last executing test programs:

41.596384729s ago: executing program 4 (id=236):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

41.56997883s ago: executing program 4 (id=237):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x3, 0xff, "0062ba7d820000000001001f820dac4eb71eed"})
r2 = syz_open_pts(r1, 0x800)
r3 = dup(r2)
fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)

41.527485461s ago: executing program 4 (id=239):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

41.428398452s ago: executing program 4 (id=245):
r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r3 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001e80)=[{}])
fcntl$lock(r2, 0x26, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")
mlockall(0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000001c0)={0x1, 'veth0_vlan\x00'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r5 = syz_pidfd_open(r0, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000000)=0x4b9, 0x4)
setns(r5, 0x24020000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2008885, &(0x7f0000000440)={[], [{@obj_type={'obj_type', 0x3d, 'min_batch_time'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, '#:^\''}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}]}, 0x1, 0x652, &(0x7f0000002440)="$eJzs3c9rVNsdAPDvnUwmv9omSmlrFzVQikJrYqIWKYXquiL2x67dpCaKNRoxKW1EMILdFLrrQuiqi9o/o4Jb/4EuCqWrxwN5vOfi+ZDnPO7N3Ml1Mj/ya2bi5POBMeecm3vPuep3zr1nzpkbwJE1HREzEXEiIu4lEZOFbeXsz1L2S+nvvf704fX0lUS1+qtPknj4KNkoHiup/Zyo7fzl5GbR8aHt9a6uP7i9sLy8dL+Wn127c292df3BmVt3Fm4u3Vy6O//j+YsXzl+4OHe24zmMtdl2rJC+8uT3f5z8y9Xf/PPvb5O5f/33ahKX0rPLpOfVuO9Ix5rbm47pqG56UyxP/14v7vPYh8Xnk/n/ky1JYwGHWhoDwxHx7ZiMocK/5mT8+Rd9bRjQVdUk8j4KOHKSPcX/6ME3BOix/Dogv7dvdh/cRJM7euBD8+ry5oDUZuwPR0Qe/+VszC9iNBsbGH+dvDfOk0RE55G5ztI6Xr64+iR9RYtxOKA7Nh7no9yN/X+SxeZUjGa58del9+K/VHil5b/cTaWVreR0wybxD72z8TgivlPr/yuxm/gvRyH+f7fH+sU/AAAAAAAAHJznlyPiR83m/5Xq838qTeb/TETEpQOov/Pnf6V8iV5yANUBBa8uR/y06fzfPOxiaqiW+3o2H2A4uXFreelsRHwjIk7H8Eian2s4bqmQPvPX409b1V+c/5e+0vpfvihOLy59XG5YiLu4sLbg3QD279XjiO9m839P1kren/+T9v9JQ/+fvx/c22Edx3/w7FoxX61WH+Xp5vG/ORcY6K7qPyJONe3/tzrYpP33c8xm1wOz+VXBdt97W1ho1ED8Q/+k/f946/ivh239+3pWd3f8SkScWy+3Cv8dxH/z6/9K8uuhKCwl+NPC2tr9uYhKcmV7+fzu2gyDKo+HPF7S+D/9/fbjf/Xr/0IcjkXERtMaKttKvvVu4v+t2qP/h/5J43+x/fX/VFLr/yPr/+sXAjtOzD+b+nd2pCbfC3dtR/3/+axPP10rycb/gJrStpKdBmhfmgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7hSRHwtktJMPV0qzcxETETEN2O8tLyyuvbDGyt/uLuYbsue/1/Kn/Q7uZlP8uf/TxXy8w35cxFxLCL+NjSW5Weurywv9vvkAQAAAAAAAAAAAAAAAAAA4JCYyNb8V0ca1/+nPhrqd+uArivXfnaI99FetAXorfKe96yOHGhDgJ7be/wDH7qdx/9wV9sB9F7r+H/ztprJ80lS3PpZl9sFdJ/rfzi6CvFf2cVuPh6EAdCk/5/uRzuAXms7pve0nvLpPwwk9/8AAAAAADBQjp18/p8kIjZ+Mpa9ojAHyGR/GGylfjcA6BtzeOHoKq/0uwVAv3S+x/95T9oB9M/Wuv4vqs22b87+H2u7JwAAAAAAAAAAAADQXadOWP8PR9X29f/PCmlz+2GQtVn/3yz4fV0ADJDWj/7Q98Ogc48PdOrtWz/9z3UCAAAAAAAAAAAAAPTM6IPbC8vLS/dX1/eZiIj/VZOI/R6nReK3DSUnI+JnXaqrq4mNhUPRjANNvOvOkYcj4nCc4K4ToxGxj93zr+Do41n0+X0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo+yoAAP//urkn6A==")
gettid()
r7 = signalfd4(r4, &(0x7f0000000240)={[0x8]}, 0x8, 0x800)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x3, 0x0, 0x0, 0x0, 0xb, 0xe1dc8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x9}, 0x4c58, 0x0, 0x80, 0x1, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r7, 0x0)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20)
socket(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x20)

39.031249017s ago: executing program 4 (id=288):
mkdir(0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000020000000130000000000000018110000b3ef15e989b5ffbfe08167317212f34906a361f4c2b904aa1580d67487b04efa7f46a46851", @ANYRES32=<r3=>r1, @ANYRES16=r1], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x10)
r4 = syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000680)='./file0\x00', 0x14c26, &(0x7f0000000b40)=ANY=[@ANYRES8=r3], 0xfd, 0x6b9, &(0x7f00000012c0)="$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")
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, <r6=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r8=>r4, {0xa}}, './file0\x00'})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r9 = open(&(0x7f0000000040)='./file2\x00', 0x81, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r9, 0x1260, 0x3)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r11}, 0x10)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="00000000000ff4000003000000000000850000000c000004b7000000000000008000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000300), &(0x7f00000002c0)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r12, &(0x7f0000000780)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)

38.345873607s ago: executing program 4 (id=293):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = open(0x0, 0x14507e, 0x0)
io_setup(0x5ff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5}])
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x8001, 0x0, r2, 0x7, '\x00', 0x0, r5, 0x1, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0xd, 0xfc, 0x0, 0x1, 0x8264, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x12019, 0x10000, 0x3, 0x5, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8947, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000110}, 0x40004)

38.345308127s ago: executing program 32 (id=293):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = open(0x0, 0x14507e, 0x0)
io_setup(0x5ff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5}])
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x8001, 0x0, r2, 0x7, '\x00', 0x0, r5, 0x1, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0xd, 0xfc, 0x0, 0x1, 0x8264, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x12019, 0x10000, 0x3, 0x5, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8947, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000110}, 0x40004)

2.231794397s ago: executing program 5 (id=1014):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x80000000000}, 0x18)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0xf5, 0x0, 0x1, 0x0, 0x6, @random="c205f7157bc3"}, 0x14)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

2.05821392s ago: executing program 5 (id=1019):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000002c0)=@req={0xfffffffc, 0xc, 0x6, 0x5e5f}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @timestamp, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0)
r6 = syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x5522, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

1.317938361s ago: executing program 1 (id=1038):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000040), &(0x7f0000000200)=r3}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

1.243367981s ago: executing program 1 (id=1039):
socket$pppoe(0x18, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0})
syz_io_uring_setup(0x263f, 0x0, 0x0, 0x0)
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000011c0)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r2 = creat(0x0, 0x1f4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0)
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

1.186464143s ago: executing program 1 (id=1043):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x20000000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
dup(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

1.131752903s ago: executing program 5 (id=1044):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

1.069210344s ago: executing program 5 (id=1046):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

1.059779254s ago: executing program 1 (id=1047):
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB="00000000000000000040000000000000000000000000000000000000661d80d33ba502bb9115569019eab661578f6c63e665922bc89b55ecd73acb267ad567570c523936d0c3606bba1d54cdb13f48e8f6c1e9b4031ac49c53d696df4e5e7a122badecb7acb9c9fd8b8d705150bc6b7bf0b02e668aedf370b44d2720680c439419a4196a2037d0f325d168f7cec98c7f863f7e10e23576cc85177d5036546ebf37f71ab99634ac1bf7633cf4d8765c88769e8d621d40dee9aa0e898e659a7b2153"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x7ffd)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}, {0x6}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000740)={0x3, 0x4, "a2b478", 0x7f, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40)

1.047729904s ago: executing program 5 (id=1048):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000400b000000000000110200000001000000030000000000000904000000ffffffff000000120100000009000000000000080200000000305f6100f3a862f5dbb04d4a19489b450d6f4acb2b5d6ec3d433e1a60f6054e466e4a643a838b73a7176c7b2202ac4e8e46b82183b282427b6fd094ba1763b89ba074749281c30b1024b853ba7bcca18dcc85501ffe7d49135c7c425d11f7f53e067ed3f"], 0x0, 0x51, 0x0, 0x0, 0xfffffffd, 0x10000, @value}, 0x28)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000700000000000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r7}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=")
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r9 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r10 = timerfd_create(0x0, 0x0)
readv(r10, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)

890.379317ms ago: executing program 0 (id=1052):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x891f, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040))
getxattr(0x0, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0)

879.643087ms ago: executing program 1 (id=1053):
socket$pppoe(0x18, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0})
syz_io_uring_setup(0x263f, 0x0, 0x0, 0x0)
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000011c0)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r2 = creat(0x0, 0x1f4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0)
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

799.805808ms ago: executing program 0 (id=1054):
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003300), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000003340)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800)

799.177158ms ago: executing program 1 (id=1055):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000002c0)=@req={0xfffffffc, 0xc, 0x6, 0x5e5f}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @timestamp, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_BULK(r5, 0x5523, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x5522, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

774.732099ms ago: executing program 0 (id=1057):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x20000000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
dup(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

665.36915ms ago: executing program 3 (id=1058):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

652.68229ms ago: executing program 3 (id=1059):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

626.75069ms ago: executing program 0 (id=1060):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, 0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

606.273061ms ago: executing program 0 (id=1061):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x1000000201005)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000", @ANYRES32], 0x38}}, 0x0)

591.996351ms ago: executing program 3 (id=1062):
socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x8, 0x0, 0x0}}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x86000, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)

509.185642ms ago: executing program 2 (id=1063):
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB="00000000000000000040000000000000000000000000000000000000661d80d33ba502bb9115569019eab661578f6c63e665922bc89b55ecd73acb267ad567570c523936d0c3606bba1d54cdb13f48e8f6c1e9b4031ac49c53d696df4e5e7a122badecb7acb9c9fd8b8d705150bc6b7bf0b02e668aedf370b44d2720680c439419a4196a2037d0f325d168f7cec98c7f863f7e10e23576cc85177d5036546ebf37f71ab99634ac1bf7633cf4d8765c88769e8d621d40dee9aa0e898e659a7b2153"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x7ffd)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}, {0x6}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000740)={0x3, 0x4, "a2b478", 0x7f, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40)

358.137074ms ago: executing program 0 (id=1064):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000400b000000000000110200000001000000030000000000000904000000ffffffff000000120100000009000000000000080200000000305f6100f3a862f5dbb04d4a19489b450d6f4acb2b5d6ec3d433e1a60f6054e466e4a643a838b73a7176c7b2202ac4e8e46b82183b282427b6fd094ba1763b89ba074749281c30b1024b853ba7bcca18dcc85501ffe7d49135c7c425d11f7f53e067ed3f"], 0x0, 0x51, 0x0, 0x0, 0xfffffffd, 0x10000, @value}, 0x28)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000700000000000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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")
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
r7 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = timerfd_create(0x0, 0x0)
readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)

309.788045ms ago: executing program 2 (id=1065):
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
readahead(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40009)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe(0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x9)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000009, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000280)={0x2000000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18)
kexec_load(0x4, 0xa, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

266.453236ms ago: executing program 2 (id=1066):
socket$pppoe(0x18, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0})
syz_io_uring_setup(0x263f, 0x0, 0x0, 0x0)
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000011c0)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r2 = creat(0x0, 0x1f4)
r3 = dup2(r2, r2)
ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0)
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

227.394597ms ago: executing program 3 (id=1067):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x80000000000}, 0x18)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0xf5, 0x0, 0x1, 0x0, 0x6, @random="c205f7157bc3"}, 0x14)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

142.334168ms ago: executing program 2 (id=1068):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, 0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

92.509628ms ago: executing program 2 (id=1069):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'})

80.412459ms ago: executing program 3 (id=1070):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000f14010029b97800fedbdf250d0045"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010)

72.830149ms ago: executing program 5 (id=1071):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080))
io_uring_enter(r2, 0x27df, 0x0, 0x6a, 0x0, 0x0)

46.900069ms ago: executing program 2 (id=1072):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

0s ago: executing program 3 (id=1073):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000400b000000000000110200000001000000030000000000000904000000ffffffff000000120100000009000000000000080200000000305f6100f3a862f5dbb04d4a19489b450d6f4acb2b5d6ec3d433e1a60f6054e466e4a643a838b73a7176c7b2202ac4e8e46b82183b282427b6fd094ba1763b89ba074749281c30b1024b853ba7bcca18dcc85501ffe7d49135c7c425d11f7f53e067ed3f"], 0x0, 0x51, 0x0, 0x0, 0xfffffffd, 0x10000, @value}, 0x28)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000700000000000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r7}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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")
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r9 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r10 = timerfd_create(0x0, 0x0)
readv(r10, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)

kernel console output (not intermixed with test programs):

 T4188] netlink: 9 bytes leftover after parsing attributes in process `syz.1.282'.
[   45.971537][ T4188] 1{X功: entered promiscuous mode
[   45.977325][ T4188] 1{X功: left allmulticast mode
[   45.989830][ T4188] netlink: 5 bytes leftover after parsing attributes in process `syz.1.282'.
[   46.007826][ T4191] syz.0.279: attempt to access beyond end of device
[   46.007826][ T4191] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[   46.012042][ T4195] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=4195 comm=+}[@
[   46.035397][ T4188] 0{X功: renamed from 
31{X功
[   46.044079][ T4188] 0{X功: left promiscuous mode
[   46.049381][ T4188] 0{X功: entered allmulticast mode
[   46.061503][ T4191] syz.0.279: attempt to access beyond end of device
[   46.061503][ T4191] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[   46.076837][ T4188] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[   46.126612][ T4191] syz.0.279: attempt to access beyond end of device
[   46.126612][ T4191] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[   46.194543][ T4191] syz.0.279: attempt to access beyond end of device
[   46.194543][ T4191] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[   46.234836][ T3315] EXT4-fs error (device loop4): __ext4_iget:5379: inode #15: block 1803188595: comm syz-executor: invalid block
[   46.262764][ T4191] syz.0.279: attempt to access beyond end of device
[   46.262764][ T4191] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[   46.264952][ T3315] EXT4-fs error (device loop4): __ext4_iget:5379: inode #15: block 1803188595: comm syz-executor: invalid block
[   46.342357][ T4191] syz.0.279: attempt to access beyond end of device
[   46.342357][ T4191] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[   46.396896][ T4191] syz.0.279: attempt to access beyond end of device
[   46.396896][ T4191] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[   46.437343][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'.
[   46.446306][ T4202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[   46.455714][ T4191] syz.0.279: attempt to access beyond end of device
[   46.455714][ T4191] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[   46.520825][ T4100] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.565662][ T4205] loop1: detected capacity change from 0 to 512
[   46.783910][ T4205] EXT4-fs (loop1): 1 orphan inode deleted
[   46.801438][ T4223] SELinux: syz.0.292 (4223) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   46.815545][   T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1
[   46.832248][ T4205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.882048][ T4205] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.893167][   T29] kauditd_printk_skb: 280 callbacks suppressed
[   46.893179][   T29] audit: type=1400 audit(1748615013.270:1315): avc:  denied  { mount } for  pid=4199 comm="syz.1.286" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   46.945772][   T29] audit: type=1400 audit(1748615013.330:1316): avc:  denied  { remount } for  pid=4199 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   47.031470][   T29] audit: type=1400 audit(1748615013.370:1317): avc:  denied  { create } for  pid=4225 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   47.052474][   T29] audit: type=1400 audit(1748615013.370:1318): avc:  denied  { read } for  pid=4227 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   47.073977][   T29] audit: type=1400 audit(1748615013.370:1319): avc:  denied  { open } for  pid=4227 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   47.098176][   T29] audit: type=1400 audit(1748615013.370:1320): avc:  denied  { mounton } for  pid=4227 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   47.119855][   T29] audit: type=1326 audit(1748615013.390:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97af2ce969 code=0x7ffc0000
[   47.143292][   T29] audit: type=1326 audit(1748615013.390:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97af2ce969 code=0x7ffc0000
[   47.166901][   T29] audit: type=1326 audit(1748615013.390:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97af2ce969 code=0x7ffc0000
[   47.190308][   T29] audit: type=1326 audit(1748615013.390:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97af2ce969 code=0x7ffc0000
[   47.214432][ T4202] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   47.270201][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.409896][   T51] bridge_slave_1: left allmulticast mode
[   47.415708][   T51] bridge_slave_1: left promiscuous mode
[   47.421522][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.544549][ T4249] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   47.551210][ T4249] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   47.559571][ T4249] vhci_hcd vhci_hcd.0: Device attached
[   47.576321][ T4250] vhci_hcd: connection closed
[   47.576628][   T51] bridge_slave_0: left allmulticast mode
[   47.587582][   T51] bridge_slave_0: left promiscuous mode
[   47.594025][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.602053][  T266] vhci_hcd: stop threads
[   47.607214][  T266] vhci_hcd: release socket
[   47.612493][  T266] vhci_hcd: disconnect device
[   47.703273][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   47.722565][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   47.735499][ T4272] loop1: detected capacity change from 0 to 128
[   47.742681][   T51] bond0 (unregistering): Released all slaves
[   47.817104][   T51] hsr_slave_0: left promiscuous mode
[   47.828497][   T51] hsr_slave_1: left promiscuous mode
[   47.834235][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.846615][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.887223][   T51] team0 (unregistering): Port device team_slave_1 removed
[   47.917421][   T51] team0 (unregistering): Port device team_slave_0 removed
[   48.043719][ T4227] chnl_net:caif_netlink_parms(): no params data found
[   48.169381][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.177272][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.187496][ T4285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'.
[   48.196486][ T4285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'.
[   48.380598][ T4227] bridge_slave_0: entered allmulticast mode
[   48.394327][ T4309] loop3: detected capacity change from 0 to 512
[   48.400687][ T4227] bridge_slave_0: entered promiscuous mode
[   48.443504][ T4309] EXT4-fs (loop3): 1 orphan inode deleted
[   48.453838][ T4309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.467149][   T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1
[   48.480131][ T4309] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.494470][ T4309] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   48.533590][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.540837][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.582666][ T4227] bridge_slave_1: entered allmulticast mode
[   48.591499][ T4227] bridge_slave_1: entered promiscuous mode
[   48.633672][ T4227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.654184][ T4227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.687389][ T4340] SELinux: syz.1.313 (4340) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   48.730305][ T4227] team0: Port device team_slave_0 added
[   48.749233][ T4227] team0: Port device team_slave_1 added
[   48.797458][ T4227] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.804892][ T4227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.831847][ T4227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.864572][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.893780][ T4350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.314'.
[   48.914200][ T4227] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.922415][ T4227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.950237][ T4227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.979539][ T4352] IPv6: Can't replace route, no match found
[   49.132178][ T4227] hsr_slave_0: entered promiscuous mode
[   49.141050][ T4227] hsr_slave_1: entered promiscuous mode
[   49.173611][ T4227] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   49.191555][ T4227] Cannot create hsr debugfs directory
[   49.414438][ T4227] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   49.451512][ T4227] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   49.474053][ T4227] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   49.493809][ T4227] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   49.533399][ T4387] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[   49.540582][ T4387] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   49.548789][ T4387] vhci_hcd vhci_hcd.0: Device attached
[   49.580524][ T4227] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.590343][ T4390] vhci_hcd: connection closed
[   49.590501][   T51] vhci_hcd: stop threads
[   49.600019][   T51] vhci_hcd: release socket
[   49.604717][   T51] vhci_hcd: disconnect device
[   49.616718][ T4227] 8021q: adding VLAN 0 to HW filter on device team0
[   49.635498][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'.
[   49.648414][ T4365] loop1: detected capacity change from 0 to 512
[   49.660511][ T1426] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.667958][ T1426] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.710549][ T4365] EXT4-fs (loop1): 1 orphan inode deleted
[   49.722361][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.730179][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.738871][ T4365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.748762][ T1426] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   49.768188][ T4365] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.839678][ T4227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.899321][ T4365] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   49.974728][ T4227] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.987956][ T4414] loop0: detected capacity change from 0 to 512
[   50.060942][ T4414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.087744][ T4414] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.118889][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.151608][ T4414] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   50.194970][ T4414] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   50.240201][ T4431] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.326: corrupted xattr block 19: overlapping e_value 
[   50.266980][ T4443] loop3: detected capacity change from 0 to 164
[   50.331846][ T4414] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   50.347519][ T4431] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   50.358995][ T4414] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   50.375159][ T4227] veth0_vlan: entered promiscuous mode
[   50.386489][ T4414] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   50.404693][ T4227] veth1_vlan: entered promiscuous mode
[   50.468934][ T4414] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   50.477463][ T4227] veth0_macvtap: entered promiscuous mode
[   50.503438][ T4227] veth1_macvtap: entered promiscuous mode
[   50.514608][ T4413] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   50.541422][ T4413] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.326: corrupted xattr block 19: overlapping e_value 
[   50.557595][ T4227] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.578859][ T4227] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.597813][ T4413] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[   50.608890][ T4227] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.617717][ T4227] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.626531][ T4227] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.635510][ T4227] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.672994][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.903951][ T4490] loop2: detected capacity change from 0 to 128
[   50.965787][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'.
[   51.019336][ T4463] loop3: detected capacity change from 0 to 512
[   51.028679][ T4499] IPv6: Can't replace route, no match found
[   51.042455][ T4500] bio_check_eod: 97 callbacks suppressed
[   51.042470][ T4500] syz.2.340: attempt to access beyond end of device
[   51.042470][ T4500] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[   51.090234][ T4503] SELinux: syz.0.343 (4503) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   51.098653][ T4500] syz.2.340: attempt to access beyond end of device
[   51.098653][ T4500] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[   51.128359][ T4500] syz.2.340: attempt to access beyond end of device
[   51.128359][ T4500] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[   51.154230][ T4500] syz.2.340: attempt to access beyond end of device
[   51.154230][ T4500] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   51.155333][ T4463] EXT4-fs (loop3): 1 orphan inode deleted
[   51.168837][ T4500] syz.2.340: attempt to access beyond end of device
[   51.168837][ T4500] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[   51.189123][ T4500] syz.2.340: attempt to access beyond end of device
[   51.189123][ T4500] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[   51.202809][ T1426] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   51.202887][ T4500] syz.2.340: attempt to access beyond end of device
[   51.202887][ T4500] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[   51.202920][ T4500] syz.2.340: attempt to access beyond end of device
[   51.202920][ T4500] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[   51.241915][ T4500] syz.2.340: attempt to access beyond end of device
[   51.241915][ T4500] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[   51.255902][ T4463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.256360][ T4500] syz.2.340: attempt to access beyond end of device
[   51.256360][ T4500] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[   51.390243][ T4514] loop0: detected capacity change from 0 to 164
[   51.420510][ T4463] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.450106][ T4463] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   51.453139][ T4514] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   51.494669][ T4514] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   51.503358][ T4514] rock: directory entry would overflow storage
[   51.509709][ T4514] rock: sig=0x4f50, size=4, remaining=3
[   51.515685][ T4514] iso9660: Corrupted directory entry in block 4 of inode 1792
[   51.570894][ T4522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.348'.
[   51.643415][ T4517] loop5: detected capacity change from 0 to 1024
[   51.657638][ T4519] netlink: 'syz.2.347': attribute type 13 has an invalid length.
[   51.674274][ T4517] /dev/loop5: Can't open blockdev
[   51.711484][ T4524] loop0: detected capacity change from 0 to 512
[   51.734836][ T4524] loop0: detected capacity change from 0 to 256
[   51.765260][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.918473][ T4539] loop2: detected capacity change from 0 to 128
[   51.927460][ T4535] SELinux: syz.3.355 (4535) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   51.947522][   T29] kauditd_printk_skb: 324 callbacks suppressed
[   51.947537][   T29] audit: type=1326 audit(1748615018.330:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   52.052425][ T4545] netlink: 32 bytes leftover after parsing attributes in process `syz.1.359'.
[   52.073360][ T4548] loop5: detected capacity change from 0 to 164
[   52.075631][   T29] audit: type=1326 audit(1748615018.330:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   52.125203][   T29] audit: type=1326 audit(1748615018.330:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   52.152706][   T29] audit: type=1326 audit(1748615018.330:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   52.179005][   T29] audit: type=1326 audit(1748615018.330:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   52.204352][   T29] audit: type=1326 audit(1748615018.330:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   52.232043][   T29] audit: type=1326 audit(1748615018.330:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   52.260639][   T29] audit: type=1326 audit(1748615018.330:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   52.289580][   T29] audit: type=1326 audit(1748615018.330:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   52.315119][   T29] audit: type=1326 audit(1748615018.330:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4541 comm="syz.1.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   52.390730][ T4557] IPv6: Can't replace route, no match found
[   52.442918][ T4562] IPv6: Can't replace route, no match found
[   52.537664][ T4570] loop2: detected capacity change from 0 to 256
[   52.597663][ T4559] loop1: detected capacity change from 0 to 512
[   52.630294][ T4559] EXT4-fs (loop1): 1 orphan inode deleted
[   52.644036][   T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1
[   52.679848][ T4559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.711936][ T4584] netlink: 32 bytes leftover after parsing attributes in process `syz.5.372'.
[   52.752849][ T4587] loop5: detected capacity change from 0 to 512
[   52.770490][ T4559] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.808194][ T4559] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   52.825808][ T4594] loop0: detected capacity change from 0 to 128
[   52.852072][ T4587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.881361][ T4587] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.913065][ T4587] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   52.929642][ T4587] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   52.939313][ T4587] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   52.955864][ T4587] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   52.970239][ T4587] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   52.988758][ T4601] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.373: corrupted xattr block 19: overlapping e_value 
[   52.988868][ T4587] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   53.018334][ T4601] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   53.037519][ T4586] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   53.053942][ T4586] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.373: corrupted xattr block 19: overlapping e_value 
[   53.082517][ T4586] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[   53.166851][ T4227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.211259][ T4616] netlink: 32 bytes leftover after parsing attributes in process `syz.2.385'.
[   53.289321][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.314179][ T4626] loop3: detected capacity change from 0 to 256
[   53.367801][ T4630] loop1: detected capacity change from 0 to 128
[   53.435180][ T4633] netlink: 'syz.2.388': attribute type 13 has an invalid length.
[   53.470657][ T4636] loop3: detected capacity change from 0 to 164
[   53.581956][ T4642] loop2: detected capacity change from 0 to 512
[   53.614737][ T4650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.398'.
[   53.663527][ T4642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.691320][ T4642] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.713301][ T4642] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   53.756136][ T4642] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   53.777827][ T4642] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   53.794017][ T4642] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   53.803133][ T4642] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   53.817265][ T4642] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   53.826713][ T4656] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.395: corrupted xattr block 19: overlapping e_value 
[   53.842212][ T4656] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   53.864965][ T4641] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   53.889635][ T4660] loop5: detected capacity change from 0 to 256
[   53.896287][ T4641] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.395: corrupted xattr block 19: overlapping e_value 
[   53.954159][ T4641] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[   53.990968][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.008386][ T4654] loop1: detected capacity change from 0 to 512
[   54.028377][ T4664] loop2: detected capacity change from 0 to 164
[   54.043876][ T4654] EXT4-fs (loop1): 1 orphan inode deleted
[   54.051774][ T4654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.072700][ T4668] loop5: detected capacity change from 0 to 164
[   54.085986][   T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   54.102308][ T4664] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   54.132134][ T4664] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   54.139116][ T4654] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.195999][ T4664] rock: directory entry would overflow storage
[   54.203008][ T4664] rock: sig=0x4f50, size=4, remaining=3
[   54.211366][ T4664] iso9660: Corrupted directory entry in block 4 of inode 1792
[   54.230075][ T4654] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   54.310218][ T4684] netlink: 20 bytes leftover after parsing attributes in process `syz.5.409'.
[   54.418636][ T4693] loop0: detected capacity change from 0 to 164
[   54.499495][ T4683] loop3: detected capacity change from 0 to 1024
[   54.579376][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.597652][ T4683] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   54.609720][ T4683] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   54.629026][ T4683] JBD2: no valid journal superblock found
[   54.636065][ T4683] EXT4-fs (loop3): Could not load journal inode
[   54.785935][ T4706] loop1: detected capacity change from 0 to 164
[   54.803954][ T4706] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   54.821593][ T4710] loop5: detected capacity change from 0 to 128
[   54.828868][ T4706] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   54.850981][ T4713] SELinux: syz.0.424 (4713) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   54.866012][ T4706] rock: directory entry would overflow storage
[   54.872402][ T4706] rock: sig=0x4f50, size=4, remaining=3
[   54.878678][ T4706] iso9660: Corrupted directory entry in block 4 of inode 1792
[   54.931500][ T4717] loop0: detected capacity change from 0 to 164
[   55.087478][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'.
[   55.143204][ T4722] loop1: detected capacity change from 0 to 512
[   55.169963][ T4722] EXT4-fs (loop1): 1 orphan inode deleted
[   55.176213][ T4722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.189054][   T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   55.201408][ T4722] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.220382][ T4722] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   55.310463][ T4746] SELinux: syz.5.436 (4746) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   55.357961][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.437'.
[   55.398943][ T4751] loop2: detected capacity change from 0 to 164
[   55.420310][ T4751] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   55.429341][ T4753] loop5: detected capacity change from 0 to 164
[   55.434576][ T4751] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   55.454476][ T4751] rock: directory entry would overflow storage
[   55.460858][ T4751] rock: sig=0x4f50, size=4, remaining=3
[   55.466924][ T4751] iso9660: Corrupted directory entry in block 4 of inode 1792
[   55.485626][ T4756] loop5: detected capacity change from 0 to 128
[   55.578086][ T4763] netlink: 9 bytes leftover after parsing attributes in process `syz.2.444'.
[   55.592199][ T4763] 0{X功: entered promiscuous mode
[   55.597836][ T4763] 0{X功: left allmulticast mode
[   55.605867][ T4763] netlink: 5 bytes leftover after parsing attributes in process `syz.2.444'.
[   55.615977][ T4763] 1{X功: renamed from 
30{X功
[   55.629965][ T4763] 1{X功: left promiscuous mode
[   55.635505][ T4763] 1{X功: entered allmulticast mode
[   55.642859][ T4763] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[   55.698956][ T4771] loop3: detected capacity change from 0 to 164
[   55.731748][ T4769] loop5: detected capacity change from 0 to 512
[   55.759460][ T4769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.763008][ T4780] loop2: detected capacity change from 0 to 164
[   55.784880][ T4769] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.800865][ T4769] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   55.829486][ T4769] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   55.838828][ T4769] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   55.841765][ T4775] loop3: detected capacity change from 0 to 512
[   55.854773][ T4769] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   55.872728][ T4769] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   55.886976][ T4783] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.447: corrupted xattr block 19: overlapping e_value 
[   55.912649][ T4769] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   55.939112][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.955983][ T4783] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   55.967486][ T4775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.991078][ T4775] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.060645][ T4775] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   56.084329][ T4768] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   56.106716][ T4775] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   56.136168][ T4799] loop2: detected capacity change from 0 to 128
[   56.143872][ T4768] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.447: corrupted xattr block 19: overlapping e_value 
[   56.160512][ T4801] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.450: corrupted xattr block 19: overlapping e_value 
[   56.177067][ T4775] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   56.210699][ T4768] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[   56.234482][ T4801] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   56.247275][ T4803] bio_check_eod: 368 callbacks suppressed
[   56.247289][ T4803] syz.2.458: attempt to access beyond end of device
[   56.247289][ T4803] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[   56.273984][ T4775] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   56.274176][ T4227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.286412][ T4803] syz.2.458: attempt to access beyond end of device
[   56.286412][ T4803] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[   56.308907][ T4775] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   56.324703][ T4775] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   56.341236][ T4803] syz.2.458: attempt to access beyond end of device
[   56.341236][ T4803] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[   56.361709][ T4774] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   56.365028][ T4803] syz.2.458: attempt to access beyond end of device
[   56.365028][ T4803] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   56.395376][ T4774] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.450: corrupted xattr block 19: overlapping e_value 
[   56.414992][ T4803] syz.2.458: attempt to access beyond end of device
[   56.414992][ T4803] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[   56.428883][ T4774] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[   56.449041][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.744190][ T4826] IPv6: Can't replace route, no match found
[   56.752466][ T4813] loop5: detected capacity change from 0 to 1024
[   56.782999][ T4813] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   56.796744][ T4813] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   56.826007][ T4813] JBD2: no valid journal superblock found
[   56.832467][ T4813] EXT4-fs (loop5): Could not load journal inode
[   56.840170][ T4830] Zero length message leads to an empty skb
[   56.864603][ T4831] netlink: 'syz.3.468': attribute type 13 has an invalid length.
[   57.019100][ T4819] loop2: detected capacity change from 0 to 1024
[   57.049563][ T4819] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   57.062358][ T4819] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   57.077713][ T4819] JBD2: no valid journal superblock found
[   57.077835][ T4819] EXT4-fs (loop2): Could not load journal inode
[   57.114225][   T29] kauditd_printk_skb: 497 callbacks suppressed
[   57.114241][   T29] audit: type=1400 audit(1748615023.500:2150): avc:  denied  { create } for  pid=4843 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   57.139943][ T4847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.475'.
[   57.220151][   T29] audit: type=1326 audit(1748615023.600:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   57.220792][   T29] audit: type=1326 audit(1748615023.600:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   57.221108][   T29] audit: type=1326 audit(1748615023.600:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   57.221386][   T29] audit: type=1326 audit(1748615023.610:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   57.222014][   T29] audit: type=1326 audit(1748615023.610:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   57.222519][   T29] audit: type=1326 audit(1748615023.610:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   57.222847][   T29] audit: type=1326 audit(1748615023.610:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   57.223473][   T29] audit: type=1326 audit(1748615023.610:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   57.223584][   T29] audit: type=1326 audit(1748615023.610:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   57.360484][ T4858] loop0: detected capacity change from 0 to 256
[   57.414355][ T4867] SELinux: syz.3.480 (4867) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   57.674257][ T4878] loop0: detected capacity change from 0 to 512
[   57.752377][ T4881] netlink: 20 bytes leftover after parsing attributes in process `syz.5.487'.
[   57.815987][ T4878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.859173][ T4876] netlink: 'syz.3.485': attribute type 13 has an invalid length.
[   57.879091][ T4890] IPv6: Can't replace route, no match found
[   57.909292][ T4878] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.939923][ T4878] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   57.958529][ T4878] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   57.969296][ T4878] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   57.985621][ T4878] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   57.985692][ T4899] SELinux: syz.1.494 (4899) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   57.995936][ T4878] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   58.031246][ T4900] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.486: corrupted xattr block 19: overlapping e_value 
[   58.056572][ T4900] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   58.068766][ T4903] netlink: 9 bytes leftover after parsing attributes in process `syz.2.495'.
[   58.071826][ T4878] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   58.088048][ T4903] 1{X功: entered promiscuous mode
[   58.093793][ T4903] 1{X功: left allmulticast mode
[   58.101114][ T4903] 0{X功: renamed from 
31{X功
[   58.111825][ T4903] 0{X功: left promiscuous mode
[   58.117123][ T4903] 0{X功: entered allmulticast mode
[   58.138889][ T4903] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[   58.256148][ T4877] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   58.291902][ T4877] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.486: corrupted xattr block 19: overlapping e_value 
[   58.327514][ T4877] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[   58.386559][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.527002][ T4909] __nla_validate_parse: 1 callbacks suppressed
[   58.527018][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'.
[   58.563389][ T4909] loop3: detected capacity change from 0 to 512
[   58.591819][ T4909] EXT4-fs (loop3): 1 orphan inode deleted
[   58.612204][ T4909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.627578][   T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1
[   58.657844][ T4909] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.688116][ T4931] SELinux: syz.0.508 (4931) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   58.716690][ T4909] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   58.787259][ T4939] loop5: detected capacity change from 0 to 164
[   58.840376][ T4939] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   58.865365][ T4939] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   58.901751][ T4939] rock: directory entry would overflow storage
[   58.908342][ T4939] rock: sig=0x4f50, size=4, remaining=3
[   58.914440][ T4939] iso9660: Corrupted directory entry in block 4 of inode 1792
[   58.967790][ T4957] IPv6: Can't replace route, no match found
[   58.993141][ T4955] loop2: detected capacity change from 0 to 512
[   59.016490][ T4955] EXT4-fs: Ignoring removed oldalloc option
[   59.023189][ T4955] ext4: Unknown parameter 'hash'
[   59.036403][ T4961] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[   59.043423][ T4961] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   59.051514][ T4961] vhci_hcd vhci_hcd.0: Device attached
[   59.072905][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.085839][ T4962] vhci_hcd: connection closed
[   59.089614][   T31] vhci_hcd: stop threads
[   59.099165][   T31] vhci_hcd: release socket
[   59.103834][   T31] vhci_hcd: disconnect device
[   59.160957][ T4967] SELinux: syz.3.522 (4967) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   59.238303][ T4959] loop0: detected capacity change from 0 to 1024
[   59.269789][ T4959] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   59.283260][ T4959] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   59.367321][ T4959] JBD2: no valid journal superblock found
[   59.374509][ T4959] EXT4-fs (loop0): Could not load journal inode
[   59.471854][ T4978] loop3: detected capacity change from 0 to 512
[   59.515315][ T4978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.541287][ T4978] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.555745][ T4978] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   59.570983][ T4978] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   59.591293][ T4978] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   59.606356][ T4987] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.529: corrupted xattr block 19: overlapping e_value 
[   59.667497][ T4987] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   59.719081][ T4994] SELinux: syz.1.535 (4994) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   59.741194][ T4978] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   59.765946][ T5001] loop5: detected capacity change from 0 to 512
[   59.767384][ T4978] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   59.803207][ T5001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.835745][ T4978] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   59.859972][ T5001] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.881758][ T4977] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   59.899910][ T4977] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.529: corrupted xattr block 19: overlapping e_value 
[   59.915723][ T4977] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[   59.939773][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.959832][ T5009] netlink: 'syz.1.540': attribute type 13 has an invalid length.
[   60.004471][ T5001] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   60.057130][ T5001] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   60.069090][ T5000] loop0: detected capacity change from 0 to 1024
[   60.081306][ T5001] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   60.105981][ T5001] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   60.112901][ T5009] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.123010][ T5009] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.131693][ T5000] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   60.139053][ T5001] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   60.143204][ T5000] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   60.157899][ T5001] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   60.168000][ T5012] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.538: corrupted xattr block 19: overlapping e_value 
[   60.196016][ T5012] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[   60.207320][ T5000] JBD2: no valid journal superblock found
[   60.213941][ T5000] EXT4-fs (loop0): Could not load journal inode
[   60.249117][ T5009] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.274337][ T5009] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.317486][ T4998] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   60.333135][ T4998] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.538: corrupted xattr block 19: overlapping e_value 
[   60.347743][ T4998] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[   60.369498][ T4227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.382555][ T5009] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.391844][ T5009] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.401360][ T5009] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.411061][ T5009] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.516485][ T5027] IPv6: Can't replace route, no match found
[   60.569506][ T5029] loop2: detected capacity change from 0 to 164
[   60.576215][ T5033] SELinux: syz.1.549 (5033) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   60.593338][ T5032] loop0: detected capacity change from 0 to 512
[   60.624685][ T5032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.641385][ T5032] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.663406][ T5032] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   60.717682][ T5042] loop1: detected capacity change from 0 to 128
[   60.725939][ T5032] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   60.740279][ T5044] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.551: corrupted xattr block 19: overlapping e_value 
[   60.756530][ T5032] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   60.771087][ T5044] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   60.790672][ T5032] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   60.810970][ T5032] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   60.832881][ T5049] syz.1.554: attempt to access beyond end of device
[   60.832881][ T5049] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[   60.839290][ T5032] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   60.874466][ T5030] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   60.919059][ T5049] syz.1.554: attempt to access beyond end of device
[   60.919059][ T5049] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[   60.933012][ T5049] syz.1.554: attempt to access beyond end of device
[   60.933012][ T5049] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[   60.946730][ T5049] syz.1.554: attempt to access beyond end of device
[   60.946730][ T5049] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[   60.970653][ T5049] syz.1.554: attempt to access beyond end of device
[   60.970653][ T5049] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[   61.011958][ T5030] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.551: corrupted xattr block 19: overlapping e_value 
[   61.015275][ T5060] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[   61.033114][ T5060] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   61.040907][ T5060] vhci_hcd vhci_hcd.0: Device attached
[   61.063079][ T5067] loop5: detected capacity change from 0 to 164
[   61.085208][ T5061] vhci_hcd: connection closed
[   61.091459][  T266] vhci_hcd: stop threads
[   61.100445][  T266] vhci_hcd: release socket
[   61.104943][  T266] vhci_hcd: disconnect device
[   61.134050][ T5030] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[   61.191294][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.241662][ T5081] SELinux: syz.0.565 (5081) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   61.297779][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'.
[   61.421482][ T5104] IPVS: Error connecting to the multicast addr
[   61.428505][ T5106] loop1: detected capacity change from 0 to 164
[   61.468592][ T5109] netlink: 9 bytes leftover after parsing attributes in process `syz.1.575'.
[   61.478249][ T5109] 0{X功: entered promiscuous mode
[   61.483771][ T5109] 0{X功: left allmulticast mode
[   61.490504][ T5109] netlink: 5 bytes leftover after parsing attributes in process `syz.1.575'.
[   61.507326][ T5111] loop0: detected capacity change from 0 to 512
[   61.516072][ T5109] 1{X功: renamed from 
30{X功
[   61.523358][ T5111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.537203][ T5111] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.549133][ T5109] 1{X功: left promiscuous mode
[   61.554210][ T5109] 1{X功: entered allmulticast mode
[   61.561314][ T5109] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[   61.581232][ T5111] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   61.600086][ T5111] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   61.615499][ T5116] FAULT_INJECTION: forcing a failure.
[   61.615499][ T5116] name failslab, interval 1, probability 0, space 0, times 0
[   61.630018][ T5116] CPU: 0 UID: 0 PID: 5116 Comm: syz.3.577 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) 
[   61.630109][ T5116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   61.630120][ T5116] Call Trace:
[   61.630126][ T5116]  <TASK>
[   61.630134][ T5116]  __dump_stack+0x1d/0x30
[   61.630154][ T5116]  dump_stack_lvl+0xe8/0x140
[   61.630203][ T5116]  dump_stack+0x15/0x1b
[   61.630221][ T5116]  should_fail_ex+0x265/0x280
[   61.630277][ T5116]  ? ftrace_profile_set_filter+0x96/0x190
[   61.630296][ T5116]  should_failslab+0x8c/0xb0
[   61.630319][ T5116]  __kmalloc_cache_noprof+0x4c/0x320
[   61.630418][ T5116]  ftrace_profile_set_filter+0x96/0x190
[   61.630460][ T5116]  perf_ioctl+0x7b3/0x12e0
[   61.630487][ T5116]  ? ioctl_has_perm+0x289/0x2a0
[   61.630511][ T5116]  ? do_vfs_ioctl+0xd1e/0x11d0
[   61.630592][ T5116]  ? selinux_file_ioctl+0x2e3/0x370
[   61.630665][ T5116]  ? __fget_files+0x184/0x1c0
[   61.630683][ T5116]  ? __pfx_perf_ioctl+0x10/0x10
[   61.630705][ T5116]  __se_sys_ioctl+0xcb/0x140
[   61.630799][ T5116]  __x64_sys_ioctl+0x43/0x50
[   61.630822][ T5116]  x64_sys_call+0x19a8/0x2fb0
[   61.630840][ T5116]  do_syscall_64+0xd2/0x200
[   61.630867][ T5116]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   61.630911][ T5116]  ? clear_bhb_loop+0x40/0x90
[   61.630933][ T5116]  ? clear_bhb_loop+0x40/0x90
[   61.630952][ T5116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.630970][ T5116] RIP: 0033:0x7f8283cfe969
[   61.630983][ T5116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.631062][ T5116] RSP: 002b:00007f8282367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   61.631082][ T5116] RAX: ffffffffffffffda RBX: 00007f8283f25fa0 RCX: 00007f8283cfe969
[   61.631095][ T5116] RDX: 00002000000001c0 RSI: 0000000040082406 RDI: 0000000000000006
[   61.631108][ T5116] RBP: 00007f8282367090 R08: 0000000000000000 R09: 0000000000000000
[   61.631198][ T5116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.631210][ T5116] R13: 0000000000000000 R14: 00007f8283f25fa0 R15: 00007fff8fbdec68
[   61.631226][ T5116]  </TASK>
[   61.871378][ T5111] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   61.885920][ T5118] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.576: corrupted xattr block 19: overlapping e_value 
[   61.924645][ T5111] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   61.948820][ T5111] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   61.976461][ T5118] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   62.030398][ T5111] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   62.067252][ T5110] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   62.116936][ T5151] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[   62.123484][ T5151] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   62.131254][ T5151] vhci_hcd vhci_hcd.0: Device attached
[   62.139194][ T5110] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.576: corrupted xattr block 19: overlapping e_value 
[   62.153802][   T29] kauditd_printk_skb: 430 callbacks suppressed
[   62.153813][   T29] audit: type=1326 audit(1748615028.520:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   62.183828][   T29] audit: type=1326 audit(1748615028.520:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   62.207695][   T29] audit: type=1326 audit(1748615028.520:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   62.231922][   T29] audit: type=1326 audit(1748615028.540:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   62.266761][ T5148] loop2: detected capacity change from 0 to 256
[   62.273348][ T5110] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[   62.291243][ T5152] vhci_hcd: connection closed
[   62.300187][ T5148] FAT-fs (loop2): bogus number of FAT sectors
[   62.311097][ T5148] FAT-fs (loop2): Can't find a valid FAT filesystem
[   62.318111][   T51] vhci_hcd: stop threads
[   62.322404][   T51] vhci_hcd: release socket
[   62.326925][   T51] vhci_hcd: disconnect device
[   62.335165][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.381215][ T1064] vhci_hcd: vhci_device speed not set
[   62.429521][   T29] audit: type=1326 audit(1748615028.620:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   62.452889][   T29] audit: type=1326 audit(1748615028.620:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   62.476583][   T29] audit: type=1326 audit(1748615028.620:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   62.500187][   T29] audit: type=1326 audit(1748615028.620:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   62.525046][   T29] audit: type=1326 audit(1748615028.620:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   62.550370][   T29] audit: type=1326 audit(1748615028.620:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz.2.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   62.612100][ T5149] loop3: detected capacity change from 0 to 1024
[   62.667749][ T5149] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   62.679979][ T5149] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   62.718728][ T5198] SELinux: syz.2.597 (5198) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   62.758506][ T5149] JBD2: no valid journal superblock found
[   62.765853][ T5149] EXT4-fs (loop3): Could not load journal inode
[   62.860004][ T5209] loop5: detected capacity change from 0 to 164
[   62.908037][ T5212] netlink: 20 bytes leftover after parsing attributes in process `syz.5.600'.
[   62.950113][ T5218] loop3: detected capacity change from 0 to 164
[   63.019316][ T5223] IPv6: Can't replace route, no match found
[   63.027078][ T5218] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   63.069535][ T5218] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   63.152710][ T5218] rock: directory entry would overflow storage
[   63.159022][ T5218] rock: sig=0x4f50, size=4, remaining=3
[   63.164672][ T5218] iso9660: Corrupted directory entry in block 4 of inode 1792
[   63.355049][ T5255] loop0: detected capacity change from 0 to 164
[   63.415772][ T5255] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   63.444399][ T5255] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   63.488450][ T5255] rock: directory entry would overflow storage
[   63.495868][ T5255] rock: sig=0x4f50, size=4, remaining=3
[   63.501878][ T5255] iso9660: Corrupted directory entry in block 4 of inode 1792
[   63.516665][ T5274] loop2: detected capacity change from 0 to 256
[   63.527793][ T5274] FAT-fs (loop2): bogus number of FAT sectors
[   63.534065][ T5274] FAT-fs (loop2): Can't find a valid FAT filesystem
[   64.085515][ T5333] IPv6: Can't replace route, no match found
[   64.233394][ T5349] loop5: detected capacity change from 0 to 164
[   64.280470][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.634'.
[   64.310350][ T5359] SELinux: syz.2.635 (5359) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   64.352830][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'.
[   64.853743][ T5390] loop1: detected capacity change from 0 to 164
[   64.880607][ T5390] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   64.902055][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.646'.
[   64.920464][ T5390] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   64.932428][ T5390] rock: directory entry would overflow storage
[   64.939151][ T5390] rock: sig=0x4f50, size=4, remaining=3
[   64.945297][ T5390] iso9660: Corrupted directory entry in block 4 of inode 1792
[   65.010334][ T5403] loop5: detected capacity change from 0 to 128
[   65.103442][ T5410] bio_check_eod: 41 callbacks suppressed
[   65.103455][ T5410] syz.5.647: attempt to access beyond end of device
[   65.103455][ T5410] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128
[   65.163528][ T5410] syz.5.647: attempt to access beyond end of device
[   65.163528][ T5410] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[   65.167426][ T5412] loop3: detected capacity change from 0 to 1024
[   65.197302][ T5412] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   65.208651][ T5412] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   65.211330][ T5410] syz.5.647: attempt to access beyond end of device
[   65.211330][ T5410] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[   65.233755][ T5412] JBD2: no valid journal superblock found
[   65.239671][ T5412] EXT4-fs (loop3): Could not load journal inode
[   65.271294][ T5410] syz.5.647: attempt to access beyond end of device
[   65.271294][ T5410] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128
[   65.295728][ T5410] syz.5.647: attempt to access beyond end of device
[   65.295728][ T5410] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128
[   65.345770][ T5415] loop3: detected capacity change from 0 to 256
[   65.351311][ T5410] syz.5.647: attempt to access beyond end of device
[   65.351311][ T5410] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128
[   65.363098][ T5415] FAT-fs (loop3): bogus number of FAT sectors
[   65.371687][ T5415] FAT-fs (loop3): Can't find a valid FAT filesystem
[   65.457061][ T5418] loop5: detected capacity change from 0 to 128
[   65.525254][ T5419] syz.5.657: attempt to access beyond end of device
[   65.525254][ T5419] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128
[   65.558590][ T5419] syz.5.657: attempt to access beyond end of device
[   65.558590][ T5419] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[   65.589634][ T5419] syz.5.657: attempt to access beyond end of device
[   65.589634][ T5419] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[   65.638565][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'.
[   65.640263][ T5419] syz.5.657: attempt to access beyond end of device
[   65.640263][ T5419] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128
[   65.704976][ T5428] loop0: detected capacity change from 0 to 164
[   65.758688][ T5428] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   65.794186][ T5428] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   65.820300][ T5428] rock: directory entry would overflow storage
[   65.826711][ T5428] rock: sig=0x4f50, size=4, remaining=3
[   65.832729][ T5428] iso9660: Corrupted directory entry in block 4 of inode 1792
[   65.975627][ T5447] loop0: detected capacity change from 0 to 128
[   66.064730][ T5449] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[   66.071492][ T5449] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   66.079596][ T5449] vhci_hcd vhci_hcd.0: Device attached
[   66.103746][ T5438] loop1: detected capacity change from 0 to 1024
[   66.124606][ T5450] vhci_hcd: connection closed
[   66.127059][ T3340] vhci_hcd: stop threads
[   66.135752][ T5438] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   66.136160][ T3340] vhci_hcd: release socket
[   66.136170][ T3340] vhci_hcd: disconnect device
[   66.158122][ T5438] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   66.201124][ T5438] JBD2: no valid journal superblock found
[   66.207594][ T5438] EXT4-fs (loop1): Could not load journal inode
[   66.262159][ T5459] syz.3.671 uses obsolete (PF_INET,SOCK_PACKET)
[   66.407911][ T5464] loop1: detected capacity change from 0 to 1024
[   66.467666][ T5464] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   66.478708][ T5464] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   66.518574][ T5464] JBD2: no valid journal superblock found
[   66.524467][ T5464] EXT4-fs (loop1): Could not load journal inode
[   66.669174][ T5481] loop2: detected capacity change from 0 to 512
[   66.671760][ T5484] loop0: detected capacity change from 0 to 256
[   66.700879][ T5484] FAT-fs (loop0): bogus number of FAT sectors
[   66.707814][ T5484] FAT-fs (loop0): Can't find a valid FAT filesystem
[   66.734607][ T5481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.784015][ T5481] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.831561][ T5481] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   66.896954][ T5481] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   66.932409][ T5481] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   66.936410][ T5499] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.680: corrupted xattr block 19: overlapping e_value 
[   67.005688][ T5505] netlink: 'syz.0.685': attribute type 13 has an invalid length.
[   67.013966][ T5499] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   67.023899][ T5481] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   67.049833][ T5481] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value 
[   67.145816][ T5481] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   67.161243][   T29] kauditd_printk_skb: 409 callbacks suppressed
[   67.161258][   T29] audit: type=1326 audit(1748615033.540:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   67.166090][ T5480] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, 
[   67.167827][   T29] audit: type=1326 audit(1748615033.540:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dee4e969 code=0x7ffc0000
[   67.192297][ T5480] block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   67.238330][ T5480] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.680: corrupted xattr block 19: overlapping e_value 
[   67.279888][   T29] audit: type=1326 audit(1748615033.620:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.1.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   67.305666][   T29] audit: type=1326 audit(1748615033.620:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.1.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   67.332557][   T29] audit: type=1326 audit(1748615033.630:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.1.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   67.359205][   T29] audit: type=1326 audit(1748615033.630:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.1.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   67.384862][   T29] audit: type=1326 audit(1748615033.630:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.1.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   67.409081][   T29] audit: type=1326 audit(1748615033.630:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.1.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe48eade969 code=0x7ffc0000
[   67.432844][   T29] audit: type=1326 audit(1748615033.630:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.1.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe48eade9a3 code=0x7ffc0000
[   67.434220][ T5480] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[   67.456011][   T29] audit: type=1326 audit(1748615033.630:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.1.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe48eade9a3 code=0x7ffc0000
[   67.523813][ T5522] netlink: 9 bytes leftover after parsing attributes in process `syz.5.696'.
[   67.534416][ T5522] gretap0: entered promiscuous mode
[   67.541900][ T5522] netlink: 5 bytes leftover after parsing attributes in process `syz.5.696'.
[   67.552929][ T5522] 0{X功: renamed from gretap0
[   67.574290][ T5522] 0{X功: left promiscuous mode
[   67.579013][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.580303][ T5522] 0{X功: entered allmulticast mode
[   67.618358][ T5522] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[   67.705633][ T5519] loop3: detected capacity change from 0 to 1024
[   67.732981][ T5519] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   67.747257][ T5519] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   67.775288][ T5519] JBD2: no valid journal superblock found
[   67.784267][ T5519] EXT4-fs (loop3): Could not load journal inode
[   67.835982][ T5526] loop1: detected capacity change from 0 to 512
[   67.872808][ T5526] EXT4-fs (loop1): 1 orphan inode deleted
[   67.882997][ T5526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.905216][  T266] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[   67.957235][ T5566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.710'.
[   67.971488][ T5526] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.002618][ T5526] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   68.018844][ T5563] loop3: detected capacity change from 0 to 512
[   68.028507][ T5571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.713'.
[   68.039026][ T5563] EXT4-fs: Ignoring removed i_version option
[   68.055181][ T5563] ext4: Bad value for 'auto_da_alloc'
[   68.390255][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.391125][ T5586] loop5: detected capacity change from 0 to 1024
[   68.447299][ T5586] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   68.458818][ T5586] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   68.488740][ T5586] JBD2: no valid journal superblock found
[   68.494940][ T5586] EXT4-fs (loop5): Could not load journal inode
[   68.919989][ T5643] loop3: detected capacity change from 0 to 128
[   68.964431][ T5630] loop5: detected capacity change from 0 to 512
[   69.053237][ T5630] EXT4-fs (loop5): 1 orphan inode deleted
[   69.071323][   T41] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   69.090447][ T5630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.114520][ T5630] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.133038][ T5630] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   69.401587][ T5668] loop3: detected capacity change from 0 to 1024
[   69.430572][ T5668] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   69.442852][ T5668] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   69.450441][ T5678] loop1: detected capacity change from 0 to 512
[   69.465913][ T5668] JBD2: no valid journal superblock found
[   69.472691][ T5668] EXT4-fs (loop3): Could not load journal inode
[   69.495650][ T5678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.516747][ T5678] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.533310][ T5678] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.756: corrupted xattr block 19: overlapping e_value 
[   69.566273][ T5678] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   69.583218][ T4227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.593664][ T5678] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.756: corrupted xattr block 19: overlapping e_value 
[   69.610821][ T5687] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.756: corrupted xattr block 19: overlapping e_value 
[   69.632361][ T5687] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   69.646892][ T5678] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   69.656894][ T5678] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.756: corrupted xattr block 19: overlapping e_value 
[   69.673039][ T5678] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   69.691069][ T5677] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   69.722972][ T5693] loop2: detected capacity change from 0 to 128
[   69.733787][ T5677] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.756: corrupted xattr block 19: overlapping e_value 
[   69.761053][ T5677] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[   69.805648][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.825264][ T5699] netlink: 32 bytes leftover after parsing attributes in process `syz.5.767'.
[   69.903967][ T5708] netlink: 9 bytes leftover after parsing attributes in process `syz.3.769'.
[   69.941462][ T5708] 1{X功: entered promiscuous mode
[   69.947021][ T5708] 1{X功: left allmulticast mode
[   69.983706][ T5708] netlink: 5 bytes leftover after parsing attributes in process `syz.3.769'.
[   70.039142][ T5708] 0{X功: renamed from 
31{X功
[   70.048476][ T5708] 0{X功: left promiscuous mode
[   70.053899][ T5708] 0{X功: entered allmulticast mode
[   70.063416][ T5708] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[   70.161494][ T5726] loop3: detected capacity change from 0 to 512
[   70.189085][ T5726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.234528][ T5714] loop1: detected capacity change from 0 to 512
[   70.244961][ T5714] /dev/loop1: Can't open blockdev
[   70.259312][ T5726] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.288874][ T5724] netlink: 'syz.0.775': attribute type 13 has an invalid length.
[   70.305854][ T5726] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.776: corrupted xattr block 19: overlapping e_value 
[   70.320722][ T5726] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   70.331134][ T5726] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.776: corrupted xattr block 19: overlapping e_value 
[   70.361377][ T5726] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   70.370524][ T5733] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.776: corrupted xattr block 19: overlapping e_value 
[   70.392245][ T5733] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   70.418898][ T5726] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.776: corrupted xattr block 19: overlapping e_value 
[   70.423856][ T5739] xt_hashlimit: size too large, truncated to 1048576
[   70.445781][ T5737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.778'.
[   70.455884][ T5726] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   70.489087][ T5725] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   70.505537][ T5725] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.776: corrupted xattr block 19: overlapping e_value 
[   70.585259][ T5725] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[   70.605318][ T5748] loop5: detected capacity change from 0 to 128
[   70.664326][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.728010][ T5748] bio_check_eod: 284 callbacks suppressed
[   70.728031][ T5748] syz.5.782: attempt to access beyond end of device
[   70.728031][ T5748] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128
[   70.752742][ T5748] syz.5.782: attempt to access beyond end of device
[   70.752742][ T5748] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[   70.772723][ T5748] syz.5.782: attempt to access beyond end of device
[   70.772723][ T5748] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[   70.790988][ T5748] syz.5.782: attempt to access beyond end of device
[   70.790988][ T5748] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128
[   70.814054][ T5748] syz.5.782: attempt to access beyond end of device
[   70.814054][ T5748] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128
[   70.830714][ T5748] syz.5.782: attempt to access beyond end of device
[   70.830714][ T5748] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128
[   70.850743][ T5748] syz.5.782: attempt to access beyond end of device
[   70.850743][ T5748] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128
[   70.868753][ T5748] syz.5.782: attempt to access beyond end of device
[   70.868753][ T5748] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128
[   70.962805][ T5758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'.
[   70.994107][ T5758] vlan2: entered promiscuous mode
[   70.999888][ T5758] veth0_virt_wifi: entered promiscuous mode
[   71.143073][ T5773] loop0: detected capacity change from 0 to 256
[   71.159098][ T5773] FAT-fs (loop0): bogus number of FAT sectors
[   71.165816][ T5773] FAT-fs (loop0): Can't find a valid FAT filesystem
[   71.180295][ T5769] loop5: detected capacity change from 0 to 256
[   71.192248][ T5769] FAT-fs (loop5): bogus number of FAT sectors
[   71.199094][ T5769] FAT-fs (loop5): Can't find a valid FAT filesystem
[   71.255060][ T5774] netlink: 'syz.1.789': attribute type 13 has an invalid length.
[   71.616796][ T5794] SELinux: syz.2.796 (5794) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   71.633337][ T5795] SELinux:  policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c
[   71.646364][ T5795] SELinux: failed to load policy
[   71.735283][ T5798] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=5798 comm=+}[@
[   71.761686][ T5800] netlink: 20 bytes leftover after parsing attributes in process `syz.5.800'.
[   72.314895][   T29] kauditd_printk_skb: 428 callbacks suppressed
[   72.314918][   T29] audit: type=1400 audit(1748615038.700:3444): avc:  denied  { create } for  pid=5804 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   72.353931][   T29] audit: type=1400 audit(1748615038.730:3445): avc:  denied  { create } for  pid=5808 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   72.373685][   T29] audit: type=1400 audit(1748615038.730:3446): avc:  denied  { setopt } for  pid=5808 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   72.393815][   T29] audit: type=1400 audit(1748615038.740:3447): avc:  denied  { create } for  pid=5808 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   72.414773][   T29] audit: type=1400 audit(1748615038.740:3448): avc:  denied  { write } for  pid=5808 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   72.436720][   T29] audit: type=1400 audit(1748615038.820:3449): avc:  denied  { connect } for  pid=5804 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   72.521788][   T29] audit: type=1400 audit(1748615038.850:3450): avc:  denied  { ioctl } for  pid=5804 comm="syz.0.801" path="socket:[13397]" dev="sockfs" ino=13397 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   72.554661][ T5813] loop3: detected capacity change from 0 to 256
[   72.578833][ T5813] FAT-fs (loop3): bogus number of FAT sectors
[   72.586119][ T5813] FAT-fs (loop3): Can't find a valid FAT filesystem
[   72.608703][   T29] audit: type=1400 audit(1748615038.940:3451): avc:  denied  { read } for  pid=5812 comm="syz.3.806" dev="nsfs" ino=4026532385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   72.631945][   T29] audit: type=1400 audit(1748615038.940:3452): avc:  denied  { open } for  pid=5812 comm="syz.3.806" path="pid:[4026532385]" dev="nsfs" ino=4026532385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   72.656226][   T29] audit: type=1400 audit(1748615038.960:3453): avc:  denied  { mounton } for  pid=5812 comm="syz.3.806" path="/168/file0" dev="tmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   72.721585][ T5819] loop5: detected capacity change from 0 to 512
[   72.806259][ T5819] EXT4-fs (loop5): 1 orphan inode deleted
[   72.818768][ T5819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.832764][   T41] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   72.879536][ T5819] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.926239][ T5829] netlink: 9 bytes leftover after parsing attributes in process `syz.1.812'.
[   72.942021][ T5832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.813'.
[   72.945349][ T5829] 1{X功: entered promiscuous mode
[   72.957275][ T5829] 1{X功: left allmulticast mode
[   72.965994][ T4227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.048071][ T5829] netlink: 5 bytes leftover after parsing attributes in process `syz.1.812'.
[   73.072562][ T5829] 0{X功: renamed from 
31{X功
[   73.085387][ T5829] 0{X功: left promiscuous mode
[   73.090458][ T5829] 0{X功: entered allmulticast mode
[   73.114333][ T5829] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[   73.140915][ T5847] netlink: 9 bytes leftover after parsing attributes in process `syz.5.820'.
[   73.162042][ T5847] 0{X功: entered promiscuous mode
[   73.167769][ T5847] 0{X功: left allmulticast mode
[   73.189567][ T5847] 1{X功: renamed from 
30{X功
[   73.204953][ T5847] 1{X功: left promiscuous mode
[   73.210303][ T5847] 1{X功: entered allmulticast mode
[   73.222114][ T5847] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[   73.542274][ T5853] loop0: detected capacity change from 0 to 512
[   73.588383][ T5853] EXT4-fs (loop0): 1 orphan inode deleted
[   73.597695][ T5853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.612611][   T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   73.613027][ T5853] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.647603][ T5853] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   73.761905][ T5876] loop1: detected capacity change from 0 to 128
[   73.923642][ T5876] syz.1.830: attempt to access beyond end of device
[   73.923642][ T5876] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[   73.949644][ T5878] netlink: 'syz.5.831': attribute type 13 has an invalid length.
[   73.957961][ T5876] syz.1.830: attempt to access beyond end of device
[   73.957961][ T5876] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[   74.080365][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.087699][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.142774][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.166599][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.177013][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.243154][ T5878] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.252482][ T5878] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.261649][ T5878] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.270559][ T5878] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.339396][ T5902] loop0: detected capacity change from 0 to 512
[   74.397357][ T5902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.433786][ T5902] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.446928][ T5902] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.841: corrupted xattr block 19: overlapping e_value 
[   74.471309][ T5902] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   74.480687][ T5902] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.841: corrupted xattr block 19: overlapping e_value 
[   74.501366][ T5902] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   74.510874][ T5910] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.841: corrupted xattr block 19: overlapping e_value 
[   74.519844][ T5902] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.841: corrupted xattr block 19: overlapping e_value 
[   74.571512][ T5902] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   74.588205][ T5910] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   74.682092][ T5901] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   74.701454][ T5901] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.841: corrupted xattr block 19: overlapping e_value 
[   74.752210][ T5901] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[   74.845099][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.030337][ T5932] loop0: detected capacity change from 0 to 512
[   75.093950][ T5932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.111633][ T5932] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.162799][ T5932] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.852: corrupted xattr block 19: overlapping e_value 
[   75.205319][ T5928] __nla_validate_parse: 2 callbacks suppressed
[   75.205337][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'.
[   75.222725][ T5932] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   75.236407][ T5928] loop1: detected capacity change from 0 to 512
[   75.239386][ T5932] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.852: corrupted xattr block 19: overlapping e_value 
[   75.265246][ T5941] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.852: corrupted xattr block 19: overlapping e_value 
[   75.280462][ T5938] loop5: detected capacity change from 0 to 256
[   75.299439][ T5932] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   75.310346][ T5928] EXT4-fs (loop1): 1 orphan inode deleted
[   75.321836][  T266] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[   75.330227][ T5928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.349842][ T5932] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.852: corrupted xattr block 19: overlapping e_value 
[   75.353656][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'.
[   75.375145][ T5928] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.383542][ T5941] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   75.387390][ T5932] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   75.416754][ T5928] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   75.457917][ T5931] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   75.475666][ T5931] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.852: corrupted xattr block 19: overlapping e_value 
[   75.490423][ T5931] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[   75.515813][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.543040][ T5950] netlink: 9 bytes leftover after parsing attributes in process `syz.5.858'.
[   75.552406][ T5950] 1{X功: entered promiscuous mode
[   75.558168][ T5950] 1{X功: left allmulticast mode
[   75.564666][ T5950] netlink: 5 bytes leftover after parsing attributes in process `syz.5.858'.
[   75.574309][ T5950] 0{X功: renamed from 
31{X功
[   75.582352][ T5950] 0{X功: left promiscuous mode
[   75.587708][ T5950] 0{X功: entered allmulticast mode
[   75.596190][ T5950] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[   75.644387][ T5956] loop0: detected capacity change from 0 to 256
[   75.654116][ T5956] FAT-fs (loop0): bogus number of FAT sectors
[   75.660605][ T5956] FAT-fs (loop0): Can't find a valid FAT filesystem
[   75.705338][ T5958] loop5: detected capacity change from 0 to 512
[   75.745043][ T5958] EXT4-fs (loop5): 1 orphan inode deleted
[   75.754181][ T5958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.767584][   T41] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   75.805600][ T5958] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.819345][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.027198][ T4227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.152205][ T5981] netlink: 9 bytes leftover after parsing attributes in process `syz.2.870'.
[   76.186531][ T5981] 0{X功: entered promiscuous mode
[   76.192242][ T5981] 0{X功: left allmulticast mode
[   76.209352][ T5991] netlink: 5 bytes leftover after parsing attributes in process `syz.2.870'.
[   76.219224][ T5991] 1{X功: renamed from 
30{X功
[   76.240687][ T5991] 1{X功: left promiscuous mode
[   76.245946][ T5991] 1{X功: entered allmulticast mode
[   76.261884][ T5991] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[   76.435093][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.873'.
[   76.438615][ T6000] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=6000 comm=+}[@
[   76.453842][ T5987] loop3: detected capacity change from 0 to 512
[   76.486859][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'.
[   76.516637][ T5987] EXT4-fs (loop3): 1 orphan inode deleted
[   76.532112][  T266] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[   76.559231][ T5987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.604680][ T5987] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.662740][ T5987] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   76.892009][ T6018] loop0: detected capacity change from 0 to 1024
[   76.908779][ T6018] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   76.921589][ T6018] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   76.946542][ T6018] JBD2: no valid journal superblock found
[   76.953486][ T6018] EXT4-fs (loop0): Could not load journal inode
[   77.076112][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.302834][ T6042] loop2: detected capacity change from 0 to 128
[   77.339701][   T29] kauditd_printk_skb: 356 callbacks suppressed
[   77.339717][   T29] audit: type=1400 audit(1748615043.720:3805): avc:  denied  { mount } for  pid=6041 comm="syz.2.892" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   77.404297][ T6035] loop5: detected capacity change from 0 to 512
[   77.422183][ T6046] bio_check_eod: 109 callbacks suppressed
[   77.422199][ T6046] syz.2.892: attempt to access beyond end of device
[   77.422199][ T6046] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[   77.464869][ T6035] EXT4-fs (loop5): 1 orphan inode deleted
[   77.472351][ T6046] syz.2.892: attempt to access beyond end of device
[   77.472351][ T6046] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[   77.481553][ T6035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.497077][   T41] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   77.509319][   T41] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   77.521376][ T6035] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.550938][ T6046] syz.2.892: attempt to access beyond end of device
[   77.550938][ T6046] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[   77.573082][   T29] audit: type=1326 audit(1748615043.960:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   77.598966][   T29] audit: type=1326 audit(1748615043.960:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   77.624530][   T29] audit: type=1326 audit(1748615043.960:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   77.649559][   T29] audit: type=1326 audit(1748615043.960:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   77.675437][   T29] audit: type=1326 audit(1748615043.960:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   77.700040][   T29] audit: type=1326 audit(1748615043.960:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   77.725171][   T29] audit: type=1326 audit(1748615043.960:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   77.751012][   T29] audit: type=1326 audit(1748615043.960:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   77.840276][ T6035] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   78.000954][ T6055] loop3: detected capacity change from 0 to 1024
[   78.035996][ T6055] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   78.047529][ T6055] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   78.066289][ T6072] netlink: 'syz.2.904': attribute type 13 has an invalid length.
[   78.089466][ T6055] JBD2: no valid journal superblock found
[   78.095281][ T6055] EXT4-fs (loop3): Could not load journal inode
[   78.123160][ T4227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.290592][ T6082] syzkaller0: entered promiscuous mode
[   78.296261][ T6082] syzkaller0: entered allmulticast mode
[   78.353847][ T6087] syzkaller0: entered promiscuous mode
[   78.359463][ T6087] syzkaller0: entered allmulticast mode
[   78.381363][ T6092] loop1: detected capacity change from 0 to 512
[   78.449823][ T6092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.475677][ T6092] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.510733][ T6092] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.913: corrupted xattr block 19: overlapping e_value 
[   78.525843][ T6092] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   78.537101][ T6092] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.913: corrupted xattr block 19: overlapping e_value 
[   78.556418][ T6101] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.913: corrupted xattr block 19: overlapping e_value 
[   78.570574][ T6092] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   78.570816][ T6092] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.913: corrupted xattr block 19: overlapping e_value 
[   78.597049][ T6092] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   78.609480][ T6101] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   78.634890][ T6104] loop5: detected capacity change from 0 to 512
[   78.650720][ T6091] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   78.671400][ T6104] EXT4-fs (loop5): 1 orphan inode deleted
[   78.678844][ T6104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.692427][  T266] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[   78.705824][ T6091] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.913: corrupted xattr block 19: overlapping e_value 
[   78.722288][ T6104] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.733990][ T6091] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[   78.798203][ T6109] netlink: 9 bytes leftover after parsing attributes in process `syz.0.916'.
[   78.808003][ T6109] 0{X功: entered promiscuous mode
[   78.809309][ T4227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.814417][ T6109] 0{X功: left allmulticast mode
[   78.834701][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.871542][ T6109] netlink: 5 bytes leftover after parsing attributes in process `syz.0.916'.
[   78.881005][ T6109] 1{X功: renamed from 
30{X功
[   78.889959][ T6109] 1{X功: left promiscuous mode
[   78.895215][ T6109] 1{X功: entered allmulticast mode
[   78.931855][ T6109] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[   78.983979][ T6119] 0{X功: entered promiscuous mode
[   78.989563][ T6119] 0{X功: left allmulticast mode
[   78.997114][ T6119] 1{X功: renamed from 
30{X功
[   79.014510][ T6119] 1{X功: left promiscuous mode
[   79.019799][ T6119] 1{X功: entered allmulticast mode
[   79.026288][ T6119] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[   79.132458][ T6128] syzkaller0: entered promiscuous mode
[   79.138833][ T6128] syzkaller0: entered allmulticast mode
[   79.178771][ T6135] loop2: detected capacity change from 0 to 512
[   79.243654][ T6135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.334553][ T6135] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.459882][ T6135] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.930: corrupted xattr block 19: overlapping e_value 
[   79.530643][ T6155] 0{X功: entered promiscuous mode
[   79.536153][ T6155] 0{X功: left allmulticast mode
[   79.548980][ T6135] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   79.558564][ T6135] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.930: corrupted xattr block 19: overlapping e_value 
[   79.570364][ T6144] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.930: corrupted xattr block 19: overlapping e_value 
[   79.586590][ T6155] 1{X功: renamed from 
30{X功
[   79.595080][ T6132] loop5: detected capacity change from 0 to 512
[   79.603077][ T6155] 1{X功: left promiscuous mode
[   79.608305][ T6155] 1{X功: entered allmulticast mode
[   79.623026][ T6135] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   79.640102][ T6144] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   79.650442][ T6155] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[   79.663066][ T6135] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.930: corrupted xattr block 19: overlapping e_value 
[   79.708016][ T6132] EXT4-fs (loop5): 1 orphan inode deleted
[   79.718137][ T6165] syzkaller0: entered promiscuous mode
[   79.722103][ T6132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.724435][ T6165] syzkaller0: entered allmulticast mode
[   79.743368][   T31] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   79.756102][ T6132] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.757017][ T6135] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[   79.781306][ T6132] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   79.794169][ T6134] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   79.815777][ T6134] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.930: corrupted xattr block 19: overlapping e_value 
[   79.850015][ T6134] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[   79.884885][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.074691][ T4227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.203617][ T6188] loop2: detected capacity change from 0 to 256
[   80.218197][ T6188] FAT-fs (loop2): bogus number of FAT sectors
[   80.224362][ T6188] FAT-fs (loop2): Can't find a valid FAT filesystem
[   80.280336][ T6190] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[   80.286895][ T6190] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   80.294621][ T6190] vhci_hcd vhci_hcd.0: Device attached
[   80.320466][ T6193] vhci_hcd: connection closed
[   80.322287][  T266] vhci_hcd: stop threads
[   80.331402][  T266] vhci_hcd: release socket
[   80.335831][  T266] vhci_hcd: disconnect device
[   80.350306][ T6198] loop3: detected capacity change from 0 to 512
[   80.378173][ T6198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.403553][ T6198] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.428401][ T6198] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.954: corrupted xattr block 19: overlapping e_value 
[   80.448906][ T6198] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   80.472241][ T6198] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.954: corrupted xattr block 19: overlapping e_value 
[   80.505649][ T6198] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   80.510297][ T6206] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.954: corrupted xattr block 19: overlapping e_value 
[   80.516581][ T6198] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.954: corrupted xattr block 19: overlapping e_value 
[   80.542912][ T6198] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   80.551428][ T6206] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   80.569823][ T6197] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   80.587465][ T6197] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.954: corrupted xattr block 19: overlapping e_value 
[   80.602901][ T6197] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[   80.614444][ T6210] __nla_validate_parse: 4 callbacks suppressed
[   80.614458][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'.
[   80.638208][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.866932][ T6220] loop5: detected capacity change from 0 to 128
[   80.941062][ T6223] syz.5.962: attempt to access beyond end of device
[   80.941062][ T6223] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128
[   80.973346][ T6223] syz.5.962: attempt to access beyond end of device
[   80.973346][ T6223] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128
[   81.024448][ T6223] syz.5.962: attempt to access beyond end of device
[   81.024448][ T6223] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128
[   81.080264][ T6230] loop2: detected capacity change from 0 to 256
[   81.092631][ T6230] FAT-fs (loop2): bogus number of FAT sectors
[   81.098874][ T6230] FAT-fs (loop2): Can't find a valid FAT filesystem
[   81.247908][ T6237] syzkaller0: entered promiscuous mode
[   81.253974][ T6237] syzkaller0: entered allmulticast mode
[   81.395042][ T6247] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   81.402303][ T6247] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   81.410127][ T6247] vhci_hcd vhci_hcd.0: Device attached
[   81.446970][ T6250] vhci_hcd: connection closed
[   81.448054][ T1426] vhci_hcd: stop threads
[   81.457502][ T1426] vhci_hcd: release socket
[   81.462032][ T1426] vhci_hcd: disconnect device
[   81.550889][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.971'.
[   81.563006][ T6243] loop2: detected capacity change from 0 to 512
[   81.589331][ T6243] EXT4-fs (loop2): 1 orphan inode deleted
[   81.602671][  T266] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[   81.632512][ T6243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.645596][ T6243] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.665380][ T6266] loop0: detected capacity change from 0 to 128
[   81.682355][ T6243] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   81.759715][ T6266] syz.0.978: attempt to access beyond end of device
[   81.759715][ T6266] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128
[   81.773584][ T6266] syz.0.978: attempt to access beyond end of device
[   81.773584][ T6266] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[   81.773618][ T6266] syz.0.978: attempt to access beyond end of device
[   81.773618][ T6266] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[   81.773693][ T6266] syz.0.978: attempt to access beyond end of device
[   81.773693][ T6266] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[   81.939543][ T6274] loop5: detected capacity change from 0 to 256
[   81.946881][ T6274] FAT-fs (loop5): bogus number of FAT sectors
[   81.953269][ T6274] FAT-fs (loop5): Can't find a valid FAT filesystem
[   82.073048][ T6283] netlink: 'syz.0.985': attribute type 13 has an invalid length.
[   82.108397][ T6290] netlink: 9 bytes leftover after parsing attributes in process `syz.3.988'.
[   82.118418][ T6290] 1{X功: entered promiscuous mode
[   82.123848][ T6290] 1{X功: left allmulticast mode
[   82.130635][ T6290] netlink: 5 bytes leftover after parsing attributes in process `syz.3.988'.
[   82.140025][ T6290] 0{X功: renamed from 
31{X功
[   82.156410][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'.
[   82.192177][ T6290] 0{X功: left promiscuous mode
[   82.197260][ T6290] 0{X功: entered allmulticast mode
[   82.216840][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.262911][ T6290] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[   82.329757][ T6305] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[   82.336656][ T6305] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   82.344521][ T6305] vhci_hcd vhci_hcd.0: Device attached
[   82.389361][ T6296] netlink: 'syz.0.990': attribute type 13 has an invalid length.
[   82.414594][ T6316] loop0: detected capacity change from 0 to 256
[   82.421613][ T6306] vhci_hcd: connection closed
[   82.421729][   T31] vhci_hcd: stop threads
[   82.430950][   T31] vhci_hcd: release socket
[   82.431789][ T6316] FAT-fs (loop0): bogus number of FAT sectors
[   82.435429][   T31] vhci_hcd: disconnect device
[   82.441461][ T6316] FAT-fs (loop0): Can't find a valid FAT filesystem
[   82.510332][   T29] kauditd_printk_skb: 177 callbacks suppressed
[   82.510348][   T29] audit: type=1326 audit(1748615048.890:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   82.561793][   T29] audit: type=1326 audit(1748615048.920:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   82.586035][   T29] audit: type=1326 audit(1748615048.920:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   82.610122][   T29] audit: type=1326 audit(1748615048.920:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   82.633964][   T29] audit: type=1326 audit(1748615048.920:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   82.657617][   T29] audit: type=1326 audit(1748615048.930:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   82.681608][   T29] audit: type=1326 audit(1748615048.930:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   82.705200][   T29] audit: type=1326 audit(1748615048.930:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   82.728715][   T29] audit: type=1326 audit(1748615048.930:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   82.752298][   T29] audit: type=1326 audit(1748615048.930:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8283cfe969 code=0x7ffc0000
[   82.819408][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1002'.
[   82.859396][ T6328] loop3: detected capacity change from 0 to 512
[   82.902074][ T6328] EXT4-fs (loop3): 1 orphan inode deleted
[   82.928230][   T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   82.945783][ T6328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.003588][ T6328] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.003620][ T6358] loop0: detected capacity change from 0 to 128
[   83.050093][ T6362] loop5: detected capacity change from 0 to 256
[   83.077076][ T6362] FAT-fs (loop5): bogus number of FAT sectors
[   83.084366][ T6362] FAT-fs (loop5): Can't find a valid FAT filesystem
[   83.105229][ T6328] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   83.136508][ T6369] bio_check_eod: 107 callbacks suppressed
[   83.136523][ T6369] syz.0.1013: attempt to access beyond end of device
[   83.136523][ T6369] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128
[   83.156651][ T6369] syz.0.1013: attempt to access beyond end of device
[   83.156651][ T6369] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[   83.171859][ T6369] syz.0.1013: attempt to access beyond end of device
[   83.171859][ T6369] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[   83.192708][ T6369] syz.0.1013: attempt to access beyond end of device
[   83.192708][ T6369] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[   83.213427][ T6369] syz.0.1013: attempt to access beyond end of device
[   83.213427][ T6369] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[   83.229089][ T6369] syz.0.1013: attempt to access beyond end of device
[   83.229089][ T6369] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[   83.245698][ T6369] syz.0.1013: attempt to access beyond end of device
[   83.245698][ T6369] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[   83.260363][ T6369] syz.0.1013: attempt to access beyond end of device
[   83.260363][ T6369] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[   83.283245][ T6369] syz.0.1013: attempt to access beyond end of device
[   83.283245][ T6369] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[   83.386879][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1019'.
[   83.452135][ T6395] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[   83.458720][ T6395] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   83.466529][ T6395] vhci_hcd vhci_hcd.0: Device attached
[   83.491622][ T6396] vhci_hcd: connection closed
[   83.492556][  T266] vhci_hcd: stop threads
[   83.501572][  T266] vhci_hcd: release socket
[   83.505998][  T266] vhci_hcd: disconnect device
[   83.515485][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.546044][ T6400] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1027'.
[   83.557689][ T6400] 0{X功: entered promiscuous mode
[   83.563240][ T6400] 0{X功: left allmulticast mode
[   83.569920][ T6400] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1027'.
[   83.579421][ T6400] 1{X功: renamed from 
30{X功
[   83.587626][ T6400] 1{X功: left promiscuous mode
[   83.592935][ T6400] 1{X功: entered allmulticast mode
[   83.600290][ T6400] A link change request failed with some changes committed already. Interface 
31{X功 may have been left with an inconsistent configuration, please check.
[   83.665961][ T6411] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[   83.672594][ T6411] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   83.681255][ T6411] vhci_hcd vhci_hcd.0: Device attached
[   83.687298][ T6415] loop2: detected capacity change from 0 to 128
[   83.694267][ T6413] vhci_hcd: connection closed
[   83.695051][  T266] vhci_hcd: stop threads
[   83.704741][  T266] vhci_hcd: release socket
[   83.709351][  T266] vhci_hcd: disconnect device
[   83.756286][ T6415] syz.2.1033: attempt to access beyond end of device
[   83.756286][ T6415] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[   83.936272][ T6423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1037'.
[   83.949037][ T6423] loop2: detected capacity change from 0 to 512
[   83.968128][ T6423] EXT4-fs (loop2): 1 orphan inode deleted
[   83.974444][ T6423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.987363][   T41] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   83.991256][ T6423] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.018887][ T6423] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   84.039187][ T6432] netlink: 'syz.1.1039': attribute type 13 has an invalid length.
[   84.068404][ T6437] 1{X功: entered promiscuous mode
[   84.074220][ T6437] 1{X功: left allmulticast mode
[   84.086091][ T6437] 0{X功: renamed from 
31{X功
[   84.093004][ T6437] 0{X功: left promiscuous mode
[   84.098267][ T6437] 0{X功: entered allmulticast mode
[   84.104413][ T6437] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[   84.144568][ T6441] loop0: detected capacity change from 0 to 128
[   84.284020][ T6454] loop3: detected capacity change from 0 to 256
[   84.294639][ T6454] FAT-fs (loop3): bogus number of FAT sectors
[   84.302394][ T6454] FAT-fs (loop3): Can't find a valid FAT filesystem
[   84.388748][ T6458] netlink: 'syz.1.1053': attribute type 13 has an invalid length.
[   84.506607][ T6450] loop5: detected capacity change from 0 to 512
[   84.525810][ T6450] EXT4-fs (loop5): 1 orphan inode deleted
[   84.532829][ T6450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.548600][ T6450] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.559704][   T41] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   84.578971][ T6450] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   84.753036][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.025011][ T6495] netlink: 'syz.2.1066': attribute type 13 has an invalid length.
[   85.049288][ T6497] loop3: detected capacity change from 0 to 256
[   85.058617][ T6497] FAT-fs (loop3): bogus number of FAT sectors
[   85.065221][ T6497] FAT-fs (loop3): Can't find a valid FAT filesystem
[   85.178264][ T4227] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.225975][ T3308] ==================================================================
[   85.234620][ T3308] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink
[   85.242037][ T3308] 
[   85.244369][ T3308] write to 0xffff8881044606c4 of 4 bytes by task 4245 on cpu 1:
[   85.252101][ T3308]  shmem_symlink+0x387/0x3d0
[   85.256712][ T3308]  vfs_symlink+0xd4/0x1e0
[   85.261044][ T3308]  do_symlinkat+0xc7/0x3c0
[   85.265459][ T3308]  __x64_sys_symlink+0x50/0x60
[   85.270225][ T3308]  x64_sys_call+0x2d8d/0x2fb0
[   85.275123][ T3308]  do_syscall_64+0xd2/0x200
[   85.279663][ T3308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.285819][ T3308] 
[   85.288188][ T3308] read to 0xffff8881044606c4 of 4 bytes by task 3308 on cpu 0:
[   85.296780][ T3308]  fill_mg_cmtime+0x5b/0x260
[   85.301852][ T3308]  generic_fillattr+0x24a/0x340
[   85.307093][ T3308]  shmem_getattr+0x181/0x200
[   85.312060][ T3308]  vfs_getattr_nosec+0x143/0x1e0
[   85.317097][ T3308]  vfs_statx+0x113/0x390
[   85.322256][ T3308]  vfs_fstatat+0x115/0x170
[   85.326951][ T3308]  __se_sys_newfstatat+0x55/0x260
[   85.332341][ T3308]  __x64_sys_newfstatat+0x55/0x70
[   85.337747][ T3308]  x64_sys_call+0x2c22/0x2fb0
[   85.342564][ T3308]  do_syscall_64+0xd2/0x200
[   85.347352][ T3308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.353885][ T3308] 
[   85.356210][ T3308] value changed: 0x24646e18 -> 0x2500e74d
[   85.362112][ T3308] 
[   85.364702][ T3308] Reported by Kernel Concurrency Sanitizer on:
[   85.371033][ T3308] CPU: 0 UID: 0 PID: 3308 Comm: udevd Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) 
[   85.383897][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   85.394225][ T3308] ==================================================================
[   85.441747][ T6494] loop0: detected capacity change from 0 to 512
[   85.454203][ T6494] EXT4-fs (loop0): 1 orphan inode deleted
[   85.461051][ T6494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.473821][  T266] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[   85.486299][ T6494] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.513035][ T6494] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   85.580961][ T6511] loop3: detected capacity change from 0 to 512
[   85.594336][ T6511] EXT4-fs (loop3): 1 orphan inode deleted
[   85.601241][ T6511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.614816][   T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   85.615662][ T6511] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.642345][ T6511] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   85.885910][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.285009][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.