400 audit(2000000069.860:91440): avc:  denied  { prog_load } for  pid=4687 comm="syz.5.9619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  543.651363][   T29] audit: type=1400 audit(2000000069.860:91441): avc:  denied  { bpf } for  pid=4687 comm="syz.5.9619" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  543.850829][ T4714] netlink: 'syz.5.9624': attribute type 3 has an invalid length.
[  544.045428][ T4732] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  544.107950][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9629'.
[  545.419627][ T4799] 9pnet_fd: Insufficient options for proto=fd
[  545.427189][ T4800] netlink: 'syz.3.9635': attribute type 3 has an invalid length.
[  545.521926][ T4807] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  545.555796][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9641'.
[  545.599092][ T4817] veth1_to_bridge: entered promiscuous mode
[  545.620538][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9642'.
[  545.634213][ T4822] veth1_to_bridge: entered promiscuous mode
[  545.646334][ T4817] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.662380][ T4822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9644'.
[  545.677933][ T4817] bridge_slave_1 (unregistering): left allmulticast mode
[  545.685420][ T4817] bridge_slave_1 (unregistering): left promiscuous mode
[  545.692586][ T4817] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.725220][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.741957][ T4822] bridge_slave_1 (unregistering): left allmulticast mode
[  545.749597][ T4822] bridge_slave_1 (unregistering): left promiscuous mode
[  545.756854][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.800463][ T4828] veth1_to_bridge: entered promiscuous mode
[  545.811577][ T4830] 9pnet_fd: Insufficient options for proto=fd
[  545.943248][ T4828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9647'.
[  546.016894][ T4846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9655'.
[  546.056753][ T4828] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.095184][ T4828] bridge_slave_1 (unregistering): left allmulticast mode
[  546.102486][ T4828] bridge_slave_1 (unregistering): left promiscuous mode
[  546.109681][ T4828] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.147563][ T4851] loop0: detected capacity change from 0 to 1024
[  546.169825][ T4855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9660'.
[  546.195013][ T4851] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  546.215692][ T4851] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  546.244820][ T4851] EXT4-fs (loop0): orphan cleanup on readonly fs
[  546.260839][ T4861] loop4: detected capacity change from 0 to 512
[  546.264117][ T4851] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.9658: Failed to acquire dquot type 0
[  546.289152][ T4851] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.9658: Failed to acquire dquot type 0
[  546.307102][ T4861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  546.335692][ T4851] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.9658: Freeing blocks not in datazone - block = 0, count = 4096
[  546.349900][ T4861] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  546.359109][ T4851] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.9658: Failed to acquire dquot type 0
[  546.395441][ T4851] EXT4-fs (loop0): 1 orphan inode deleted
[  546.405793][ T4851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  546.438407][ T4861] SELinux: failed to load policy
[  546.561227][ T4875] IPVS: Unknown mcast interface: veth1_to_bridge
[  546.579986][ T4875] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  546.609825][T31952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  546.690302][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  546.710507][ T4881] loop1: detected capacity change from 0 to 128
[  546.736496][ T4881] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  546.760006][ T4881] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  546.870676][ T4883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9670'.
[  546.968248][ T4903] loop5: detected capacity change from 0 to 512
[  547.002701][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9671'.
[  547.022840][ T4903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  547.047145][ T4910] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  547.085727][T32209] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  547.141922][ T4914] loop3: detected capacity change from 0 to 512
[  547.159763][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.173723][ T4914] msdos: Unknown parameter 'errorsA3emount-ro'
[  547.206808][ T4914] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  547.552473][ T4950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9698'.
[  547.625473][ T4958] loop1: detected capacity change from 0 to 128
[  547.966713][ T4985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9712'.
[  548.037575][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9716'.
[  548.046673][ T4992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9716'.
[  548.062000][ T4988] IPVS: Unknown mcast interface: veth1_to_bridge
[  548.074601][ T4988] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  548.080851][ T4994] loop5: detected capacity change from 0 to 512
[  548.101815][ T4994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  548.174909][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  548.203647][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9721'.
[  548.430253][   T29] kauditd_printk_skb: 3521 callbacks suppressed
[  548.430270][   T29] audit: type=1326 audit(2000000074.820:94957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.4.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447e8ceec9 code=0x7ffc0000
[  548.460460][   T29] audit: type=1326 audit(2000000074.820:94958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5010 comm="syz.4.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447e8ceec9 code=0x7ffc0000
[  548.485236][   T29] audit: type=1400 audit(2000000074.830:94959): avc:  denied  { read write } for  pid=32162 comm="syz-executor" name="loop0" dev="devtmpfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  548.509547][   T29] audit: type=1400 audit(2000000074.830:94960): avc:  denied  { open } for  pid=32162 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  548.510869][ T5025] loop0: detected capacity change from 0 to 1024
[  548.532997][   T29] audit: type=1400 audit(2000000074.830:94961): avc:  denied  { ioctl } for  pid=32162 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=2058 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  548.533041][   T29] audit: type=1400 audit(2000000074.850:94962): avc:  denied  { prog_load } for  pid=5024 comm="syz.0.9730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  548.584336][   T29] audit: type=1400 audit(2000000074.850:94963): avc:  denied  { bpf } for  pid=5024 comm="syz.0.9730" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  548.605380][   T29] audit: type=1400 audit(2000000074.850:94964): avc:  denied  { perfmon } for  pid=5024 comm="syz.0.9730" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  548.627283][   T29] audit: type=1400 audit(2000000074.850:94965): avc:  denied  { prog_run } for  pid=5024 comm="syz.0.9730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  548.646902][   T29] audit: type=1400 audit(2000000074.850:94966): avc:  denied  { map_create } for  pid=5024 comm="syz.0.9730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  548.682816][ T5025] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  548.715685][ T5033] netlink: 'syz.3.9734': attribute type 3 has an invalid length.
[  548.722404][ T5025] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  548.747499][ T5025] EXT4-fs (loop0): orphan cleanup on readonly fs
[  548.747718][ T5035] IPVS: Unknown mcast interface: veth1_to_bridge
[  548.781285][ T5025] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.9730: Failed to acquire dquot type 0
[  548.799277][ T5025] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.9730: Failed to acquire dquot type 0
[  548.818703][ T5025] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.9730: Freeing blocks not in datazone - block = 0, count = 4096
[  548.834684][ T5029] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  548.846261][ T5025] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.9730: Failed to acquire dquot type 0
[  548.852288][ T5041] loop5: detected capacity change from 0 to 512
[  548.868890][ T5025] EXT4-fs (loop0): 1 orphan inode deleted
[  548.875399][ T5025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  548.912478][ T5041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  548.928346][ T5041] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  548.990270][T32162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.021278][ T5041] SELinux: failed to load policy
[  549.197365][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.244551][ T5061] netlink: 'syz.3.9745': attribute type 3 has an invalid length.
[  549.527700][ T5082] 9pnet: Could not find request transport: fd0x0000000000000004
[  549.594342][ T5092] netlink: 'syz.5.9759': attribute type 3 has an invalid length.
[  549.739261][ T5110] loop1: detected capacity change from 0 to 512
[  549.763957][ T5113] FAULT_INJECTION: forcing a failure.
[  549.763957][ T5113] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  549.777607][ T5113] CPU: 0 UID: 0 PID: 5113 Comm: syz.4.9767 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  549.777686][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  549.777701][ T5113] Call Trace:
[  549.777710][ T5113]  <TASK>
[  549.777779][ T5113]  __dump_stack+0x1d/0x30
[  549.777870][ T5113]  dump_stack_lvl+0xe8/0x140
[  549.777889][ T5113]  dump_stack+0x15/0x1b
[  549.777910][ T5113]  should_fail_ex+0x265/0x280
[  549.777939][ T5113]  should_fail+0xb/0x20
[  549.777980][ T5113]  should_fail_usercopy+0x1a/0x20
[  549.778011][ T5113]  strncpy_from_user+0x25/0x230
[  549.778049][ T5113]  path_getxattrat+0xab/0x2a0
[  549.778084][ T5113]  __x64_sys_fgetxattr+0x59/0x70
[  549.778110][ T5113]  x64_sys_call+0x1ab3/0x3000
[  549.778138][ T5113]  do_syscall_64+0xd2/0x200
[  549.778239][ T5113]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  549.778269][ T5113]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  549.778463][ T5113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.778485][ T5113] RIP: 0033:0x7f447e8ceec9
[  549.778505][ T5113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  549.778529][ T5113] RSP: 002b:00007f447d337038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1
[  549.778553][ T5113] RAX: ffffffffffffffda RBX: 00007f447eb25fa0 RCX: 00007f447e8ceec9
[  549.778569][ T5113] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  549.778662][ T5113] RBP: 00007f447d337090 R08: 0000000000000000 R09: 0000000000000000
[  549.778678][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  549.778694][ T5113] R13: 00007f447eb26038 R14: 00007f447eb25fa0 R15: 00007ffdab84d138
[  549.778773][ T5113]  </TASK>
[  549.792912][ T5110] EXT4-fs warning (device loop1): ext4_xattr_inode_get:556: inode #11: comm syz.1.9765: EA inode hash validation failed
[  550.007244][ T5110] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.9765: corrupted inode contents
[  550.021861][ T5110] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #15: comm syz.1.9765: mark_inode_dirty error
[  550.041634][ T5110] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.9765: corrupted inode contents
[  550.064419][ T5110] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #15: comm syz.1.9765: mark_inode_dirty error
[  550.117149][ T5110] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #15: comm syz.1.9765: mark inode dirty (error -117)
[  550.161315][ T5110] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[  550.190138][ T5110] EXT4-fs (loop1): 1 orphan inode deleted
[  550.206759][ T5110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  550.315356][T32209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.412540][ T5156] 9pnet_fd: Insufficient options for proto=fd
[  550.616570][ T5176] netlink: 'syz.1.9780': attribute type 3 has an invalid length.
[  551.035724][ T5201] __nla_validate_parse: 6 callbacks suppressed
[  551.035743][ T5201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9785'.
[  551.140091][ T5212] 9pnet_fd: Insufficient options for proto=fd
[  551.290109][ T5227] netlink: 'syz.1.9791': attribute type 3 has an invalid length.
[  551.377861][ T5235] loop1: detected capacity change from 0 to 512
[  551.415468][ T5235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  551.428888][ T5235] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  551.460913][ T5240] veth1_to_bridge: entered promiscuous mode
[  551.574029][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9794'.
[  551.607397][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.627539][T32209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.638164][ T5240] bridge_slave_1 (unregistering): left allmulticast mode
[  551.645528][ T5240] bridge_slave_1 (unregistering): left promiscuous mode
[  551.652791][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.727735][ T5257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9797'.
[  551.814459][ T5263] loop5: detected capacity change from 0 to 1024
[  551.835877][ T5263] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  551.860641][ T5263] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  551.870452][ T5263] EXT4-fs (loop5): orphan cleanup on readonly fs
[  551.880524][ T5263] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.9799: Failed to acquire dquot type 0
[  551.895924][ T5263] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.9799: Failed to acquire dquot type 0
[  551.910259][ T5263] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.9799: Freeing blocks not in datazone - block = 0, count = 4096
[  551.931377][ T5263] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.9799: Failed to acquire dquot type 0
[  551.948690][ T5263] EXT4-fs (loop5): 1 orphan inode deleted
[  551.955352][ T5263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  551.993221][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  552.106359][ T5287] netlink: 'syz.1.9803': attribute type 3 has an invalid length.
[  552.209589][ T5299] loop5: detected capacity change from 0 to 512
[  552.235906][ T5298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9806'.
[  552.250962][ T5299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  552.267497][ T5299] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  552.485774][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  552.509563][ T5320] loop0: detected capacity change from 0 to 1764
[  552.668246][ T5338] netlink: 'syz.5.9816': attribute type 3 has an invalid length.
[  552.697244][ T5339] IPVS: Unknown mcast interface: veth1_to_bridge
[  552.712344][ T5339] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  552.777912][ T5349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9820'.
[  552.811016][ T5350] loop0: detected capacity change from 0 to 128
[  552.833193][ T5350] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  552.937739][ T5350] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  552.986308][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9822'.
[  553.085974][T32162] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  553.153580][ T5376] IPVS: Unknown mcast interface: veth1_to_bridge
[  553.163519][ T5376] syz0: rxe_newlink: already configured on bond_slave_0
[  553.171092][ T5375] netlink: 'syz.3.9828': attribute type 3 has an invalid length.
[  553.264470][ T5381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9831'.
[  553.401192][ T5392] loop3: detected capacity change from 0 to 1024
[  553.428697][ T5392] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  553.439190][   T29] kauditd_printk_skb: 3403 callbacks suppressed
[  553.439205][   T29] audit: type=1400 audit(2000000079.820:98349): avc:  denied  { ioctl } for  pid=28318 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  553.490408][ T5392] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  553.498477][ T5392] EXT4-fs (loop3): orphan cleanup on readonly fs
[  553.506241][   T29] audit: type=1400 audit(2000000079.860:98350): avc:  denied  { read write } for  pid=31952 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  553.531141][   T29] audit: type=1400 audit(2000000079.860:98351): avc:  denied  { open } for  pid=31952 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  553.556153][   T29] audit: type=1400 audit(2000000079.860:98352): avc:  denied  { ioctl } for  pid=31952 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  553.582242][   T29] audit: type=1400 audit(2000000079.860:98353): avc:  denied  { read write } for  pid=32209 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  553.606916][   T29] audit: type=1400 audit(2000000079.860:98354): avc:  denied  { open } for  pid=32209 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  553.631496][   T29] audit: type=1400 audit(2000000079.860:98355): avc:  denied  { ioctl } for  pid=32209 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  553.658419][   T29] audit: type=1400 audit(2000000079.880:98356): avc:  denied  { allowed } for  pid=5399 comm="syz.5.9836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  553.665176][ T5406] loop4: detected capacity change from 0 to 1024
[  553.678254][   T29] audit: type=1400 audit(2000000079.880:98357): avc:  denied  { create } for  pid=5399 comm="syz.5.9836" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  553.706619][   T29] audit: type=1400 audit(2000000079.880:98358): avc:  denied  { map } for  pid=5399 comm="syz.5.9836" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=123833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  553.708572][ T5405] loop5: detected capacity change from 0 to 128
[  553.746752][ T5406] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  553.761206][ T5406] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  553.773027][ T5406] EXT4-fs (loop4): orphan cleanup on readonly fs
[  553.780724][ T5405] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  553.795117][ T5405] ext4 filesystem being mounted at /541/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  553.796169][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9837'.
[  553.840017][ T5392] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9833: Failed to acquire dquot type 0
[  553.852463][ T5406] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.9838: Failed to acquire dquot type 0
[  553.867174][ T5392] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9833: Failed to acquire dquot type 0
[  553.870190][ T5406] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.9838: Failed to acquire dquot type 0
[  553.882726][ T5392] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.9833: Freeing blocks not in datazone - block = 0, count = 4096
[  553.905615][ T5392] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9833: Failed to acquire dquot type 0
[  553.908087][ T5406] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.9838: Freeing blocks not in datazone - block = 0, count = 4096
[  553.924940][ T5392] EXT4-fs (loop3): 1 orphan inode deleted
[  553.950290][ T5406] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.9838: Failed to acquire dquot type 0
[  553.951741][ T5392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  553.996539][T28318] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  554.016097][ T5406] EXT4-fs (loop4): 1 orphan inode deleted
[  554.026743][ T5406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  554.046705][T32452] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.101204][ T5428] netlink: 'syz.3.9841': attribute type 3 has an invalid length.
[  554.150509][ T5431] loop1: detected capacity change from 0 to 128
[  554.169010][T31952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.184811][ T5431] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  554.198892][ T5425] loop5: detected capacity change from 0 to 1024
[  554.230275][ T5438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9843'.
[  554.230599][ T5425] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  554.252117][ T5431] ext4 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  554.293823][ T5425] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  554.305767][ T5425] EXT4-fs (loop5): orphan cleanup on readonly fs
[  554.314085][ T5425] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.9840: Failed to acquire dquot type 0
[  554.328266][ T5425] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.9840: Failed to acquire dquot type 0
[  554.341586][ T5425] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.9840: Freeing blocks not in datazone - block = 0, count = 4096
[  554.360967][ T5425] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.9840: Failed to acquire dquot type 0
[  554.372609][ T5425] EXT4-fs (loop5): 1 orphan inode deleted
[  554.378977][ T5425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  554.400653][ T5444] loop4: detected capacity change from 0 to 128
[  554.422029][T28318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.434550][T32209] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  554.454489][ T5444] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  554.497369][ T5444] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  554.574878][ T5453] loop5: detected capacity change from 0 to 1024
[  554.627918][ T5453] EXT4-fs: Mount option(s) incompatible with ext3
[  554.750636][T31952] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  555.129899][ T5506] loop4: detected capacity change from 0 to 512
[  555.152355][ T5506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  555.166514][ T5506] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  555.235795][ T5506] SELinux: failed to load policy
[  555.307532][T31952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.663809][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9859'.
[  555.887342][ T5576] loop5: detected capacity change from 0 to 8192
[  556.026106][ T5576] ==================================================================
[  556.034420][ T5576] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs
[  556.041649][ T5576] 
[  556.043997][ T5576] write to 0xffff88813432c3d8 of 2 bytes by task 5590 on cpu 1:
[  556.051646][ T5576]  fat16_ent_put+0x28/0x60
[  556.056198][ T5576]  fat_alloc_clusters+0x4ce/0xa80
[  556.061434][ T5576]  fat_get_block+0x258/0x5e0
[  556.066242][ T5576]  __block_write_begin_int+0x400/0xf90
[  556.071817][ T5576]  cont_write_begin+0x5fc/0x970
[  556.076699][ T5576]  fat_write_begin+0x4f/0xe0
[  556.081392][ T5576]  generic_perform_write+0x181/0x490
[  556.087064][ T5576]  __generic_file_write_iter+0x9e/0x120
[  556.092673][ T5576]  generic_file_write_iter+0x8d/0x2f0
[  556.098168][ T5576]  do_iter_readv_writev+0x49e/0x540
[  556.103643][ T5576]  vfs_writev+0x2df/0x8b0
[  556.107996][ T5576]  __se_sys_pwritev2+0xfc/0x1c0
[  556.113003][ T5576]  __x64_sys_pwritev2+0x67/0x80
[  556.118214][ T5576]  x64_sys_call+0x2c59/0x3000
[  556.123038][ T5576]  do_syscall_64+0xd2/0x200
[  556.127575][ T5576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.133491][ T5576] 
[  556.135818][ T5576] read to 0xffff88813432c200 of 512 bytes by task 5576 on cpu 0:
[  556.143721][ T5576]  fat_mirror_bhs+0x1df/0x320
[  556.148455][ T5576]  fat_alloc_clusters+0x98b/0xa80
[  556.153611][ T5576]  fat_get_block+0x258/0x5e0
[  556.158233][ T5576]  __block_write_begin_int+0x400/0xf90
[  556.163797][ T5576]  cont_write_begin+0x5fc/0x970
[  556.168670][ T5576]  fat_write_begin+0x4f/0xe0
[  556.173274][ T5576]  cont_write_begin+0x1b0/0x970
[  556.178158][ T5576]  fat_write_begin+0x4f/0xe0
[  556.182871][ T5576]  generic_cont_expand_simple+0xad/0x150
[  556.188520][ T5576]  fat_cont_expand+0x3e/0x170
[  556.193222][ T5576]  fat_setattr+0x2a5/0x8a0
[  556.197840][ T5576]  notify_change+0x809/0x890
[  556.202546][ T5576]  do_ftruncate+0x34b/0x450
[  556.207151][ T5576]  __x64_sys_ftruncate+0x68/0xc0
[  556.212185][ T5576]  x64_sys_call+0x2d61/0x3000
[  556.217397][ T5576]  do_syscall_64+0xd2/0x200
[  556.221965][ T5576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.227970][ T5576] 
[  556.230310][ T5576] Reported by Kernel Concurrency Sanitizer on:
[  556.236593][ T5576] CPU: 0 UID: 0 PID: 5576 Comm: syz.5.9862 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  556.246605][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  556.256942][ T5576] ==================================================================
[  556.269846][ T5594] 9pnet_fd: Insufficient options for proto=fd
[  556.625468][T28318] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  556.633556][T28318] FAT-fs (loop5): Filesystem has been set read-only
[  556.848037][ T4637] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.913114][ T4637] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.962159][ T4637] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.021889][ T4637] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.097447][ T4637] bridge_slave_0: left allmulticast mode
[  557.103380][ T4637] bridge_slave_0: left promiscuous mode
[  557.109243][ T4637] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.201986][ T4637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  557.214045][ T4637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  557.224207][ T4637] bond0 (unregistering): Released all slaves
[  557.280496][ T4637] tipc: Left network mode
[  557.286436][ T4637] IPVS: stopping backup sync thread 4153 ...
[  557.332775][ T4637] hsr_slave_0: left promiscuous mode
[  557.340236][ T4637] hsr_slave_1: left promiscuous mode
[  557.346139][ T4637] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.353687][ T4637] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.364665][ T4637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.372288][ T4637] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.386865][ T4637] veth1_macvtap: left promiscuous mode
[  557.392935][ T4637] veth0_macvtap: left promiscuous mode
[  557.398506][ T4637] veth1_vlan: left promiscuous mode
[  557.405524][ T4637] veth0_vlan: left promiscuous mode