last executing test programs:

55.812210898s ago: executing program 3 (id=422):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xffffffffffff8001}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f00000008c0)={[{@noload}, {@nojournal_checksum}]}, 0x41, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=")
syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0)

54.205934547s ago: executing program 3 (id=430):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
unshare(0x22020400)
r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
unshare(0x2060280)
fsmount(r7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10)
r8 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="744fffe441c801627a9a8e583a55b40d00000200", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',k'])
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000007c0)={{<r10=>0x0, 0x8, 0x8e5, 0x1, 0x0, 0x8, 0x18, 0x1, 0x3ff, 0x7fff, 0x4, 0x7, 0x8000000000000001, 0x90, 0x1}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002740)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x6, "ca6aa738a874d6"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000003740)={r11, 0x0, "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", "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"})
r12 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r12, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_FREE_STREAMS(r12, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB])
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r13=>0x0, 0x4, 0x6, 0x9, 0x5, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0x26}, 0x8000, 0x7, 0x8, 0x200}})
r14 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0)
r15 = openat$incfs(0xffffffffffffffff, &(0x7f00000003c0)='.log\x00', 0x501000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x11, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @ldst={0x0, 0x2, 0x4, 0x1, 0x4, 0x20}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x822}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbd}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @map_val={0x18, 0x6, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x44, &(0x7f00000001c0)=""/68, 0x41100, 0x5, '\x00', r13, 0x25, r14, 0x8, &(0x7f0000000340)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r15], &(0x7f0000000440)=[{0x1, 0x5, 0x3, 0x2}, {0x5, 0x3, 0x4, 0x2}], 0x10, 0x8}, 0x94)

54.036926454s ago: executing program 3 (id=434):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d657461000000001400028008000140000000"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r2=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x18)
syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000", @ANYRESHEX=0x0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000040000000000000001000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800)

53.960935857s ago: executing program 3 (id=439):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
mknod(&(0x7f0000000100)='./file0\x00', 0x8000, 0xfff)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
rmdir(&(0x7f0000004340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000202070250000000000202020"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001800010000000000000000000a00000008000000e00000020c00088008000c00", @ANYRES32=r3, @ANYBLOB="aee4d40739d118981f26f7c2cd71803267603060c9f624546c6c8da49edde1b8cf5a153c7feafb21618b27f7db08e659fb780744997658efac3c9f49c6d253eb95f1bc5b8ced4859e8"], 0x28}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)

53.774152426s ago: executing program 3 (id=442):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000c80)='./file1\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0x2, 0x845, &(0x7f0000001a40)="$eJzs3U9oHOfZAPBnFMmSZeIvfN9HPmMcZ2znA5s6yq6UKBU5pNvVSJ5E2hW7q2JTQhJiOTWRk5AQ0pjS2JekLS2lpx7TXEMugRZaCi300PZUaA699BAI5NKSlhZKS2lR2dldW/9W8h9ZTtPfb/G+s+888877zo7n0aw0swEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARFKdLpXKSczltcXTaX/V6UZ9fov5vfZ+uqbYYr0RSftfjIzEgU7Vgf+9Ovvu9tPRONR5dShG2sVIXNx3912P/M/gQG/5LTp0o470nzW0+kUScSkiGYxYXl566RZ0ZBd948fdiZFrXuRvK+3n2ayWN+v5fGU2S/NmPZ2anCw9cGqmmc7kc1nzTLOVzafVRlZp1Rvp8eqJtDw1NZFmY2fqi7XZ6crcSK/y4fvHS6XJ9LGxhazSaNZrDzw21hyOfG4ur80WMeOlV6Md83B7R3w8b6WtrDKfpufOLy9NbNfVdlB5Tc3wmh3n0H13ffTKh38+v9TeIfs1knR3zPFyeXy8PPnQ1EMPl0qD46XxtRWldeJKRAwMRTviluy03F77Nqkb7O4xG2ZErPzXDh294eYMdPN/zEUetViM05FGGgPF89XHUFRjOhpRj/n2698MrZu/If///wN/+NVW612d/3tZ/sDV2QejyP+HO68O98v/G3qxA4/Bfq3W3u30ZnXdy/FaXIzn4ulYjuVYipfWL7Vn/RKbPK4l5qYfw51yYGdbnY0sapFHM5LIYz4qRU1a1NQjjamYjMkoxZNxKmaiGWnMRB5zkUUzzkQzWpEVe1Q1GpFFJVpRj0akcTyqcSLSKMdUTMVEpJHFWJyJeixGLWZjOipFK+fifLHdJ9b16+6vPvWjZ3/90Vvt6StB5S0GklyKiH0fRPxpi6AN6f468n87YqC7d+9KTmKXjGz7rq6duyPHbdgJK0X+H7zd3QAAAABuoaT49D2JiKG4p5iayeeyL97ubgEAAAA7qPi75kPtYqg9dU8k7fP/0iaR70cM73r3AAAAgB2QFNfYJRExGvd2pnqXS232IQAAAADwb6j4/f/hdjEa8XpR4fwfAAAAPmW+1u8e+x/uKe6xOxrNheHkJ3+MRmMoubxw+r7kQqUdV7lwR2e5bvGFKy22Zg4m+7uNFMXk4MV9SUQMVrNDSe/ul//oXkvwcfvpnysrK73F+93rP+l0IOJAbNqB2LoDxav4ZhzpxBw52ynP9uZ01jI6k89lY9X63CPlpPvhSOuV589/OYrhf702vz+Jc+eXl8aeeWH5bLExLrdbuXyhe3v4pLdUROeCii36stK7muKezUc8VFyI0V3vaGe9pdVvQPdusgNbjz9Zvc434mgn5uhopxxdO/6R9jrLY4+Uo1LZP9DKTrdeWVk1+m4vyldHPtwbbXId78IbcawTc+z4sU6xSS/G1/Ti+Y29GF+9/a9tW1xzL9468vrpv/y8nmQT2/Vi4iZ7AXC7nCvu+nM1C+0tstDfVzraCW1d4t/bS1vXc5Q7d/WnjL3d6FW5bjB62f3KWtIbye5vxPFOzPGDxYF18OAmeaW0yRH9xfMv/qJ7RH/wne9+74nDv3xvXV6PuLT/GnvxTpzoxHSL+O+f9cmx7TF/a11Wfbu9xNsX+mXV5tx48urwxFASl4rXF+8/f+HpZ5eeXXp+fHxisvRgqfTQeAwVPyp0iz49lXkA/rNt9x07733lSmi/b+FJHtzmrDoZ7P1JwVg8Ey/EcpyNk8XVBhFx7+atjq76M4ST25y1jsb3f9CZUY6T25xbXm13fH3s8LEk+sROrNpi//edovjrrXg3AGB3HN0mDydxV+e2P6/e2V1iXcQdSXJy9Xn3lyLiYL+c287lJ4ovzr1ydhz9Ystr+vm7bvnZ3dgoAPAplzU+TkZbbyaNRr7wZHlqqlxpncrSRr36eNrIp2ezNK+1skb1VKU2m6ULjXqrXu19dDydNdPm4sJCvdFKZ+qNdKHezE8X3/yedr/6vZnNV2qtvNpcmMsqzSyt1mutSrWVTufNarqw+Pm5vHkqaxQLNxeyaj6TVyutvF5Lm/XFRjUbS3u/Y+gG5tNZrZXP5NlQmtfShUY+X2lcbs9enM/S6axZbeQLrXqnwd668trM/sZ80ezYxuH/fje3NQB8Urz82sXnnl5eXnrpxiZ+ey3Bt3uMAMBasjQAAAAAAAAAAAAAAHzybbxcr117XRcCDsUNXz748nC0J/be6OLtiSe6I7mJqxi3mBiMHW5w64nPvNsZzE40uLGdoV7Nndtd97m3eE8vd2v2dDfxLm2EnZx46tFHn7t4OSKKmmTwyuZtb4vXD5z6IIve6LZoZ8P/lD199vl4c3/Enh9+u1PzuU1i7oh2N3Z4pO/3Bnh9i68kW/zH39XDEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABck38FAAD//6cCQ0U=")
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[], 0xff2e)
read(r3, &(0x7f0000000600)=""/216, 0xd8)
write$binfmt_script(r3, 0x0, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x190da)

52.801712768s ago: executing program 3 (id=449):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
listxattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)=""/184, 0xb8)
close(0x4)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)

52.76057875s ago: executing program 32 (id=449):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
listxattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)=""/184, 0xb8)
close(0x4)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)

13.766660565s ago: executing program 2 (id=897):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f00000007c0), 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/171, 0xab}, {&(0x7f0000000a00)=""/239, 0xef}, {&(0x7f0000000900)=""/47, 0x2f}, {&(0x7f0000000b00)=""/234, 0xea}], 0x4}}, {{&(0x7f0000000c00)=@can, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000980)=""/11, 0xb}, {&(0x7f0000006480)=""/4100, 0x1004}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/124, 0x7c}, {&(0x7f0000000d00)=""/80, 0x50}, {&(0x7f0000000d80)=""/80, 0x50}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/4096, 0x1000}], 0x8, &(0x7f0000001d80)=""/223, 0xdf}, 0x10001}, {{&(0x7f0000001300)=@nfc, 0x80, &(0x7f0000001540)=[{&(0x7f0000001380)=""/160, 0xa0}, {&(0x7f0000001440)=""/233, 0xe9}], 0x2, &(0x7f0000001b40)=""/137, 0x89}, 0x3}], 0x5, 0xa002, 0x0)

12.860642474s ago: executing program 2 (id=916):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/269], 0x2, 0x6b1, &(0x7f0000001100)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000003010102000000000000000002000009100001800c00828004000100060000000c0019800800010008010000"], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1)
socket(0x10, 0x3, 0x0)
gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@local, @private, <r5=>0x0}, &(0x7f0000000380)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', r5, 0x8000, 0x1, 0x7, 0xfffffff2, {{0x1e, 0x4, 0x0, 0x6, 0x78, 0x66, 0x0, 0x10, 0x2f, 0x0, @remote, @local, {[@cipso={0x86, 0x23, 0x3, [{0x5, 0xd, "4df91b7480df5fb5549fa3"}, {0x1, 0x3, "05"}, {0x2, 0xd, "21efcc2fea5078964756b7"}]}, @timestamp={0x44, 0x1c, 0x1f, 0x0, 0x1, [0x7f, 0x28, 0x80000000, 0x40, 0x3ff, 0x7]}, @noop, @noop, @noop, @timestamp={0x44, 0x20, 0x67, 0x0, 0x5, [0x0, 0xff, 0x80000000, 0x7fff, 0x0, 0x32, 0xae9]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x2}, {0x2, 0x1, 0xfff7fffc, 0x2}], 0x10, 0xfffffffe}, 0x94)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x42, 0x0, 0x10000}}}}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x3}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xfffffffffffffed0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[], 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ustat(0x10, &(0x7f0000000080))

12.304483058s ago: executing program 2 (id=922):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c000100"], 0x44}}, 0x0)

12.26116772s ago: executing program 2 (id=924):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x2, 0x0, &(0x7f00000000c0))
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50)

12.225829052s ago: executing program 2 (id=925):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000140))
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0xea)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)

12.123163056s ago: executing program 2 (id=926):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f00000007c0), 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/171, 0xab}, {&(0x7f0000000a00)=""/239, 0xef}, {&(0x7f0000000900)=""/47, 0x2f}, {&(0x7f0000000b00)=""/234, 0xea}], 0x4}}, {{&(0x7f0000000c00)=@can, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000980)=""/11, 0xb}, {&(0x7f0000006480)=""/4100, 0x1004}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/124, 0x7c}, {&(0x7f0000000d00)=""/80, 0x50}, {&(0x7f0000000d80)=""/80, 0x50}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/4096, 0x1000}], 0x8, &(0x7f0000001d80)=""/223, 0xdf}, 0x10001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=""/233, 0xe9}, 0x4}, {{&(0x7f0000001300)=@nfc, 0x80, &(0x7f0000001540)=[{&(0x7f0000001380)=""/160, 0xa0}, {&(0x7f0000001440)=""/233, 0xe9}], 0x2, &(0x7f0000001b40)=""/137, 0x89}, 0x3}], 0x6, 0xa002, 0x0)

2.696273583s ago: executing program 0 (id=1010):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = timerfd_create(0x7, 0x0)
timerfd_settime(r6, 0x0, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94f2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES64=r9, @ANYRES16=r10, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}, 0x1, 0x0, 0x0, 0x80095}, 0x200c8c4)

2.587323898s ago: executing program 0 (id=1012):
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000310018000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf3, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
r7 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
shmctl$IPC_RMID(r7, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setlease(r8, 0x400, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)

1.771633763s ago: executing program 4 (id=1015):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400100000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = dup(r2)
sendto$inet6(r3, &(0x7f00000001c0)="5471aa152ae96484b712016f1ba48b5f637cec", 0x13, 0x4000015, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})

1.623188349s ago: executing program 4 (id=1017):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x2, 0x0, &(0x7f00000000c0))
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50)

1.533194814s ago: executing program 0 (id=1018):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='rss_stat\x00', r1}, 0x18)
setsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkEINrYkQomAMHg2Jd+PRxL/Ak16MejLxqndDQgwXkdOa2Z1hf3S3tMu2g+znkwx9b+YN7333zdt9M283gL41lv2TROyMiD8iYqSWbS4wVvtz4/qF2X+vX5hNolJ59++kWu6f6xdmi6LFeTvyzHgakX6exP429S6dO39qZmFh/myen1w+/eHk0rnzL5w8PXNi/sT8memjR48cnnr5pekXV558c/1x3p+1dd8niwf2vvnelbdnj115/5fvBor4W+LokbHVDj5dqfS4unLtakgngyU2hHXJxkDWXUPV8T8SA1HvvJF447NSGwdsqEquw+GLFeAelkTZLQDKUXzQZ/e/xbZ5s4/yXXu1dgOUxX0j32pHBiPNywy13N/20lhEHLt48+tsi415DgEA0OSHbP7zfLv5XxoPNZS7L18bGs3XUnZHxAMRsSciHoyoln04Ih5ZZ/2tiyQr5z/p1a4CW6Ns/vdKvrbVPP8rZn8xOpDndlXjH0qOn1yYP5S/JuMxtDXLT61Sx4+v//5lp2ON879sy+ov5oJ5O64Obm0+Z25meeZOYm507VLEvsF28Se3VgKSiNgbEfu6rOPks98e6HTs9vGvogfrTJVvIp6p9f/FaIm/kKy+Pjm5LRbmD00WV8VKv/52+Z1O9d9R/D2Q9f/2ttf/rfhHk8b12qX113H5zy863tNMdHX913dsyf9+PLO8fHYqYkvyVq3Rjfun6+cW+aJ8Fv/4wfbjf3fUX4n9EZFdxI9GxGMR8Xjed09ExJMRcbAlrsb7659fe+qDTvHfDf0/19L/o81FWvq/ntgSrXvaJwZO/fR98/9YT67t/e9INTWe71nL+99a2tXd1QwAAAD/P2lE7IwknbiVHk4nJmrf4d8T29OFxaXl544vfnRmrvYbgdEYSosnXSMNz0On8tv60Uu1/HSRz48fzp8bfzUwXM1PzC4uzJUdPPS5HSvGf1od/5m/BspuHbDh/F4L+lfD+E/KbAew+Xz+Q/8y/qF/tRn/w2W0A9h87T7/Py2hHcDmaxn/lv2gj7j/h/5l/EP/ahz/vgAAfWNpOG7/I/l2iW3RzVkS90wi0ruiGb1JJF2OgrUmdpYd4PoTZb8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9MZ/AQAA//8L+fEo")

1.532304924s ago: executing program 0 (id=1019):
r0 = syz_open_procfs(0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18efffffffffe04b00000000000088d924d8dac4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c86e517171f2544d87aa028cf4a10f16b07ca0d6f5916a9c9a594e83afa3227c28ce1e34ff8b25f5ec8a30898dc5e77a9f7b34369a06d00664f4bd076e0b4872606246da5da9235c24f878db55dd5e6b76fa2fd201485e7c659daeb48d2d1d17ce6b14c4f2c0f93571f397162e3531899c1077ad6a90f737047949b31b0b54638f4937654e0d94381ef7057005e554471758fafbd3b0f380e6e5bbdfa0c48440e0491cb07461ddd", @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x64044000}, 0x40040c0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_')
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x2}, 0x18)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140"], 0x118}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000085000000070000001801000020756c2500000000002020207b1af8fefffffff5bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13, @ANYRESDEC=r12, @ANYRES16=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r13 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e99"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r8, 0x2, 0x0, 0x80000003, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r10, @ANYRESHEX=r14, @ANYBLOB="30000000eb4b1e9991d6", @ANYRESDEC=r5, @ANYRES8, @ANYRES64, @ANYRES16=r11, @ANYRES8=r10, @ANYRES16=r5], 0x20)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x2}, 0x8)

1.524841004s ago: executing program 4 (id=1020):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
unshare(0x22020400)
r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
unshare(0x2060280)
fsmount(r7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10)
r8 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="744fffe441c801627a9a8e583a55b40d00000200", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',k'])
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000007c0)={{<r10=>0x0, 0x8, 0x8e5, 0x1, 0x0, 0x8, 0x18, 0x1, 0x3ff, 0x7fff, 0x4, 0x7, 0x8000000000000001, 0x90, 0x1}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002740)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x6, "ca6aa738a874d6"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000003740)={r11, 0x0, "e7416323c0a2530733d82030f8fb56ff588b90e8defa7cfee9e17a848450b92d717a655f9506f79c499de2e2a5c6da94b8d892fe514453cf493376c317b4fdeac35b7020a8b6e1ffb0e4e5ff447a66930d6b8947be006d42e56acc79f1df96089a3695e919c3986c84b4b2ce943418cc50fff4fa58e63ce860f9f5c9ac888db50f29278a4d9d9216dc5b350d13dca911c49335a9f817c7d21153c105233d92dadc31f1acd20e623c91f57eea24f7973b060903c690a4465cb4f9eeaf2197abc33801507e20b68656cae6d48fbc85b9f2972c51bba47306ec536828daca5ad93094c4f4d40cb513e9442699cc91efa9c4d78e52dd02df69d1e53a8cd082472697", "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"})
r12 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r12, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_FREE_STREAMS(r12, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="a61700000400000081015608"])
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r13=>0x0, 0x4, 0x6, 0x9, 0x5, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0x26}, 0x8000, 0x7, 0x8, 0x200}})
r14 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0)
r15 = openat$incfs(0xffffffffffffffff, &(0x7f00000003c0)='.log\x00', 0x501000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f00000000c0)=@raw=[@ldst={0x0, 0x2, 0x4, 0x1, 0x4, 0x20}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x822}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbd}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @map_val={0x18, 0x6, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x44, &(0x7f00000001c0)=""/68, 0x41100, 0x5, '\x00', r13, 0x25, r14, 0x8, &(0x7f0000000340)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r15], &(0x7f0000000440)=[{0x1, 0x5, 0x3, 0x2}, {0x5, 0x3, 0x4, 0x2}], 0x10, 0x8}, 0x94)

1.456844957s ago: executing program 4 (id=1021):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0xf6, 0x21cf9, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6})
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000400009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r6}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r7, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x70, 0x100000}, 0x20)

1.439822278s ago: executing program 5 (id=1022):
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000310018000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf3, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f000000b4c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
r8 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
shmctl$IPC_RMID(r8, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setlease(r9, 0x400, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)

1.418377279s ago: executing program 0 (id=1023):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='mm_page_free\x00', r0, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006585, 0x400, 0x2, 0x200118}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000580)=0x7ffffffc, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r6, 0x0, 0x0, 0x0, 0x100})
io_uring_enter(r3, 0x8aa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000006c0)={0xfffffffffffffff7, r6, 0x2, {0x27fffffffffffff, 0x4}, 0x54}, 0x1)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x8, 0x328})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x8005, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x5, 0x5}, 0x14)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50)
io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x10, 0x2, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc005}, 0x0)

1.38097311s ago: executing program 4 (id=1024):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89e0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$tun(r3, &(0x7f0000000380)={@void, @val={0x4, 0x1, 0x0, 0xd2ad, 0x3, 0x8}, @ipv6=@gre_packet={0x0, 0x6, "02fb98", 0x20a, 0x2f, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x16, 0x6, 0x2, 0xfa, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x39}]}, @dstopts={0x29, 0x1, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x800}]}, @srh={0x3a, 0xa, 0x4, 0x5, 0x5, 0x0, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x2e, 0x7, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x0, [0x9689, 0xa]}}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x200}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x17, 0x1, [0x9], "08e80fab988a234de35e6f110c2ddee9d35565750cb881"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x5], "d43a268ebaec92f6dda7a2e28fbd59"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x80d, 0x1], "e7b6f38f62f6e61b6a00f15672f950045213b950493d8fa33ff443e0b69050b77b3b434cb7f8e91c13414ac88a491b0524"}, {0x8, 0x88be, 0x3, {{0x1, 0x1, 0x8a, 0x2, 0x0, 0x2, 0x7, 0x3}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x7, 0xa5}, 0x2, {0x7, 0x2, 0x2, 0x2, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "ecb50d13e6369f8f2c0abcbad4977e52c230440f275f3fe287ac73f1348893c59e997417bb0ba4e94115116808ebed54572fb2aa65378a49483a2cee0103ae06bf010b4fefdd5c4c388019b734e8ae51d3c74423fd485537d2a48cf0fac114073aa939ba919bf4bbf84c82546eff8dff45ab339e14ebcb"}}}}}, 0x23c)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000640)='cpuacct.usage_all\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}})
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r10}, 0x10)
io_uring_enter(r7, 0x29ab, 0xd480, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x10000000, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)

1.064249223s ago: executing program 1 (id=1027):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x19, 0x17, 0x34, &(0x7f00000010c0)})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
brk(0x5)

955.207678ms ago: executing program 5 (id=1028):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

911.47214ms ago: executing program 5 (id=1029):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x2007ffc)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x5, 0xfffe, 0x3f00, 0x0, 0x40, 0x0}) (fail_nth: 3)

468.91286ms ago: executing program 5 (id=1030):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)

467.81777ms ago: executing program 4 (id=1031):
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f0000000700)=@llc={0x1a, 0x306, 0x7, 0x40, 0x9, 0x8b, @remote}, 0x80, 0x0}}], 0x1, 0xc88c4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x20, 0x0, 0x7ffc0002}]})
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0xffffffffffffff19)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r4)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r4, 0x40085507, &(0x7f0000000100)=0x1d)

435.399721ms ago: executing program 0 (id=1032):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setresuid(0xee01, 0xee01, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040), 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
setreuid(0xee01, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000001c0)={0x0, 0x0, 0xfffffff9})
ioctl$MON_IOCX_GETX(r1, 0x80089203, 0x0)
syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r1, &(0x7f0000000140)=""/116, 0x74, 0x400)

185.801021ms ago: executing program 1 (id=1033):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})

134.493824ms ago: executing program 5 (id=1034):
r0 = syz_open_procfs(0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18efffffffffe04b00000000000088d924d8dac4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c86e517171f2544d87aa028cf4a10f16b07ca0d6f5916a9c9a594e83afa3227c28ce1e34ff8b25f5ec8a30898dc5e77a9f7b34369a06d00664f4bd076e0b4872606246da5da9235c24f878db55dd5e6b76fa2fd201485e7c659daeb48d2d1d17ce6b14c4f2c0f93571f397162e3531899c1077ad6a90f737047949b31b0b54638f4937654e0d94381ef7057005e554471758fafbd3b0f380e6e5bbdfa0c48440e0491cb07461ddd", @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x64044000}, 0x40040c0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_')
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x2}, 0x18)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000085000000070000001801000020756c2500000000002020207b1af8fefffffff5bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9", @ANYRESDEC=r12, @ANYRES16=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r13 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e99"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r8, 0x2, 0x0, 0x80000003, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r10, @ANYRESHEX=r14, @ANYBLOB="30000000eb4b1e9991d6", @ANYRESDEC=r5, @ANYRES8, @ANYRES64, @ANYRES16=r11, @ANYRES8=r10, @ANYRES16=r5], 0x20)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x2}, 0x8)

133.230464ms ago: executing program 1 (id=1035):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = timerfd_create(0x7, 0x0)
timerfd_settime(r6, 0x0, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94f2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES64=r9, @ANYRES16=r10, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}, 0x1, 0x0, 0x0, 0x80095}, 0x200c8c4)

104.886135ms ago: executing program 5 (id=1036):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063012f00000000009500000000dd0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0xfffffffc, 0x8, 0x8, 0x208, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2)
flock(r4, 0x2)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x60}}, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000)
gettid()

87.678516ms ago: executing program 1 (id=1037):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x82000, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

71.530606ms ago: executing program 1 (id=1038):
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=1039):
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000310018000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf3, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f000000b4c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
r8 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil)
shmctl$IPC_RMID(r8, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setlease(r9, 0x400, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)

kernel console output (not intermixed with test programs):

3] EXT4-fs (loop2): Could not load journal inode
[   78.751560][ T5218] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[   78.764226][ T5218] loop2: detected capacity change from 0 to 512
[   78.861144][ T5218] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   78.869127][ T5218] EXT4-fs (loop2): orphan cleanup on readonly fs
[   78.877300][ T5218] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.524: corrupted inode contents
[   78.889214][ T5218] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.524: mark_inode_dirty error
[   78.889520][ T5232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.527'.
[   78.900691][ T5218] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.524: corrupted inode contents
[   78.922934][ T5218] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.524: mark_inode_dirty error
[   78.936731][ T5218] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.524: corrupted inode contents
[   78.966985][ T5218] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[   78.975719][ T5218] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.524: corrupted inode contents
[   78.987660][ T5218] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.524: mark_inode_dirty error
[   78.998712][ T5218] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[   79.008017][ T5218] EXT4-fs (loop2): 1 truncate cleaned up
[   79.040337][   T42] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1
[   79.080422][ T5218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.095329][ T5234] loop5: detected capacity change from 0 to 128
[   79.156047][   T42] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.171610][   T42] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.182265][ T5234] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.198795][   T42] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.306294][ T5234] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   79.349142][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.358227][   T42] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.542412][ T5247] netlink: 332 bytes leftover after parsing attributes in process `syz.1.532'.
[   79.817100][ T4947] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.855230][ T5259] loop5: detected capacity change from 0 to 764
[   79.922056][ T5262] loop1: detected capacity change from 0 to 1024
[   79.950754][ T5263] netlink: 88 bytes leftover after parsing attributes in process `syz.4.535'.
[   79.963226][ T5262] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   79.974164][ T5262] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   79.989351][ T5262] JBD2: no valid journal superblock found
[   79.995118][ T5262] EXT4-fs (loop1): Could not load journal inode
[   80.052512][ T5262] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[   80.069363][ T5262] loop1: detected capacity change from 0 to 512
[   80.175220][   T29] kauditd_printk_skb: 326 callbacks suppressed
[   80.175234][   T29] audit: type=1326 audit(1763675626.137:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5265 comm="syz.0.537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa1ed2f749 code=0x0
[   80.233145][ T5259] 9pnet: Could not find request transport: r
[   80.243637][ T5262] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   80.251788][ T5262] EXT4-fs (loop1): orphan cleanup on readonly fs
[   80.261122][ T5270] netlink: 56 bytes leftover after parsing attributes in process `syz.0.537'.
[   80.276956][ T5262] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.533: corrupted inode contents
[   80.289350][ T5262] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.533: mark_inode_dirty error
[   80.301041][ T5262] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.533: corrupted inode contents
[   80.313236][ T5262] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.533: mark_inode_dirty error
[   80.324883][ T5262] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.533: corrupted inode contents
[   80.338196][ T5262] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   80.347054][ T5262] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.533: corrupted inode contents
[   80.360079][ T5262] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.533: mark_inode_dirty error
[   80.363669][   T29] audit: type=1400 audit(1763675626.317:6048): avc:  denied  { setopt } for  pid=5265 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   80.371416][ T5262] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[   80.371757][ T5262] EXT4-fs (loop1): 1 truncate cleaned up
[   80.405223][  T296] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   80.415713][  T296] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 1
[   80.431601][ T5262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   80.489947][   T29] audit: type=1400 audit(1763675626.447:6049): avc:  denied  { getopt } for  pid=5279 comm="syz.5.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   80.626845][ T5284] loop5: detected capacity change from 0 to 512
[   80.636072][ T5284] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   80.647038][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.658169][ T5284] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.542: invalid indirect mapped block 4294967295 (level 0)
[   80.673051][ T5284] EXT4-fs (loop5): Remounting filesystem read-only
[   80.680903][ T5284] EXT4-fs (loop5): 1 orphan inode deleted
[   80.686654][ T5284] EXT4-fs (loop5): 1 truncate cleaned up
[   80.692920][ T5284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.720458][ T4947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.730913][ T5288] loop1: detected capacity change from 0 to 1024
[   80.742882][   T29] audit: type=1400 audit(1763675626.697:6050): avc:  denied  { mounton } for  pid=5287 comm="syz.1.543" path="/116/file1" dev="tmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   80.749749][ T5288] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   80.781358][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.5.544'.
[   80.790350][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.544'.
[   80.810443][ T5288] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   80.825120][ T5288] EXT4-fs (loop1): orphan cleanup on readonly fs
[   80.837153][   T29] audit: type=1326 audit(1763675626.797:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5298 comm="syz.5.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   80.862865][ T5288] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.543: Freeing blocks not in datazone - block = 0, count = 4096
[   80.903020][   T29] audit: type=1326 audit(1763675626.827:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5298 comm="syz.5.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   80.926431][   T29] audit: type=1326 audit(1763675626.827:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5298 comm="syz.5.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   80.949728][   T29] audit: type=1326 audit(1763675626.827:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5298 comm="syz.5.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   80.973060][   T29] audit: type=1326 audit(1763675626.827:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5298 comm="syz.5.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   80.974039][ T5288] EXT4-fs (loop1): 1 orphan inode deleted
[   81.020597][ T5288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   81.051233][ T5288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.068394][ T5303] tipc: Started in network mode
[   81.073300][ T5303] tipc: Node identity 46620b995c38, cluster identity 4711
[   81.080454][ T5303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.101422][ T5303] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   81.110598][ T5303] tipc: Resetting bearer <eth:syzkaller0>
[   81.120967][ T5301] tipc: Disabling bearer <eth:syzkaller0>
[   81.459986][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'.
[   81.631820][ T5311] xt_CT: You must specify a L4 protocol and not use inversions on it
[   81.696026][ T5325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.556'.
[   81.705082][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'.
[   81.844866][ T5322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.853826][ T5322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.542936][ T5354] hsr_slave_0: left promiscuous mode
[   82.548573][ T5354] hsr_slave_1: left promiscuous mode
[   82.596572][ T5357] loop1: detected capacity change from 0 to 1024
[   83.089712][ T5373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.100484][ T5373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.130316][ T5390] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   83.139793][ T5390] block device autoloading is deprecated and will be removed.
[   83.743026][ T5410] __nla_validate_parse: 7 callbacks suppressed
[   83.743040][ T5410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.581'.
[   83.758109][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'.
[   83.801331][ T5417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.583'.
[   83.802582][ T5414] loop1: detected capacity change from 0 to 1024
[   83.832657][ T5414] EXT4-fs: Ignoring removed orlov option
[   83.841975][ T5420] netlink: 'syz.2.585': attribute type 1 has an invalid length.
[   83.862579][ T5414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.901332][ T5428] netlink: 'syz.5.589': attribute type 4 has an invalid length.
[   83.909098][ T5428] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.589'.
[   84.029322][ T5437] xt_CT: You must specify a L4 protocol and not use inversions on it
[   84.044925][ T5438] xt_CT: You must specify a L4 protocol and not use inversions on it
[   84.061958][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'.
[   84.111832][ T5440] FAULT_INJECTION: forcing a failure.
[   84.111832][ T5440] name failslab, interval 1, probability 0, space 0, times 0
[   84.124581][ T5440] CPU: 1 UID: 0 PID: 5440 Comm: syz.2.594 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   84.124604][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   84.124614][ T5440] Call Trace:
[   84.124619][ T5440]  <TASK>
[   84.124626][ T5440]  __dump_stack+0x1d/0x30
[   84.124704][ T5440]  dump_stack_lvl+0xe8/0x140
[   84.124721][ T5440]  dump_stack+0x15/0x1b
[   84.124735][ T5440]  should_fail_ex+0x265/0x280
[   84.124770][ T5440]  should_failslab+0x8c/0xb0
[   84.124829][ T5440]  kmem_cache_alloc_noprof+0x50/0x480
[   84.124878][ T5440]  ? audit_log_start+0x342/0x720
[   84.124895][ T5440]  audit_log_start+0x342/0x720
[   84.124927][ T5440]  ? kstrtouint+0x76/0xc0
[   84.125021][ T5440]  audit_seccomp+0x48/0x100
[   84.125045][ T5440]  ? __seccomp_filter+0x82d/0x1250
[   84.125068][ T5440]  __seccomp_filter+0x83e/0x1250
[   84.125149][ T5440]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   84.125194][ T5440]  ? vfs_write+0x7e8/0x960
[   84.125215][ T5440]  ? __rcu_read_unlock+0x4f/0x70
[   84.125236][ T5440]  ? __fget_files+0x184/0x1c0
[   84.125281][ T5440]  __secure_computing+0x82/0x150
[   84.125308][ T5440]  syscall_trace_enter+0xcf/0x1e0
[   84.125335][ T5440]  do_syscall_64+0xac/0x200
[   84.125383][ T5440]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   84.125499][ T5440]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   84.125557][ T5440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.125575][ T5440] RIP: 0033:0x7fbf548cf749
[   84.125590][ T5440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.125605][ T5440] RSP: 002b:00007fbf5332f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[   84.125688][ T5440] RAX: ffffffffffffffda RBX: 00007fbf54b25fa0 RCX: 00007fbf548cf749
[   84.125699][ T5440] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000004
[   84.125708][ T5440] RBP: 00007fbf5332f090 R08: 0000000000000101 R09: 0000000000000000
[   84.125719][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.125730][ T5440] R13: 00007fbf54b26038 R14: 00007fbf54b25fa0 R15: 00007fff0b4c6428
[   84.125753][ T5440]  </TASK>
[   84.159227][ T5432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.164893][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'.
[   84.169355][ T5432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.396645][ T5447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.595'.
[   84.405616][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'.
[   84.425226][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.465180][ T5452] loop1: detected capacity change from 0 to 2048
[   84.493260][ T5454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'.
[   84.507995][ T5452] EXT4-fs: Ignoring removed bh option
[   84.522884][ T5452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.574850][ T5452] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   84.590635][ T5452] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   84.602872][ T5452] EXT4-fs (loop1): This should not happen!! Data will be lost
[   84.602872][ T5452] 
[   84.612541][ T5452] EXT4-fs (loop1): Total free blocks count 0
[   84.618510][ T5452] EXT4-fs (loop1): Free/Dirty block details
[   84.620104][ T5462] ------------[ cut here ]------------
[   84.624547][ T5452] EXT4-fs (loop1): free_blocks=2415919104
[   84.629925][ T5462] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[   84.635672][ T5452] EXT4-fs (loop1): dirty_blocks=16
[   84.660359][ T5462] WARNING: CPU: 1 PID: 5462 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680
[   84.665284][ T5452] EXT4-fs (loop1): Block reservation details
[   84.675603][ T5462] Modules linked in:
[   84.681561][ T5452] EXT4-fs (loop1): i_reserved_data_blocks=1
[   84.685424][ T5462] CPU: 1 UID: 0 PID: 5462 Comm: syz.2.601 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   84.700950][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   84.711208][ T5462] RIP: 0010:reg_bounds_sanity_check+0x673/0x680
[   84.717544][ T5462] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 12 f7 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[   84.737213][ T5462] RSP: 0018:ffffc9001313b408 EFLAGS: 00010282
[   84.743374][ T5462] RAX: 41bd768e94ee9200 RBX: ffff88811ae30270 RCX: ffff88810c8dd280
[   84.751397][ T5462] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[   84.759382][ T5462] RBP: 00000000ffffdfcc R08: 0001ffff86a2401f R09: 0000000000000000
[   84.767476][ T5462] R10: ffffffff88e99940 R11: ffffffff8222a2c0 R12: ffff88811ae30230
[   84.775714][ T5462] R13: ffff88810b878000 R14: ffff88810b878000 R15: ffff88811ae30268
[   84.784071][ T5462] FS:  00007fbf5330e6c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000
[   84.793170][ T5462] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   84.799751][ T5462] CR2: 0000200000001000 CR3: 000000012a5ce000 CR4: 00000000003506f0
[   84.807866][ T5462] Call Trace:
[   84.811188][ T5462]  <TASK>
[   84.814134][ T5462]  reg_set_min_max+0x1c1/0x260
[   84.818948][ T5462]  check_cond_jmp_op+0x1370/0x19e0
[   84.824164][ T5462]  do_check+0x3363/0x8460
[   84.828553][ T5462]  do_check_common+0xc5e/0x12b0
[   84.833436][ T5462]  bpf_check+0xaaae/0xd9d0
[   84.837881][ T5462]  ? __alloc_frozen_pages_noprof+0x188/0x360
[   84.843976][ T5462]  ? alloc_pages_bulk_noprof+0x4a6/0x530
[   84.849663][ T5462]  ? __vmap_pages_range_noflush+0xbc4/0xcf0
[   84.855685][ T5462]  ? pcpu_block_update+0x24e/0x3b0
[   84.860859][ T5462]  ? pcpu_block_refresh_hint+0x10b/0x170
[   84.866494][ T5462]  ? pcpu_block_refresh_hint+0x157/0x170
[   84.872155][ T5462]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[   84.878229][ T5462]  ? css_rstat_updated+0xb7/0x240
[   84.883291][ T5462]  ? __rcu_read_unlock+0x4f/0x70
[   84.888233][ T5462]  ? pcpu_memcg_post_alloc_hook+0xf1/0x150
[   84.894126][ T5462]  ? bpf_prog_alloc+0x5b/0x150
[   84.899080][ T5462]  ? pcpu_alloc_noprof+0xd29/0x1250
[   84.904314][ T5462]  ? __kmalloc_noprof+0x489/0x570
[   84.909517][ T5462]  ? security_bpf_prog_load+0x60/0x140
[   84.915111][ T5462]  ? selinux_bpf_prog_load+0xad/0xd0
[   84.920416][ T5462]  ? security_bpf_prog_load+0x9e/0x140
[   84.926070][ T5462]  bpf_prog_load+0xf6e/0x1100
[   84.930845][ T5462]  ? security_bpf+0x2b/0x90
[   84.935403][ T5462]  __sys_bpf+0x469/0x7c0
[   84.939722][ T5462]  __x64_sys_bpf+0x41/0x50
[   84.944256][ T5462]  x64_sys_call+0x2aee/0x3000
[   84.949030][ T5462]  do_syscall_64+0xd2/0x200
[   84.953556][ T5462]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   84.959626][ T5462]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   84.965398][ T5462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.971309][ T5462] RIP: 0033:0x7fbf548cf749
[   84.975714][ T5462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.995353][ T5462] RSP: 002b:00007fbf5330e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   85.003820][ T5462] RAX: ffffffffffffffda RBX: 00007fbf54b26090 RCX: 00007fbf548cf749
[   85.011844][ T5462] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005
[   85.019859][ T5462] RBP: 00007fbf54953f91 R08: 0000000000000000 R09: 0000000000000000
[   85.027828][ T5462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.035798][ T5462] R13: 00007fbf54b26128 R14: 00007fbf54b26090 R15: 00007fff0b4c6428
[   85.043810][ T5462]  </TASK>
[   85.046804][ T5462] ---[ end trace 0000000000000000 ]---
[   85.132690][ T5474] netlink: 332 bytes leftover after parsing attributes in process `syz.5.605'.
[   85.175519][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.263891][ T5480] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[   85.534892][ T5483] loop1: detected capacity change from 0 to 512
[   85.567264][ T5483] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   85.788296][ T5489] loop2: detected capacity change from 0 to 512
[   85.915132][ T5483] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.607: invalid indirect mapped block 4294967295 (level 0)
[   85.942729][ T5489] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   85.950993][ T5489] EXT4-fs (loop2): orphan cleanup on readonly fs
[   85.959452][ T5489] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.609: corrupted inode contents
[   85.971784][ T5489] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.609: mark_inode_dirty error
[   85.983505][ T5489] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.609: corrupted inode contents
[   85.995469][ T5489] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.609: mark_inode_dirty error
[   86.000331][ T5483] EXT4-fs (loop1): Remounting filesystem read-only
[   86.015374][ T5483] EXT4-fs (loop1): 1 orphan inode deleted
[   86.021127][ T5483] EXT4-fs (loop1): 1 truncate cleaned up
[   86.026834][ T5489] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.609: corrupted inode contents
[   86.038891][ T5489] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[   86.047622][ T5489] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.609: corrupted inode contents
[   86.059994][ T5489] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.609: mark_inode_dirty error
[   86.070565][ T5483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.071140][ T5489] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[   86.093137][ T5489] EXT4-fs (loop2): 1 truncate cleaned up
[   86.201832][ T3344] __quota_error: 286 callbacks suppressed
[   86.201893][ T3344] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   86.217646][ T3344] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1
[   86.238708][ T5489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   86.336149][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.508940][ T5514] loop1: detected capacity change from 0 to 764
[   86.534791][ T5514] 9pnet: Could not find request transport: r
[   86.550280][ T5513] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   86.564651][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.862360][   T29] audit: type=1326 audit(1763675632.797:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.0.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1ed2f749 code=0x7fc00000
[   86.999519][ T5537] loop2: detected capacity change from 0 to 1024
[   87.006836][ T5537] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   87.017742][ T5537] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   87.029829][ T5537] JBD2: no valid journal superblock found
[   87.035598][ T5537] EXT4-fs (loop2): Could not load journal inode
[   87.733894][   T29] audit: type=1400 audit(1763675633.677:6341): avc:  denied  { write } for  pid=5552 comm="syz.2.625" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   87.779786][ T5559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.799310][ T5559] syzkaller0: entered promiscuous mode
[   87.804827][ T5559] syzkaller0: entered allmulticast mode
[   87.833418][   T29] audit: type=1400 audit(1763675633.797:6342): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop0" dev="devtmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   87.856736][   T29] audit: type=1400 audit(1763675633.797:6343): avc:  denied  { open } for  pid=3312 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   87.880198][   T29] audit: type=1400 audit(1763675633.797:6344): avc:  denied  { ioctl } for  pid=3312 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=583 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   87.880567][ T5564] tipc: Resetting bearer <eth:syzkaller0>
[   87.913618][ T5566] loop0: detected capacity change from 0 to 164
[   87.920914][ T5566] Unable to read rock-ridge attributes
[   87.923337][   T29] audit: type=1326 audit(1763675633.887:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e6f8f749 code=0x7ffc0000
[   87.961491][   T29] audit: type=1326 audit(1763675633.927:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8e6f8df90 code=0x7ffc0000
[   87.985353][   T29] audit: type=1326 audit(1763675633.927:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8e6f8df90 code=0x7ffc0000
[   88.002715][ T5566] infiniband !yz!: set active
[   88.008956][   T29] audit: type=1326 audit(1763675633.927:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5567 comm="syz.1.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e6f8f749 code=0x7ffc0000
[   88.013350][ T5566] infiniband !yz!: added team_slave_0
[   88.047839][ T5566] RDS/IB: !yz!: added
[   88.052627][ T5566] smc: adding ib device !yz! with port count 1
[   88.058862][ T5566] smc:    ib device !yz! port 1 has no pnetid
[   88.243642][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.253107][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.387403][ T5589] loop5: detected capacity change from 0 to 512
[   88.394712][ T5589] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   88.422051][ T5589] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.637: invalid indirect mapped block 4294967295 (level 0)
[   88.440249][ T5589] EXT4-fs (loop5): Remounting filesystem read-only
[   88.446935][ T5589] EXT4-fs (loop5): 1 orphan inode deleted
[   88.452778][ T5589] EXT4-fs (loop5): 1 truncate cleaned up
[   88.462628][ T5589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.487501][ T4947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.512163][ T5601] tipc: Started in network mode
[   88.517276][ T5601] tipc: Node identity 527a4f90fe3d, cluster identity 4711
[   88.524511][ T5601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.532157][ T5601] syzkaller0: entered promiscuous mode
[   88.537655][ T5601] syzkaller0: entered allmulticast mode
[   88.546689][ T5601] tipc: Resetting bearer <eth:syzkaller0>
[   88.549586][ T5603] 9pnet_fd: Insufficient options for proto=fd
[   88.558718][ T5600] tipc: Resetting bearer <eth:syzkaller0>
[   88.566569][ T5600] tipc: Disabling bearer <eth:syzkaller0>
[   88.683477][ T5627] loop5: detected capacity change from 0 to 2048
[   88.690063][ T5627] EXT4-fs: Ignoring removed bh option
[   88.714117][ T5637] hub 9-0:1.0: USB hub found
[   88.718891][ T5637] hub 9-0:1.0: 8 ports detected
[   88.785795][ T5627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.805377][ T5627] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   88.813635][ T5649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.820796][ T5627] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   88.829260][ T5649] syzkaller0: entered promiscuous mode
[   88.838962][ T5627] EXT4-fs (loop5): This should not happen!! Data will be lost
[   88.838962][ T5627] 
[   88.844421][ T5649] syzkaller0: entered allmulticast mode
[   88.854085][ T5627] EXT4-fs (loop5): Total free blocks count 0
[   88.865614][ T5627] EXT4-fs (loop5): Free/Dirty block details
[   88.871599][ T5627] EXT4-fs (loop5): free_blocks=2415919104
[   88.877314][ T5627] EXT4-fs (loop5): dirty_blocks=16
[   88.878709][ T5649] tipc: Resetting bearer <eth:syzkaller0>
[   88.882440][ T5627] EXT4-fs (loop5): Block reservation details
[   88.882463][ T5627] EXT4-fs (loop5): i_reserved_data_blocks=1
[   88.900413][ T5648] tipc: Resetting bearer <eth:syzkaller0>
[   88.909408][ T5648] tipc: Disabling bearer <eth:syzkaller0>
[   89.130676][ T4947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.172394][ T5658] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   89.272249][ T5665] 9pnet_fd: Insufficient options for proto=fd
[   89.290015][ T5662] loop0: detected capacity change from 0 to 1024
[   89.301367][ T5662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.314981][ T5662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.704045][ T5679] loop1: detected capacity change from 0 to 8192
[   89.850348][   T10] tipc: Node number set to 2643804771
[   89.925575][ T5689] __nla_validate_parse: 6 callbacks suppressed
[   89.925592][ T5689] netlink: 332 bytes leftover after parsing attributes in process `syz.1.673'.
[   90.015797][ T5695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'.
[   90.024776][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'.
[   90.703085][ T5726] netlink: 88 bytes leftover after parsing attributes in process `syz.0.684'.
[   90.938603][ T5732] loop2: detected capacity change from 0 to 128
[   91.041266][ T5737] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.076503][ T5743] netlink: 332 bytes leftover after parsing attributes in process `syz.5.690'.
[   91.100446][ T5747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.107725][ T5747] syzkaller0: entered promiscuous mode
[   91.113235][ T5747] syzkaller0: entered allmulticast mode
[   91.123188][ T5747] tipc: Resetting bearer <eth:syzkaller0>
[   91.129965][ T5746] tipc: Resetting bearer <eth:syzkaller0>
[   91.137345][ T5746] tipc: Disabling bearer <eth:syzkaller0>
[   91.144134][ T5749] netlink: 88 bytes leftover after parsing attributes in process `syz.4.691'.
[   91.179123][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.187599][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.227122][   T29] kauditd_printk_skb: 177 callbacks suppressed
[   91.227134][   T29] audit: type=1326 audit(1763675637.187:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   91.266969][   T29] audit: type=1326 audit(1763675637.217:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   91.290506][   T29] audit: type=1326 audit(1763675637.217:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   91.313924][   T29] audit: type=1326 audit(1763675637.217:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   91.337264][   T29] audit: type=1326 audit(1763675637.217:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   91.360597][   T29] audit: type=1326 audit(1763675637.217:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   91.383908][   T29] audit: type=1326 audit(1763675637.217:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   91.407323][   T29] audit: type=1326 audit(1763675637.217:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   91.420652][ T5763] loop5: detected capacity change from 0 to 2048
[   91.430981][   T29] audit: type=1326 audit(1763675637.217:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   91.437767][ T5763] EXT4-fs: Ignoring removed bh option
[   91.460277][   T29] audit: type=1326 audit(1763675637.217:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[   91.521368][ T5763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.552930][ T5763] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   91.568160][ T5763] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   91.580370][ T5763] EXT4-fs (loop5): This should not happen!! Data will be lost
[   91.580370][ T5763] 
[   91.590049][ T5763] EXT4-fs (loop5): Total free blocks count 0
[   91.596096][ T5763] EXT4-fs (loop5): Free/Dirty block details
[   91.602086][ T5763] EXT4-fs (loop5): free_blocks=2415919104
[   91.607794][ T5763] EXT4-fs (loop5): dirty_blocks=16
[   91.612909][ T5763] EXT4-fs (loop5): Block reservation details
[   91.618944][ T5763] EXT4-fs (loop5): i_reserved_data_blocks=1
[   91.734154][ T5775] 9pnet_fd: Insufficient options for proto=fd
[   91.774747][ T5779] loop0: detected capacity change from 0 to 2048
[   91.781394][ T5779] EXT4-fs: Ignoring removed bh option
[   91.791421][ T5779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.805401][ T5779] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   91.820448][ T5779] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   91.832705][ T5779] EXT4-fs (loop0): This should not happen!! Data will be lost
[   91.832705][ T5779] 
[   91.842375][ T5779] EXT4-fs (loop0): Total free blocks count 0
[   91.848374][ T5779] EXT4-fs (loop0): Free/Dirty block details
[   91.854279][ T5779] EXT4-fs (loop0): free_blocks=2415919104
[   91.859991][ T5779] EXT4-fs (loop0): dirty_blocks=16
[   91.865094][ T5779] EXT4-fs (loop0): Block reservation details
[   91.871074][ T5779] EXT4-fs (loop0): i_reserved_data_blocks=1
[   91.959309][ T5785] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.978119][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.031981][ T5797] loop1: detected capacity change from 0 to 1024
[   92.038900][ T5797] EXT4-fs: Ignoring removed orlov option
[   92.046737][ T5797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.171625][ T5804] xt_CT: You must specify a L4 protocol and not use inversions on it
[   92.184997][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'.
[   92.238494][ T4947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.319203][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.352376][ T5811] netlink: 332 bytes leftover after parsing attributes in process `syz.1.710'.
[   92.811872][ T5826] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   92.836649][ T5828] loop2: detected capacity change from 0 to 2048
[   92.843445][ T5828] EXT4-fs: Ignoring removed bh option
[   92.861844][ T5828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.876919][ T5828] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   92.878710][ T5834] loop0: detected capacity change from 0 to 164
[   92.891861][ T5828] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   92.910139][ T5828] EXT4-fs (loop2): This should not happen!! Data will be lost
[   92.910139][ T5828] 
[   92.911080][ T5834] Unable to read rock-ridge attributes
[   92.919879][ T5828] EXT4-fs (loop2): Total free blocks count 0
[   92.919895][ T5828] EXT4-fs (loop2): Free/Dirty block details
[   92.937269][ T5828] EXT4-fs (loop2): free_blocks=2415919104
[   92.943007][ T5828] EXT4-fs (loop2): dirty_blocks=16
[   92.948173][ T5828] EXT4-fs (loop2): Block reservation details
[   92.953436][ T5834] !yz!: rxe_newlink: already configured on team_slave_0
[   92.954182][ T5828] EXT4-fs (loop2): i_reserved_data_blocks=1
[   93.039977][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.243568][ T5854] netlink: 332 bytes leftover after parsing attributes in process `syz.0.723'.
[   93.366174][ T5861] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[   93.463589][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.477573][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.099163][ T5879] netlink: 332 bytes leftover after parsing attributes in process `syz.5.731'.
[   94.398286][ T5893] loop2: detected capacity change from 0 to 1024
[   94.438724][ T5893] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   94.449640][ T5893] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   94.460742][ T5893] JBD2: no valid journal superblock found
[   94.466551][ T5893] EXT4-fs (loop2): Could not load journal inode
[   94.545164][ T5893] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[   94.861605][ T5904] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   94.868122][ T5904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   94.875665][ T5904] vhci_hcd vhci_hcd.0: Device attached
[   95.154586][ T5910] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   95.185251][ T5912] loop5: detected capacity change from 0 to 764
[   95.262395][ T5912] 9pnet: Could not find request transport: r
[   95.300087][ T5920] netlink: 332 bytes leftover after parsing attributes in process `syz.4.745'.
[   95.500158][ T2966] usb 1-1: new low-speed USB device number 4 using vhci_hcd
[   95.658935][ T5937] loop1: detected capacity change from 0 to 1024
[   95.666431][ T5937] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   95.677315][ T5937] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   95.688224][ T5937] JBD2: no valid journal superblock found
[   95.693951][ T5937] EXT4-fs (loop1): Could not load journal inode
[   95.703646][ T5905] vhci_hcd: connection reset by peer
[   95.724499][   T42] vhci_hcd: stop threads
[   95.729046][   T42] vhci_hcd: release socket
[   95.733563][   T42] vhci_hcd: disconnect device
[   95.793012][ T5937] loop1: detected capacity change from 0 to 512
[   96.272431][ T5944] loop5: detected capacity change from 0 to 1024
[   96.282062][ T5944] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   96.292983][ T5944] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   96.304148][ T5944] JBD2: no valid journal superblock found
[   96.309884][ T5944] EXT4-fs (loop5): Could not load journal inode
[   96.341109][ T5937] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   96.349391][ T5937] EXT4-fs (loop1): orphan cleanup on readonly fs
[   96.358043][ T5937] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.749: corrupted inode contents
[   96.371133][ T5937] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.749: mark_inode_dirty error
[   96.382900][ T5937] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.749: corrupted inode contents
[   96.396606][ T5937] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.749: mark_inode_dirty error
[   96.408109][ T5937] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.749: corrupted inode contents
[   96.420435][ T5937] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   96.429161][ T5937] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.749: corrupted inode contents
[   96.441521][ T5937] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.749: mark_inode_dirty error
[   96.452866][ T5937] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[   96.462322][ T5937] EXT4-fs (loop1): 1 truncate cleaned up
[   96.467898][ T5943] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[   96.468241][   T42] __quota_error: 248 callbacks suppressed
[   96.468253][   T42] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   96.493089][   T42] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1
[   96.506397][ T5937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   96.807670][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.826204][ T5959] loop0: detected capacity change from 0 to 1024
[   96.832634][   T29] audit: type=1326 audit(1763675642.787:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1ed2f749 code=0x7ffc0000
[   96.856125][   T29] audit: type=1326 audit(1763675642.787:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1ed2f749 code=0x7ffc0000
[   96.879639][   T29] audit: type=1326 audit(1763675642.787:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffa1ed2f749 code=0x7ffc0000
[   96.897949][ T5959] EXT4-fs: Ignoring removed orlov option
[   96.902963][   T29] audit: type=1326 audit(1763675642.787:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffa1ed2f783 code=0x7ffc0000
[   96.931758][   T29] audit: type=1326 audit(1763675642.787:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa1ed2e1ff code=0x7ffc0000
[   96.955001][   T29] audit: type=1326 audit(1763675642.787:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffa1ed2f7d7 code=0x7ffc0000
[   96.978276][   T29] audit: type=1326 audit(1763675642.787:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa1ed2df90 code=0x7ffc0000
[   97.001713][   T29] audit: type=1326 audit(1763675642.787:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa1ed2f34b code=0x7ffc0000
[   97.035163][   T29] audit: type=1326 audit(1763675642.847:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.0.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffa1ed2e3aa code=0x7ffc0000
[   97.084742][ T5969] loop1: detected capacity change from 0 to 764
[   97.092018][ T5959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.117712][ T5969] 9pnet: Could not find request transport: r
[   97.301056][ T5980] loop5: detected capacity change from 0 to 512
[   97.352199][ T5980] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   97.360272][ T5980] EXT4-fs (loop5): orphan cleanup on readonly fs
[   97.375528][ T5978] xt_CT: You must specify a L4 protocol and not use inversions on it
[   97.393345][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'.
[   97.403253][ T5980] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.760: corrupted inode contents
[   97.416334][ T5980] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.760: mark_inode_dirty error
[   97.429045][ T5980] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.760: corrupted inode contents
[   97.442186][ T5980] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.760: mark_inode_dirty error
[   97.456686][ T5980] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.760: corrupted inode contents
[   97.470194][ T5980] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem
[   97.480199][ T5980] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.760: corrupted inode contents
[   97.493287][ T5980] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.760: mark_inode_dirty error
[   97.506336][ T5980] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem
[   97.576915][ T5980] EXT4-fs (loop5): 1 truncate cleaned up
[   97.583138][   T42] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1
[   97.632426][ T5980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   97.905402][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.989217][ T4947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.118098][ T6004] loop0: detected capacity change from 0 to 2048
[   98.159685][ T6004] EXT4-fs: Ignoring removed bh option
[   98.190238][ T6009] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[   98.196816][ T6009] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   98.204323][ T6009] vhci_hcd vhci_hcd.0: Device attached
[   98.255087][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.375696][ T6004] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   98.435855][ T6004] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   98.448171][ T6004] EXT4-fs (loop0): This should not happen!! Data will be lost
[   98.448171][ T6004] 
[   98.459318][ T6004] EXT4-fs (loop0): Total free blocks count 0
[   98.465452][ T6004] EXT4-fs (loop0): Free/Dirty block details
[   98.471392][ T6004] EXT4-fs (loop0): free_blocks=2415919104
[   98.477241][ T6004] EXT4-fs (loop0): dirty_blocks=16
[   98.482452][ T6004] EXT4-fs (loop0): Block reservation details
[   98.488451][ T6004] EXT4-fs (loop0): i_reserved_data_blocks=1
[   98.500199][   T10] usb 11-1: new low-speed USB device number 2 using vhci_hcd
[   98.621450][ T6023] loop1: detected capacity change from 0 to 1024
[   98.630357][ T6023] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   98.641225][ T6023] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   98.652138][ T6023] JBD2: no valid journal superblock found
[   98.657932][ T6023] EXT4-fs (loop1): Could not load journal inode
[   98.817663][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.935950][ T6018] loop1: detected capacity change from 0 to 512
[   98.950784][ T6018] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   98.959020][ T6018] EXT4-fs (loop1): orphan cleanup on readonly fs
[   98.966697][ T6018] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.769: corrupted inode contents
[   98.978714][ T6018] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.769: mark_inode_dirty error
[   98.990074][ T6010] vhci_hcd: connection reset by peer
[   98.995467][ T6018] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.769: corrupted inode contents
[   99.008100][ T6018] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.769: mark_inode_dirty error
[   99.014891][ T6034] loop0: detected capacity change from 0 to 512
[   99.026066][ T6034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   99.030479][   T12] vhci_hcd: stop threads
[   99.040160][   T12] vhci_hcd: release socket
[   99.044568][   T12] vhci_hcd: disconnect device
[   99.047243][ T6034] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.772: invalid indirect mapped block 4294967295 (level 0)
[   99.049276][ T6018] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.769: corrupted inode contents
[   99.075558][ T6018] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[   99.084367][ T6018] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.769: corrupted inode contents
[   99.096631][ T6018] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.769: mark_inode_dirty error
[   99.107779][ T6018] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[   99.117034][ T6018] EXT4-fs (loop1): 1 truncate cleaned up
[   99.124045][   T12] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1
[   99.137230][ T6018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   99.150464][ T6034] EXT4-fs (loop0): Remounting filesystem read-only
[   99.165537][ T6034] EXT4-fs (loop0): 1 orphan inode deleted
[   99.171335][ T6034] EXT4-fs (loop0): 1 truncate cleaned up
[   99.197950][ T6034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.239705][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.276363][ T6040] loop0: detected capacity change from 0 to 4096
[   99.277462][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.776'.
[   99.291730][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'.
[   99.293194][ T6040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.355511][ T6050] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.364284][ T6040] FAULT_INJECTION: forcing a failure.
[   99.364284][ T6040] name failslab, interval 1, probability 0, space 0, times 0
[   99.377073][ T6040] CPU: 1 UID: 0 PID: 6040 Comm: syz.0.777 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   99.377109][ T6040] Tainted: [W]=WARN
[   99.377114][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   99.377124][ T6040] Call Trace:
[   99.377129][ T6040]  <TASK>
[   99.377136][ T6040]  __dump_stack+0x1d/0x30
[   99.377156][ T6040]  dump_stack_lvl+0xe8/0x140
[   99.377237][ T6040]  dump_stack+0x15/0x1b
[   99.377254][ T6040]  should_fail_ex+0x265/0x280
[   99.377284][ T6040]  should_failslab+0x8c/0xb0
[   99.377308][ T6040]  __kmalloc_noprof+0xa5/0x570
[   99.377356][ T6040]  ? ext4_find_extent+0x16b/0x7a0
[   99.377442][ T6040]  ext4_find_extent+0x16b/0x7a0
[   99.377498][ T6040]  ? __blk_mq_alloc_requests+0xd86/0xe30
[   99.377567][ T6040]  ext4_ext_map_blocks+0x11f/0x38a0
[   99.377589][ T6040]  ? blk_add_rq_to_plug+0x20e/0x390
[   99.377680][ T6040]  ? blk_mq_submit_bio+0xaad/0x1100
[   99.377720][ T6050] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[   99.377706][ T6040]  ? ext4_es_lookup_extent+0x352/0x4f0
[   99.377761][ T6040]  ext4_map_blocks+0x5ee/0xd00
[   99.377811][ T6040]  ext4_iomap_begin+0x88d/0xe00
[   99.377835][ T6040]  ? __pfx_ext4_iomap_begin+0x10/0x10
[   99.377854][ T6040]  iomap_iter+0x332/0x730
[   99.377877][ T6040]  __iomap_dio_rw+0xd4a/0x1240
[   99.377982][ T6040]  ? ext4_journal_check_start+0x11a/0x1b0
[   99.378083][ T6040]  iomap_dio_rw+0x40/0x90
[   99.378107][ T6040]  ext4_file_write_iter+0xb3a/0xf60
[   99.378166][ T6040]  do_iter_readv_writev+0x4a1/0x540
[   99.378251][ T6040]  vfs_writev+0x2df/0x8b0
[   99.378287][ T6040]  __se_sys_pwritev2+0xfc/0x1c0
[   99.378314][ T6040]  __x64_sys_pwritev2+0x67/0x80
[   99.378394][ T6040]  x64_sys_call+0x2c59/0x3000
[   99.378415][ T6040]  do_syscall_64+0xd2/0x200
[   99.378435][ T6040]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   99.378529][ T6040]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   99.378617][ T6040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.378637][ T6040] RIP: 0033:0x7ffa1ed2f749
[   99.378652][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.378716][ T6040] RSP: 002b:00007ffa1d78f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[   99.378734][ T6040] RAX: ffffffffffffffda RBX: 00007ffa1ef85fa0 RCX: 00007ffa1ed2f749
[   99.378783][ T6040] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007
[   99.378795][ T6040] RBP: 00007ffa1d78f090 R08: 0000000000000000 R09: 0000000000000003
[   99.378807][ T6040] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002
[   99.378823][ T6040] R13: 00007ffa1ef86038 R14: 00007ffa1ef85fa0 R15: 00007fff5a67c4f8
[   99.378840][ T6040]  </TASK>
[   99.419397][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.783'.
[   99.428189][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.431718][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'.
[   99.714083][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.807877][ T6070] loop0: detected capacity change from 0 to 2048
[   99.907426][ T6076] loop2: detected capacity change from 0 to 1024
[   99.914674][ T6076] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   99.925528][ T6076] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   99.937961][ T6076] JBD2: no valid journal superblock found
[   99.943682][ T6076] EXT4-fs (loop2): Could not load journal inode
[  100.197906][ T6076] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  100.238626][ T6066] loop2: detected capacity change from 0 to 512
[  100.245535][ T6070] EXT4-fs: Ignoring removed bh option
[  100.296981][ T6066] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  100.305111][ T6066] EXT4-fs (loop2): orphan cleanup on readonly fs
[  100.313307][ T6070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.326015][ T6066] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.785: corrupted inode contents
[  100.339614][ T6066] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.785: mark_inode_dirty error
[  100.408984][ T6087] loop5: detected capacity change from 0 to 512
[  100.531200][ T6066] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.785: corrupted inode contents
[  100.546228][ T6066] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.785: mark_inode_dirty error
[  100.557672][ T6066] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.785: corrupted inode contents
[  100.569874][ T6066] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  100.578671][ T2966] usb 1-1: enqueue for inactive port 0
[  100.584224][ T6066] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.785: corrupted inode contents
[  100.596682][ T6087] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  100.604913][ T6087] EXT4-fs (loop5): orphan cleanup on readonly fs
[  100.611936][ T6014] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  100.627873][ T6066] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.785: mark_inode_dirty error
[  100.641547][ T6066] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  100.651014][ T6087] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.791: corrupted inode contents
[  100.663488][ T6066] EXT4-fs (loop2): 1 truncate cleaned up
[  100.673615][ T6087] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.791: mark_inode_dirty error
[  100.690178][ T2966] usb 1-1: enqueue for inactive port 0
[  100.690260][ T6087] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.791: corrupted inode contents
[  100.696280][ T3445] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1
[  100.719171][ T6087] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.791: mark_inode_dirty error
[  100.719852][ T6066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  100.739052][ T6087] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.791: corrupted inode contents
[  100.754732][ T6087] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem
[  100.764024][ T6087] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.791: corrupted inode contents
[  100.776373][ T6087] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.791: mark_inode_dirty error
[  100.776949][ T2966] vhci_hcd: vhci_device speed not set
[  100.793059][ T6087] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem
[  100.802407][ T6087] EXT4-fs (loop5): 1 truncate cleaned up
[  100.808432][   T12] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1
[  100.877293][ T6087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  101.010673][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.010696][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.039305][ T6095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.793'.
[  101.048206][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'.
[  101.099104][ T4947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.109214][ T6096] loop0: detected capacity change from 0 to 512
[  101.148973][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.797'.
[  101.157980][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'.
[  101.175478][ T6096] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.792: corrupted in-inode xattr: invalid ea_ino
[  101.189082][ T6096] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.792: couldn't read orphan inode 15 (err -117)
[  101.224600][ T6112] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  101.226684][ T6096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.231171][ T6112] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  101.250724][ T6112] vhci_hcd vhci_hcd.0: Device attached
[  101.274284][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.053916][ T6113] vhci_hcd: connection closed
[  102.054193][  T296] vhci_hcd: stop threads
[  102.063193][  T296] vhci_hcd: release socket
[  102.067617][  T296] vhci_hcd: disconnect device
[  102.076967][   T29] kauditd_printk_skb: 328 callbacks suppressed
[  102.076994][   T29] audit: type=1326 audit(1763675648.037:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.5.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  102.113814][   T29] audit: type=1326 audit(1763675648.037:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.5.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  102.220924][ T6141] loop2: detected capacity change from 0 to 512
[  102.281122][ T6141] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  102.289261][ T6141] EXT4-fs (loop2): orphan cleanup on readonly fs
[  102.297718][ T6141] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.807: corrupted inode contents
[  102.309712][ T6141] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.807: mark_inode_dirty error
[  102.321218][ T6141] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.807: corrupted inode contents
[  102.333072][ T6141] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.807: mark_inode_dirty error
[  102.344401][ T6141] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.807: corrupted inode contents
[  102.356386][ T6141] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  102.366327][ T6141] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.807: corrupted inode contents
[  102.378275][ T6141] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.807: mark_inode_dirty error
[  102.389414][ T6141] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  102.398701][ T6141] EXT4-fs (loop2): 1 truncate cleaned up
[  102.524752][  T296] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  102.534569][  T296] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 1
[  102.545964][ T6147] loop0: detected capacity change from 0 to 2048
[  102.546716][ T6141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  102.552616][ T6147] EXT4-fs: Ignoring removed bh option
[  102.583094][ T6147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.600708][ T6147] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  102.616120][ T6147] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  102.628434][ T6147] EXT4-fs (loop0): This should not happen!! Data will be lost
[  102.628434][ T6147] 
[  102.638126][ T6147] EXT4-fs (loop0): Total free blocks count 0
[  102.644188][ T6147] EXT4-fs (loop0): Free/Dirty block details
[  102.650068][ T6147] EXT4-fs (loop0): free_blocks=2415919104
[  102.655862][ T6147] EXT4-fs (loop0): dirty_blocks=16
[  102.660956][ T6147] EXT4-fs (loop0): Block reservation details
[  102.666949][ T6147] EXT4-fs (loop0): i_reserved_data_blocks=1
[  102.692203][ T6153] netlink: 332 bytes leftover after parsing attributes in process `syz.4.810'.
[  102.789748][ T6163] loop5: detected capacity change from 0 to 2048
[  102.796511][ T6163] EXT4-fs: Ignoring removed bh option
[  102.822324][ T6163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.865464][ T6163] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  102.888285][ T6163] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  102.900578][ T6163] EXT4-fs (loop5): This should not happen!! Data will be lost
[  102.900578][ T6163] 
[  102.900827][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.910370][ T6163] EXT4-fs (loop5): Total free blocks count 0
[  102.925532][ T6163] EXT4-fs (loop5): Free/Dirty block details
[  102.931546][ T6163] EXT4-fs (loop5): free_blocks=2415919104
[  102.937259][ T6163] EXT4-fs (loop5): dirty_blocks=16
[  102.942459][ T6163] EXT4-fs (loop5): Block reservation details
[  102.948412][ T6163] EXT4-fs (loop5): i_reserved_data_blocks=1
[  103.027453][ T4947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.072235][ T6172] loop1: detected capacity change from 0 to 512
[  103.078904][ T6172] EXT4-fs: Ignoring removed nobh option
[  103.085593][ T6172] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  103.097160][ T6172] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  103.107286][ T6172] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.818: Corrupt directory, running e2fsck is recommended
[  103.126497][ T6172] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  103.134814][ T6172] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.818: corrupted in-inode xattr: invalid ea_ino
[  103.148578][ T6172] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.818: couldn't read orphan inode 15 (err -117)
[  103.161194][ T6172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.279110][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.307972][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.820'.
[  103.316944][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'.
[  103.352120][ T6190] loop0: detected capacity change from 0 to 512
[  103.360588][ T6190] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.821: corrupted in-inode xattr: invalid ea_ino
[  103.374381][ T6190] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.821: couldn't read orphan inode 15 (err -117)
[  103.386986][ T6190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.444784][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.465494][ T6194] loop1: detected capacity change from 0 to 764
[  103.479625][ T6194] 9pnet: Could not find request transport: r
[  103.570243][   T10] usb 11-1: enqueue for inactive port 0
[  103.617578][   T10] usb 11-1: enqueue for inactive port 0
[  103.632568][ T6201] netlink: 332 bytes leftover after parsing attributes in process `syz.1.823'.
[  103.653771][   T29] audit: type=1326 audit(1763675649.617:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  103.679099][   T29] audit: type=1326 audit(1763675649.617:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  103.702509][   T29] audit: type=1326 audit(1763675649.617:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  103.725963][   T29] audit: type=1326 audit(1763675649.617:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  103.749273][   T29] audit: type=1326 audit(1763675649.617:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  103.772635][   T29] audit: type=1326 audit(1763675649.617:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  103.796081][   T29] audit: type=1326 audit(1763675649.617:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  103.819420][   T10] vhci_hcd: vhci_device speed not set
[  103.976709][ T6210] loop1: detected capacity change from 0 to 512
[  104.001481][ T6210] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  104.009494][ T6210] EXT4-fs (loop1): orphan cleanup on readonly fs
[  104.018272][ T6210] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.827: corrupted inode contents
[  104.030410][ T6210] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.827: mark_inode_dirty error
[  104.032176][ T6219] FAULT_INJECTION: forcing a failure.
[  104.032176][ T6219] name failslab, interval 1, probability 0, space 0, times 0
[  104.042516][ T6210] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.827: corrupted inode contents
[  104.054283][ T6219] CPU: 1 UID: 0 PID: 6219 Comm: syz.5.831 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  104.054355][ T6219] Tainted: [W]=WARN
[  104.054362][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  104.054374][ T6219] Call Trace:
[  104.054381][ T6219]  <TASK>
[  104.054390][ T6219]  __dump_stack+0x1d/0x30
[  104.054412][ T6219]  dump_stack_lvl+0xe8/0x140
[  104.054432][ T6219]  dump_stack+0x15/0x1b
[  104.054490][ T6219]  should_fail_ex+0x265/0x280
[  104.054521][ T6219]  should_failslab+0x8c/0xb0
[  104.054548][ T6219]  kmem_cache_alloc_noprof+0x50/0x480
[  104.054643][ T6219]  ? skb_clone+0x151/0x1f0
[  104.054666][ T6219]  skb_clone+0x151/0x1f0
[  104.054684][ T6219]  __netlink_deliver_tap+0x2c9/0x500
[  104.054704][ T6219]  ? netlink_attachskb+0x2cc/0x650
[  104.054732][ T6219]  netlink_sendskb+0x126/0x150
[  104.054758][ T6219]  netlink_unicast+0x2a2/0x690
[  104.054805][ T6219]  netlink_ack+0x4c8/0x500
[  104.054837][ T6219]  netlink_rcv_skb+0x192/0x220
[  104.054929][ T6219]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  104.054957][ T6219]  rtnetlink_rcv+0x1c/0x30
[  104.054976][ T6219]  netlink_unicast+0x5c0/0x690
[  104.055026][ T6219]  netlink_sendmsg+0x58b/0x6b0
[  104.055047][ T6219]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.055065][ T6219]  __sock_sendmsg+0x145/0x180
[  104.055089][ T6219]  ____sys_sendmsg+0x31e/0x4e0
[  104.055121][ T6219]  ___sys_sendmsg+0x17b/0x1d0
[  104.055149][ T6219]  __x64_sys_sendmsg+0xd4/0x160
[  104.055171][ T6219]  x64_sys_call+0x191e/0x3000
[  104.055233][ T6219]  do_syscall_64+0xd2/0x200
[  104.055253][ T6219]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  104.055286][ T6219]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  104.055314][ T6219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.055338][ T6219] RIP: 0033:0x7f864682f749
[  104.055353][ T6219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.055370][ T6219] RSP: 002b:00007f864528f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.055388][ T6219] RAX: ffffffffffffffda RBX: 00007f8646a85fa0 RCX: 00007f864682f749
[  104.055400][ T6219] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003
[  104.055412][ T6219] RBP: 00007f864528f090 R08: 0000000000000000 R09: 0000000000000000
[  104.055424][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.055440][ T6219] R13: 00007f8646a86038 R14: 00007f8646a85fa0 R15: 00007fffaeab51d8
[  104.055458][ T6219]  </TASK>
[  104.314807][ T6210] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.827: mark_inode_dirty error
[  104.315272][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.326705][ T6210] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.827: corrupted inode contents
[  104.347465][ T6210] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  104.356197][ T6210] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.827: corrupted inode contents
[  104.369382][ T6210] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.827: mark_inode_dirty error
[  104.381500][ T6210] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  104.392131][ T6210] EXT4-fs (loop1): 1 truncate cleaned up
[  104.398142][ T3445] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1
[  104.410779][ T6210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  104.597590][ T6229] loop0: detected capacity change from 0 to 1024
[  104.642503][ T6229] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  104.653474][ T6229] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  104.664343][ T6229] JBD2: no valid journal superblock found
[  104.670157][ T6229] EXT4-fs (loop0): Could not load journal inode
[  104.737185][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.883098][ T6228] loop0: detected capacity change from 0 to 512
[  104.903951][ T6228] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  104.912029][ T6228] EXT4-fs (loop0): orphan cleanup on readonly fs
[  104.919535][ T6228] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.833: corrupted inode contents
[  104.931706][ T6228] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.833: mark_inode_dirty error
[  104.943242][ T6228] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.833: corrupted inode contents
[  104.955720][ T6228] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.833: mark_inode_dirty error
[  104.967122][ T6228] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.833: corrupted inode contents
[  104.983180][ T6228] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[  104.991965][ T6228] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.833: corrupted inode contents
[  105.004029][ T6228] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.833: mark_inode_dirty error
[  105.015492][ T6228] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[  105.024830][ T6228] EXT4-fs (loop0): 1 truncate cleaned up
[  105.030609][   T12] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1
[  105.042926][ T6228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.266127][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.806580][ T6269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'.
[  105.815510][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'.
[  105.942562][ T6273] loop2: detected capacity change from 0 to 512
[  105.971353][ T6273] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  105.979404][ T6273] EXT4-fs (loop2): orphan cleanup on readonly fs
[  105.987063][ T6273] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.845: corrupted inode contents
[  105.999147][ T6273] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.845: mark_inode_dirty error
[  106.020615][ T6273] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.845: corrupted inode contents
[  106.032569][ T6273] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.845: mark_inode_dirty error
[  106.043810][ T6273] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.845: corrupted inode contents
[  106.055929][ T6273] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  106.060286][ T6286] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  106.064639][ T6273] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.845: corrupted inode contents
[  106.070927][ T6286] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  106.082793][ T6273] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.845: mark_inode_dirty error
[  106.090228][ T6286] vhci_hcd vhci_hcd.0: Device attached
[  106.101186][ T6273] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  106.107708][ T6280] __nla_validate_parse: 2 callbacks suppressed
[  106.107720][ T6280] netlink: 88 bytes leftover after parsing attributes in process `syz.1.847'.
[  106.115669][ T6273] EXT4-fs (loop2): 1 truncate cleaned up
[  106.138165][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1
[  106.165634][ T6273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.353259][ T6298] loop0: detected capacity change from 0 to 1024
[  106.360545][ T6298] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  106.371422][ T6298] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  106.381617][   T36] usb 11-1: new low-speed USB device number 3 using vhci_hcd
[  106.391110][ T6298] JBD2: no valid journal superblock found
[  106.396832][ T6298] EXT4-fs (loop0): Could not load journal inode
[  106.659394][ T6297] loop0: detected capacity change from 0 to 512
[  106.683724][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.705936][ T6297] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  106.713945][ T6297] EXT4-fs (loop0): orphan cleanup on readonly fs
[  106.722866][ T6297] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.850: corrupted inode contents
[  106.741142][ T6297] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.850: mark_inode_dirty error
[  106.760496][ T6297] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.850: corrupted inode contents
[  106.772462][ T6297] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.850: mark_inode_dirty error
[  106.783796][ T6297] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.850: corrupted inode contents
[  106.795741][ T6297] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[  106.804661][ T6297] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.850: corrupted inode contents
[  106.816927][ T6297] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.850: mark_inode_dirty error
[  106.852524][ T6297] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[  106.864494][ T6297] EXT4-fs (loop0): 1 truncate cleaned up
[  106.870456][   T31] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1
[  106.888549][ T6297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.904203][ T6287] vhci_hcd: connection reset by peer
[  106.909734][   T31] vhci_hcd: stop threads
[  106.913999][   T31] vhci_hcd: release socket
[  106.918456][   T31] vhci_hcd: disconnect device
[  106.932073][ T6317] loop1: detected capacity change from 0 to 512
[  106.940655][ T6317] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.858: corrupted in-inode xattr: invalid ea_ino
[  106.955813][ T6317] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.858: couldn't read orphan inode 15 (err -117)
[  106.973469][ T6317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.999619][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.017552][ T6321] loop1: detected capacity change from 0 to 764
[  107.035044][ T6321] 9pnet: Could not find request transport: r
[  107.095966][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.177273][ T6329] loop1: detected capacity change from 0 to 2048
[  107.183962][ T6329] EXT4-fs: Ignoring removed bh option
[  107.212466][ T6329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.226465][ T6329] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  107.241382][ T6329] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  107.253639][ T6329] EXT4-fs (loop1): This should not happen!! Data will be lost
[  107.253639][ T6329] 
[  107.263289][ T6329] EXT4-fs (loop1): Total free blocks count 0
[  107.269302][ T6329] EXT4-fs (loop1): Free/Dirty block details
[  107.275202][ T6329] EXT4-fs (loop1): free_blocks=2415919104
[  107.280983][ T6329] EXT4-fs (loop1): dirty_blocks=16
[  107.286105][ T6329] EXT4-fs (loop1): Block reservation details
[  107.292182][ T6329] EXT4-fs (loop1): i_reserved_data_blocks=1
[  107.427373][ T6339] loop5: detected capacity change from 0 to 2048
[  107.434074][ T6339] EXT4-fs: Ignoring removed bh option
[  107.461425][ T6339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.475402][ T6339] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  107.490357][ T6339] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  107.502633][ T6339] EXT4-fs (loop5): This should not happen!! Data will be lost
[  107.502633][ T6339] 
[  107.512274][ T6339] EXT4-fs (loop5): Total free blocks count 0
[  107.518299][ T6339] EXT4-fs (loop5): Free/Dirty block details
[  107.524199][ T6339] EXT4-fs (loop5): free_blocks=2415919104
[  107.529909][ T6339] EXT4-fs (loop5): dirty_blocks=16
[  107.535075][ T6339] EXT4-fs (loop5): Block reservation details
[  107.541067][ T6339] EXT4-fs (loop5): i_reserved_data_blocks=1
[  107.637300][ T4947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.727825][   T29] kauditd_printk_skb: 370 callbacks suppressed
[  107.727840][   T29] audit: type=1326 audit(1763675653.687:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  107.792098][   T29] audit: type=1326 audit(1763675653.717:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  107.815930][   T29] audit: type=1326 audit(1763675653.717:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  107.839224][   T29] audit: type=1326 audit(1763675653.717:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  107.862600][   T29] audit: type=1326 audit(1763675653.717:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  107.883180][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.5.869'.
[  107.885881][   T29] audit: type=1326 audit(1763675653.717:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  107.894745][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.869'.
[  107.917993][   T29] audit: type=1326 audit(1763675653.717:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  107.950048][   T29] audit: type=1326 audit(1763675653.717:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  107.973386][   T29] audit: type=1326 audit(1763675653.717:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  107.996673][   T29] audit: type=1326 audit(1763675653.717:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  108.080873][ T6367] loop0: detected capacity change from 0 to 512
[  108.087824][ T6367] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  108.120866][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.168432][ T6367] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.872: invalid indirect mapped block 4294967295 (level 0)
[  108.191078][ T6367] EXT4-fs (loop0): Remounting filesystem read-only
[  108.198964][ T6367] EXT4-fs (loop0): 1 orphan inode deleted
[  108.204792][ T6367] EXT4-fs (loop0): 1 truncate cleaned up
[  108.440874][ T6367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.453668][ T6373] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  108.460171][ T6373] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  108.467686][ T6373] vhci_hcd vhci_hcd.0: Device attached
[  108.577788][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.698179][ T6351] syz.2.867 (6351) used greatest stack depth: 6376 bytes left
[  108.710215][    T9] usb 3-1: new low-speed USB device number 3 using vhci_hcd
[  108.722804][ T6386] loop2: detected capacity change from 0 to 764
[  108.732121][ T6385] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.749913][ T6386] 9pnet: Could not find request transport: r
[  108.775526][ T6385] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.788288][ T6381] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  108.796514][ T6381] tipc: Enabled bearer <udp:syz0>, priority 10
[  108.823025][ T6385] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.847410][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.5.876'.
[  108.883637][ T6385] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.939580][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.958720][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.967137][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.976793][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.026286][ T6374] vhci_hcd: connection reset by peer
[  109.031863][   T12] vhci_hcd: stop threads
[  109.036122][   T12] vhci_hcd: release socket
[  109.040704][   T12] vhci_hcd: disconnect device
[  109.055096][ T6405] loop2: detected capacity change from 0 to 512
[  109.063219][ T6405] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.882: corrupted in-inode xattr: invalid ea_ino
[  109.076764][ T6405] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.882: couldn't read orphan inode 15 (err -117)
[  109.089160][ T6405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.695118][ T6418] loop5: detected capacity change from 0 to 164
[  109.702488][ T6418] Unable to read rock-ridge attributes
[  109.712002][ T6418] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  109.911505][ T3401] tipc: Node number set to 442108825
[  109.920513][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.971473][ T6426] loop2: detected capacity change from 0 to 512
[  109.986580][ T6426] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.887: corrupted in-inode xattr: invalid ea_ino
[  110.011675][ T6426] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.887: couldn't read orphan inode 15 (err -117)
[  110.069948][ T6426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.117301][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.210918][ T6435] loop0: detected capacity change from 0 to 512
[  110.217907][ T6435] EXT4-fs: Ignoring removed nobh option
[  110.225321][ T6435] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  110.236829][ T6435] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  110.246930][ T6435] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.890: Corrupt directory, running e2fsck is recommended
[  110.259865][ T6440] loop2: detected capacity change from 0 to 512
[  110.266634][ T6435] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  110.266721][ T6440] EXT4-fs: Ignoring removed nobh option
[  110.275039][ T6435] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.890: corrupted in-inode xattr: invalid ea_ino
[  110.291641][ T6440] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  110.305131][ T6440] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  110.315208][ T6440] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.892: Corrupt directory, running e2fsck is recommended
[  110.329531][ T6440] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  110.338964][ T6440] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.892: corrupted in-inode xattr: invalid ea_ino
[  110.352502][ T6440] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.892: couldn't read orphan inode 15 (err -117)
[  110.364912][ T6440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.380422][ T6435] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.890: couldn't read orphan inode 15 (err -117)
[  110.392802][ T6435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.468679][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.492086][ T6456] netlink: 332 bytes leftover after parsing attributes in process `syz.2.896'.
[  110.607725][ T6462] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.774646][ T6472] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.826712][ T6466] tipc: Started in network mode
[  110.831661][ T6466] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  110.841594][ T6466] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  110.849829][ T6466] tipc: Enabled bearer <udp:syz0>, priority 10
[  110.862984][ T6472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.913669][ T6472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.924515][ T6475] loop5: detected capacity change from 0 to 764
[  110.943361][ T6475] 9pnet: Could not find request transport: r
[  110.960915][ T6472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.981662][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.999072][ T6478] loop0: detected capacity change from 0 to 764
[  111.017123][ T6478] 9pnet: Could not find request transport: r
[  111.019069][   T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.034493][   T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.048291][ T3445] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.059276][ T3445] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.111183][ T6486] loop5: detected capacity change from 0 to 2048
[  111.117871][ T6486] EXT4-fs: Ignoring removed bh option
[  111.131450][ T6486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.150606][ T6486] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  111.165711][ T6486] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  111.177900][ T6486] EXT4-fs (loop5): This should not happen!! Data will be lost
[  111.177900][ T6486] 
[  111.187625][ T6486] EXT4-fs (loop5): Total free blocks count 0
[  111.193607][ T6486] EXT4-fs (loop5): Free/Dirty block details
[  111.199481][ T6486] EXT4-fs (loop5): free_blocks=2415919104
[  111.205195][ T6486] EXT4-fs (loop5): dirty_blocks=16
[  111.210314][ T6486] EXT4-fs (loop5): Block reservation details
[  111.216329][ T6486] EXT4-fs (loop5): i_reserved_data_blocks=1
[  111.249035][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.283184][ T6504] loop1: detected capacity change from 0 to 1024
[  111.290241][ T6504] EXT4-fs: Ignoring removed i_version option
[  111.296662][ T6504] EXT4-fs: Ignoring removed nobh option
[  111.297113][ T4947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.321644][ T6504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.335961][ T6511] netlink: 332 bytes leftover after parsing attributes in process `syz.5.911'.
[  111.347173][ T6504] netlink: 60 bytes leftover after parsing attributes in process `syz.1.910'.
[  111.356419][ T6496] loop0: detected capacity change from 0 to 512
[  111.363133][ T6496] EXT4-fs: Ignoring removed nobh option
[  111.375371][ T6496] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  111.386885][ T6496] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  111.396971][ T6496] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.907: Corrupt directory, running e2fsck is recommended
[  111.411396][ T6496] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  111.412738][   T36] usb 11-1: enqueue for inactive port 0
[  111.419653][ T6496] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.907: corrupted in-inode xattr: invalid ea_ino
[  111.438853][ T6496] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.907: couldn't read orphan inode 15 (err -117)
[  111.447192][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.462114][ T6519] loop2: detected capacity change from 0 to 164
[  111.468876][ T6496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.480596][   T36] usb 11-1: enqueue for inactive port 0
[  111.501433][ T6519] Unable to read rock-ridge attributes
[  111.511267][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.522330][ T6524] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  111.522744][ T6519] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  111.528897][ T6524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  111.543139][ T6524] vhci_hcd vhci_hcd.0: Device attached
[  111.560763][ T6528] loop0: detected capacity change from 0 to 1024
[  111.567741][ T6528] EXT4-fs: Ignoring removed orlov option
[  111.573534][   T36] vhci_hcd: vhci_device speed not set
[  111.575590][ T6528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.653833][ T6522] loop9: detected capacity change from 0 to 7
[  111.660037][ T6522] Buffer I/O error on dev loop9, logical block 0, async page read
[  111.668074][ T6522] Buffer I/O error on dev loop9, logical block 0, async page read
[  111.675933][ T6522]  loop9: unable to read partition table
[  111.681908][ T6522] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  111.681908][ T6522] 
) failed (rc=-5)
[  111.705281][ T6532] xt_CT: You must specify a L4 protocol and not use inversions on it
[  111.718750][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'.
[  111.830877][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.970174][ T3421] tipc: Node number set to 1
[  112.055970][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.922'.
[  112.064880][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'.
[  112.344624][ T6525] vhci_hcd: connection closed
[  112.344841][   T52] vhci_hcd: stop threads
[  112.353798][   T52] vhci_hcd: release socket
[  112.358229][   T52] vhci_hcd: disconnect device
[  112.391979][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.930'.
[  112.602376][ T6565] loop5: detected capacity change from 0 to 1024
[  112.609379][ T6565] EXT4-fs: Ignoring removed orlov option
[  112.740682][ T6570] xt_CT: You must specify a L4 protocol and not use inversions on it
[  112.753417][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'.
[  112.890402][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.935'.
[  112.899355][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'.
[  112.946726][   T29] kauditd_printk_skb: 246 callbacks suppressed
[  112.946774][   T29] audit: type=1326 audit(1763675658.907:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.5.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  113.098419][   T29] audit: type=1326 audit(1763675658.907:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.5.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  113.282914][ T6590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.304887][ T6590] syzkaller0: entered promiscuous mode
[  113.310491][ T6590] syzkaller0: entered allmulticast mode
[  113.352406][ T6590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  113.380770][ T6590] tipc: Resetting bearer <eth:syzkaller0>
[  113.405695][ T6589] tipc: Resetting bearer <eth:syzkaller0>
[  113.571029][ T6589] tipc: Disabling bearer <eth:syzkaller0>
[  113.652188][ T6603] loop5: detected capacity change from 0 to 1024
[  113.665883][ T6603] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  113.676860][ T6603] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  113.687881][ T6603] JBD2: no valid journal superblock found
[  113.693647][ T6603] EXT4-fs (loop5): Could not load journal inode
[  113.740388][    T9] usb 3-1: enqueue for inactive port 0
[  113.760837][    T9] usb 3-1: enqueue for inactive port 0
[  113.897241][    T9] vhci_hcd: vhci_device speed not set
[  113.987617][   T29] audit: type=1326 audit(1763675659.937:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1ed2f749 code=0x7ffc0000
[  114.010980][   T29] audit: type=1326 audit(1763675659.937:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa1ed2df90 code=0x7ffc0000
[  114.017029][ T6607] loop1: detected capacity change from 0 to 512
[  114.034475][   T29] audit: type=1326 audit(1763675659.937:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa1ed2df90 code=0x7ffc0000
[  114.064066][   T29] audit: type=1326 audit(1763675659.937:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1ed2f749 code=0x7ffc0000
[  114.067915][ T6607] EXT4-fs: Ignoring removed nobh option
[  114.087369][   T29] audit: type=1326 audit(1763675659.937:7754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa1ed2f749 code=0x7ffc0000
[  114.116272][   T29] audit: type=1326 audit(1763675659.937:7755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1ed2f749 code=0x7ffc0000
[  114.119962][ T6607] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  114.139618][   T29] audit: type=1326 audit(1763675659.937:7756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1ed2f749 code=0x7ffc0000
[  114.139642][   T29] audit: type=1326 audit(1763675659.937:7757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa1ed2f749 code=0x7ffc0000
[  114.197723][ T6607] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  114.200969][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.207806][ T6607] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.946: Corrupt directory, running e2fsck is recommended
[  114.226368][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.230170][ T6607] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  114.236669][ T6597] nfs: Unknown parameter '@'
[  114.251930][ T6603] loop5: detected capacity change from 0 to 512
[  114.259040][ T6607] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.946: corrupted in-inode xattr: invalid ea_ino
[  114.272555][ T6607] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.946: couldn't read orphan inode 15 (err -117)
[  114.291123][ T6603] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  114.299090][ T6603] EXT4-fs (loop5): orphan cleanup on readonly fs
[  114.306683][ T6603] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.938: corrupted inode contents
[  114.318690][ T6603] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #16: comm syz.5.938: mark_inode_dirty error
[  114.330306][ T6603] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.938: corrupted inode contents
[  114.342141][ T6603] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.938: mark_inode_dirty error
[  114.360269][ T6603] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.938: corrupted inode contents
[  114.372223][ T6603] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem
[  114.381218][ T6603] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.938: corrupted inode contents
[  114.393629][ T6603] EXT4-fs error (device loop5): ext4_truncate:4637: inode #16: comm syz.5.938: mark_inode_dirty error
[  114.405204][ T6603] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem
[  114.414474][ T6603] EXT4-fs (loop5): 1 truncate cleaned up
[  114.420349][ T3344] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1
[  114.545542][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'.
[  115.368882][ T6644] 9pnet: Could not find request transport: r
[  115.514536][ T6650] xt_CT: You must specify a L4 protocol and not use inversions on it
[  115.714077][ T6653] loop5: detected capacity change from 0 to 512
[  115.720663][ T6653] EXT4-fs: Ignoring removed nobh option
[  115.730581][ T6653] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  115.742230][ T6653] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  115.752295][ T6653] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.959: Corrupt directory, running e2fsck is recommended
[  115.765957][ T6653] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  115.774538][ T6653] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.959: corrupted in-inode xattr: invalid ea_ino
[  115.790189][ T6653] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.959: couldn't read orphan inode 15 (err -117)
[  115.850231][ T6659] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  115.856751][ T6659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  115.864347][ T6659] vhci_hcd vhci_hcd.0: Device attached
[  115.980053][ T6665] loop1: detected capacity change from 0 to 2048
[  115.999047][ T6665] EXT4-fs: Ignoring removed bh option
[  116.031016][ T6665] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  116.069441][ T6665] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  116.081718][ T6665] EXT4-fs (loop1): This should not happen!! Data will be lost
[  116.081718][ T6665] 
[  116.091430][ T6665] EXT4-fs (loop1): Total free blocks count 0
[  116.097420][ T6665] EXT4-fs (loop1): Free/Dirty block details
[  116.103407][ T6665] EXT4-fs (loop1): free_blocks=2415919104
[  116.109115][ T6665] EXT4-fs (loop1): dirty_blocks=16
[  116.110143][ T2966] usb 11-1: new low-speed USB device number 4 using vhci_hcd
[  116.114275][ T6665] EXT4-fs (loop1): Block reservation details
[  116.127558][ T6665] EXT4-fs (loop1): i_reserved_data_blocks=1
[  116.863904][ T6660] vhci_hcd: connection reset by peer
[  116.874578][ T3344] vhci_hcd: stop threads
[  116.879626][ T3344] vhci_hcd: release socket
[  116.884088][ T3344] vhci_hcd: disconnect device
[  117.146738][ T6684] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.153736][ T6684] syzkaller0: entered promiscuous mode
[  117.159226][ T6684] syzkaller0: entered allmulticast mode
[  117.167635][ T6684] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  117.205090][ T6684] tipc: Resetting bearer <eth:syzkaller0>
[  117.211618][ T6683] tipc: Resetting bearer <eth:syzkaller0>
[  117.218960][ T6683] tipc: Disabling bearer <eth:syzkaller0>
[  117.499860][ T6700] __nla_validate_parse: 4 callbacks suppressed
[  117.499876][ T6700] netlink: 88 bytes leftover after parsing attributes in process `syz.4.972'.
[  117.516214][ T6697] loop1: detected capacity change from 0 to 2048
[  117.532274][ T6697] EXT4-fs: Ignoring removed bh option
[  117.553314][ T6697] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  117.572166][ T6697] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  117.584384][ T6697] EXT4-fs (loop1): This should not happen!! Data will be lost
[  117.584384][ T6697] 
[  117.594041][ T6697] EXT4-fs (loop1): Total free blocks count 0
[  117.600089][ T6697] EXT4-fs (loop1): Free/Dirty block details
[  117.606154][ T6697] EXT4-fs (loop1): free_blocks=2415919104
[  117.612006][ T6697] EXT4-fs (loop1): dirty_blocks=16
[  117.617283][ T6697] EXT4-fs (loop1): Block reservation details
[  117.623289][ T6697] EXT4-fs (loop1): i_reserved_data_blocks=1
[  117.732063][ T6710] loop5: detected capacity change from 0 to 4096
[  117.739276][ T6710] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  117.796868][ T6716] loop1: detected capacity change from 0 to 2048
[  117.803793][ T6716] EXT4-fs: Ignoring removed bh option
[  117.824925][ T6717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.832497][ T6717] syzkaller0: entered promiscuous mode
[  117.837978][ T6717] syzkaller0: entered allmulticast mode
[  117.848144][ T6717] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  117.856199][ T6719] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  117.862700][ T6719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  117.870302][ T6719] vhci_hcd vhci_hcd.0: Device attached
[  117.878062][ T6717] tipc: Resetting bearer <eth:syzkaller0>
[  117.884544][ T6714] tipc: Resetting bearer <eth:syzkaller0>
[  117.891619][ T6714] tipc: Disabling bearer <eth:syzkaller0>
[  117.911534][ T6716] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  117.936597][ T6716] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  117.948788][ T6716] EXT4-fs (loop1): This should not happen!! Data will be lost
[  117.948788][ T6716] 
[  117.958430][ T6716] EXT4-fs (loop1): Total free blocks count 0
[  117.964439][ T6716] EXT4-fs (loop1): Free/Dirty block details
[  117.970349][ T6716] EXT4-fs (loop1): free_blocks=2415919104
[  117.976095][ T6716] EXT4-fs (loop1): dirty_blocks=16
[  117.981223][ T6716] EXT4-fs (loop1): Block reservation details
[  117.987196][ T6716] EXT4-fs (loop1): i_reserved_data_blocks=1
[  118.658699][ T6720] vhci_hcd: connection closed
[  118.658987][ T3445] vhci_hcd: stop threads
[  118.667945][ T3445] vhci_hcd: release socket
[  118.672379][ T3445] vhci_hcd: disconnect device
[  118.680706][   T29] kauditd_printk_skb: 187 callbacks suppressed
[  118.680719][   T29] audit: type=1326 audit(1763675664.647:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  118.710566][   T29] audit: type=1326 audit(1763675664.647:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.5.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864682f749 code=0x7ffc0000
[  118.781539][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'.
[  118.967181][   T29] audit: type=1326 audit(1763675664.927:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  118.991050][   T29] audit: type=1326 audit(1763675664.927:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  119.014735][   T29] audit: type=1326 audit(1763675664.927:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  119.038131][   T29] audit: type=1326 audit(1763675664.927:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  119.061528][   T29] audit: type=1326 audit(1763675664.927:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  119.093745][   T29] audit: type=1326 audit(1763675664.927:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  119.117140][   T29] audit: type=1326 audit(1763675664.927:7952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  119.140476][   T29] audit: type=1326 audit(1763675664.927:7953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6740 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  119.228098][ T6748] loop5: detected capacity change from 0 to 2048
[  119.248152][ T6750] loop1: detected capacity change from 0 to 1024
[  119.255580][ T6750] EXT4-fs: Ignoring removed orlov option
[  119.263988][ T6748] EXT4-fs: Ignoring removed bh option
[  119.305218][ T6748] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  119.356087][ T6748] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  119.368301][ T6748] EXT4-fs (loop5): This should not happen!! Data will be lost
[  119.368301][ T6748] 
[  119.378060][ T6748] EXT4-fs (loop5): Total free blocks count 0
[  119.384045][ T6748] EXT4-fs (loop5): Free/Dirty block details
[  119.389958][ T6748] EXT4-fs (loop5): free_blocks=2415919104
[  119.395678][ T6748] EXT4-fs (loop5): dirty_blocks=16
[  119.400856][ T6748] EXT4-fs (loop5): Block reservation details
[  119.406891][ T6748] EXT4-fs (loop5): i_reserved_data_blocks=1
[  119.476872][ T6760] xt_CT: You must specify a L4 protocol and not use inversions on it
[  119.487067][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'.
[  119.617753][ T6765] netlink: 332 bytes leftover after parsing attributes in process `syz.1.995'.
[  119.644477][ T6767] loop1: detected capacity change from 0 to 764
[  119.671024][ T6767] 9pnet: Could not find request transport: r
[  119.870176][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.878619][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.034362][ T6776] loop1: detected capacity change from 0 to 512
[  120.041139][ T6776] EXT4-fs: Ignoring removed nobh option
[  120.047837][ T6776] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  120.059339][ T6776] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  120.069427][ T6776] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.997: Corrupt directory, running e2fsck is recommended
[  120.130950][ T6776] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  120.149730][ T6776] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.997: corrupted in-inode xattr: invalid ea_ino
[  120.241239][ T6776] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.997: couldn't read orphan inode 15 (err -117)
[  120.626787][ T6785] loop5: detected capacity change from 0 to 2048
[  120.635672][ T6791] loop1: detected capacity change from 0 to 1024
[  120.650735][ T6791] EXT4-fs: Ignoring removed orlov option
[  120.660436][ T6785] EXT4-fs: Ignoring removed bh option
[  120.743733][ T6785] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  120.793290][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'.
[  120.833144][ T6785] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  120.845473][ T6785] EXT4-fs (loop5): This should not happen!! Data will be lost
[  120.845473][ T6785] 
[  120.855226][ T6785] EXT4-fs (loop5): Total free blocks count 0
[  120.861227][ T6785] EXT4-fs (loop5): Free/Dirty block details
[  120.867390][ T6785] EXT4-fs (loop5): free_blocks=2415919104
[  120.873117][ T6785] EXT4-fs (loop5): dirty_blocks=16
[  120.878219][ T6785] EXT4-fs (loop5): Block reservation details
[  120.884227][ T6785] EXT4-fs (loop5): i_reserved_data_blocks=1
[  121.180444][ T2966] usb 11-1: enqueue for inactive port 0
[  121.189327][ T2966] usb 11-1: enqueue for inactive port 0
[  121.272242][ T2966] vhci_hcd: vhci_device speed not set
[  121.339328][ T6809] loop1: detected capacity change from 0 to 1024
[  121.351357][ T6809] EXT4-fs: Ignoring removed orlov option
[  121.469484][ T6812] xt_CT: You must specify a L4 protocol and not use inversions on it
[  121.479835][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[  122.112733][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'.
[  122.883534][ T6855] loop1: detected capacity change from 0 to 8192
[  122.923496][ T6855]  loop1: p1 < > p3 < > p4
[  122.927919][ T6855] loop1: partition table partially beyond EOD, truncated
[  122.946656][ T6859] loop5: detected capacity change from 0 to 1024
[  122.953230][ T6855] loop1: p1 start 4294967040 is beyond EOD, truncated
[  122.963825][ T6859] EXT4-fs: Ignoring removed orlov option
[  122.972387][ T6855] loop1: p4 start 8388608 is beyond EOD, truncated
[  123.086966][ T6868] xt_CT: You must specify a L4 protocol and not use inversions on it
[  123.139100][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1022'.
[  123.483241][ T6892] usb usb3: usbfs: process 6892 (syz.5.1029) did not claim interface 0 before use
[  123.493703][ T6892] FAULT_INJECTION: forcing a failure.
[  123.493703][ T6892] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.506873][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.5.1029 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  123.506981][ T6892] Tainted: [W]=WARN
[  123.506986][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  123.506997][ T6892] Call Trace:
[  123.507004][ T6892]  <TASK>
[  123.507013][ T6892]  __dump_stack+0x1d/0x30
[  123.507062][ T6892]  dump_stack_lvl+0xe8/0x140
[  123.507080][ T6892]  dump_stack+0x15/0x1b
[  123.507096][ T6892]  should_fail_ex+0x265/0x280
[  123.507156][ T6892]  should_fail+0xb/0x20
[  123.507171][ T6892]  should_fail_usercopy+0x1a/0x20
[  123.507189][ T6892]  _copy_from_user+0x1c/0xb0
[  123.507212][ T6892]  kstrtouint_from_user+0x69/0xf0
[  123.507306][ T6892]  ? 0xffffffff81000000
[  123.507318][ T6892]  ? selinux_file_permission+0x1e4/0x320
[  123.507349][ T6892]  proc_fail_nth_write+0x50/0x160
[  123.507447][ T6892]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  123.507471][ T6892]  vfs_write+0x269/0x960
[  123.507512][ T6892]  ? vfs_read+0x4e6/0x770
[  123.507531][ T6892]  ? __rcu_read_unlock+0x4f/0x70
[  123.507593][ T6892]  ? __fget_files+0x184/0x1c0
[  123.507617][ T6892]  ? finish_task_switch+0xad/0x2b0
[  123.507657][ T6892]  ksys_write+0xda/0x1a0
[  123.507729][ T6892]  __x64_sys_write+0x40/0x50
[  123.507751][ T6892]  x64_sys_call+0x2802/0x3000
[  123.507774][ T6892]  do_syscall_64+0xd2/0x200
[  123.507792][ T6892]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  123.507815][ T6892]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  123.507890][ T6892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.507911][ T6892] RIP: 0033:0x7f864682e1ff
[  123.507924][ T6892] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  123.508010][ T6892] RSP: 002b:00007f864528f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  123.508029][ T6892] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f864682e1ff
[  123.508104][ T6892] RDX: 0000000000000001 RSI: 00007f864528f0a0 RDI: 0000000000000007
[  123.508171][ T6892] RBP: 00007f864528f090 R08: 0000000000000000 R09: 0000000000000000
[  123.508183][ T6892] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  123.508192][ T6892] R13: 00007f8646a86038 R14: 00007f8646a85fa0 R15: 00007fffaeab51d8
[  123.508212][ T6892]  </TASK>
[  123.732414][   T29] kauditd_printk_skb: 2208 callbacks suppressed
[  123.732472][   T29] audit: type=1326 audit(1763675669.577:10162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.0.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1ed2f749 code=0x7ffc0000
[  123.762162][   T29] audit: type=1326 audit(1763675669.577:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.0.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1ed2f749 code=0x7ffc0000
[  123.866404][   T29] audit: type=1326 audit(1763675669.827:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  123.890341][ T6896] wireguard0: entered promiscuous mode
[  123.895820][ T6896] wireguard0: entered allmulticast mode
[  123.915338][   T29] audit: type=1326 audit(1763675669.827:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  123.938933][   T29] audit: type=1326 audit(1763675669.837:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29ceb2df90 code=0x7ffc0000
[  123.962433][   T29] audit: type=1326 audit(1763675669.837:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29ceb2df90 code=0x7ffc0000
[  123.985975][   T29] audit: type=1326 audit(1763675669.837:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  124.009692][   T29] audit: type=1326 audit(1763675669.837:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  124.033220][   T29] audit: type=1326 audit(1763675669.837:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  124.056697][   T29] audit: type=1326 audit(1763675669.837:10171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ceb2f749 code=0x7ffc0000
[  124.323006][ T6917] loop1: detected capacity change from 0 to 1024
[  124.348341][ T6917] EXT4-fs: Ignoring removed orlov option
[  124.514189][ T6920] xt_CT: You must specify a L4 protocol and not use inversions on it
[  124.542424][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'.
[  124.610064][ T6919] ==================================================================
[  124.618164][ T6919] BUG: KCSAN: data-race in filemap_read / filemap_read
[  124.625035][ T6919] 
[  124.627353][ T6919] write to 0xffff888104863be8 of 8 bytes by task 6917 on cpu 1:
[  124.634969][ T6919]  filemap_read+0x974/0xa00
[  124.639478][ T6919]  generic_file_read_iter+0x79/0x330
[  124.644770][ T6919]  ext4_file_read_iter+0x1cc/0x290
[  124.649881][ T6919]  copy_splice_read+0x442/0x660
[  124.654731][ T6919]  splice_direct_to_actor+0x290/0x680
[  124.660106][ T6919]  do_splice_direct+0xda/0x150
[  124.664882][ T6919]  do_sendfile+0x380/0x650
[  124.669303][ T6919]  __x64_sys_sendfile64+0x105/0x150
[  124.674513][ T6919]  x64_sys_call+0x2bb4/0x3000
[  124.679181][ T6919]  do_syscall_64+0xd2/0x200
[  124.683671][ T6919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.689554][ T6919] 
[  124.691863][ T6919] read to 0xffff888104863be8 of 8 bytes by task 6919 on cpu 0:
[  124.699389][ T6919]  filemap_read+0x6f/0xa00
[  124.703806][ T6919]  generic_file_read_iter+0x79/0x330
[  124.709087][ T6919]  ext4_file_read_iter+0x1cc/0x290
[  124.714183][ T6919]  copy_splice_read+0x442/0x660
[  124.719019][ T6919]  splice_direct_to_actor+0x290/0x680
[  124.724386][ T6919]  do_splice_direct+0xda/0x150
[  124.729144][ T6919]  do_sendfile+0x380/0x650
[  124.733555][ T6919]  __x64_sys_sendfile64+0x105/0x150
[  124.738745][ T6919]  x64_sys_call+0x2bb4/0x3000
[  124.743418][ T6919]  do_syscall_64+0xd2/0x200
[  124.747909][ T6919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.753789][ T6919] 
[  124.756094][ T6919] value changed: 0x00000000000001af -> 0x00000000000001b0
[  124.763180][ T6919] 
[  124.765486][ T6919] Reported by Kernel Concurrency Sanitizer on:
[  124.771617][ T6919] CPU: 0 UID: 0 PID: 6919 Comm: syz.1.1039 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  124.782886][ T6919] Tainted: [W]=WARN
[  124.786668][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  124.796711][ T6919] ==================================================================