last executing test programs:

2.727486529s ago: executing program 2 (id=4148):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002000010000bd7000400000000a508080000000081600000014000200fc02000000000000000000000000000114000100200100"], 0x44}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}}, 0x0)

2.372343784s ago: executing program 2 (id=4156):
r0 = socket(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
close_range(r0, r2, 0x0)

2.347992244s ago: executing program 2 (id=4158):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000180)="35a70f51bc", &(0x7f0000000040)=""/12, &(0x7f0000000f80), &(0x7f00000005c0), 0x4, r2}, 0x38)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18)
semop(0x0, 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = gettid()
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
read$ptp(r6, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c000100040000000200", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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")

2.289204375s ago: executing program 0 (id=4160):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

1.825352322s ago: executing program 3 (id=4163):
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x22, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sample_threshold\x00', r1}, 0x18)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_buf(r2, 0x1, 0x27, &(0x7f0000000140)=""/18, &(0x7f0000000200)=0x12)
syz_open_dev$tty1(0xc, 0x4, 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpeername$inet6(r3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, 0x0, &(0x7f0000000080)=r7}, 0x20)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000002040)={0x3, 0xf8, 0x200})
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000580)={'gretap0\x00', 0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcffffff0800000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1.639919005s ago: executing program 4 (id=4164):
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240088c0}, 0x54)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
semget$private(0x0, 0x20000000102, 0x200)

1.619165316s ago: executing program 4 (id=4165):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x7ffff000)
fallocate(r0, 0x0, 0x0, 0x1001f4)

1.605977886s ago: executing program 1 (id=4166):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0xa, 0x8001}}}}]}, 0x58}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.432481798s ago: executing program 4 (id=4167):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = timerfd_create(0x8, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
creat(&(0x7f0000000280)='./cgroup/../file0\x00', 0x4c)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/prev\x00')
pread64(r3, 0x0, 0x0, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5cc53b1445f70631, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18)
sync()
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$BTRFS_IOC_SCRUB(r5, 0x4004480d, &(0x7f0000000900)={0x0, 0xffffffffffffff45, 0x100})

1.420618039s ago: executing program 0 (id=4168):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018"], 0x54}}, 0x20000080)

1.402433339s ago: executing program 2 (id=4169):
r0 = socket(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
close_range(r0, r2, 0x0)

1.398282748s ago: executing program 0 (id=4170):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x3000003, 0x50, 0xffffffffffffffff, 0x8000000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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")
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x80, &(0x7f0000000100)=0x3, 0x0, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000206ff01000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f727400000000dc99b40147eb36bfe69d037988db235e2cc233b537391ef82674bba69cc520e1023da66c7e15a96dd5eec95becb1e13f26d0d63aad768e727717c1fdded74138c3d93550f0f6a4ca708d25be2ab0f4bf581c66b4cd73be2030385317b9bd3953d3989d2558e0cc301e35eb5ab0f23c0c8215cb8b38964d9c7d9e05e6c61a"], 0x4c}, 0x1, 0x0, 0x0, 0x404c045}, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004881}, 0x80)

951.854305ms ago: executing program 1 (id=4171):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10004305", 0x4, 0x20008040, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x101000)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)=0x9, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

877.241267ms ago: executing program 2 (id=4172):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00'], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000f42228169cf2a3850000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789")
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x8, 0xc, 0x2, 0x2}, {0x7fff, 0x0, 0x0, 0x1}]})
unshare(0x2040400)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4)
unshare(0x26000400)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

826.895658ms ago: executing program 3 (id=4173):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
io_setup(0x62d3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

824.159737ms ago: executing program 3 (id=4174):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000d40)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="edc467c23f6974c1c87f0feb0bb42f1ae3f98cc6c41f54017076e5c4a9774e12b0adcb01aabed879a964907e485437d0ccb12018b192f8d2c0c802ece2656bae8726f2ac91c282fe6ab4a8b1eaee6ef7777eebeb635353b65e5db6b8a89e6b934cb20f241031407f70331a97e837feb82abf294111355674ff79786dc35f54459b9c8f9ec3d7f8d3c57aa9b31f195cf6b217d88d59e56efd56a292b85c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x8, 0x1, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x6}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x3, 0x1)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES32=r5, @ANYRES8=0x0], 0x28}}, 0x40000)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x20880, 0x1, 0x21}, 0x18)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0xab, &(0x7f0000000c80)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x95, 0x68, 0x0, 0x4, 0x6, 0x0, @remote, @multicast2}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x12, 0x4, 0x4, 0x0, 0x0, {[@sack={0x5, 0x26, [0xf70, 0x8, 0x33f, 0x3, 0x0, 0x800008, 0x1, 0x2, 0x1ff]}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x7f}, @eol, @fastopen={0x22, 0x5, "ffa1c8"}]}}, {"f76d6ac967b722e3afc14085d6d96074cfc3c24783e01efb22218f07e2b02d448584b424744b293d44c7040000000000006208706d99982781"}}}}}}, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000002c0)={0x5, {{0xa, 0x4e22, 0x1, @loopback}}, {{0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}}, 0x108)
r7 = socket$kcm(0x2, 0xa, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22020000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781"], 0xfdef)
sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000000d06030000004000000000000200000811000300686173683a6e45742c6e657400000000000003006c6973743a73657400000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'hsr0\x00', @multicast})
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000000200)={0x6, 'ip6gre0\x00', {0x3}, 0x7f})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000200000002c00128009000100626f6e64000000001c0002800500010005000000050006000500000008001c00"], 0x4c}, 0x1, 0x0, 0x0, 0x100}, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3E1vFOcdAPD/rtc2LlC79I23lm1pVatVMTavhx4AtRKXSpVaVfS4tQ2iGKiwK4FlFVNVIPXQik/QNrdI+QQ5JZcoiXKIlGtQrhESinyB5BBNNLszm13vrr02a6+Mfz9pl2dmn5l5/jPz4OdlZwPYtcrpWyFiX0R8HBGjtcXmDOXaPy9WlqY/X1maLkSS/P6zQjXf85Wl6Txrvt3ebGG8GFH8ZyGOtB52eP7e4o3K3NzsnWzFxEIxS92sXJu9Nntr6vz506dGzp2dOtOTONMyPT/899tHD13+0+PfTl95/Of33kjLm2SfN8ZRM1Z9H+r6CAMta8pRbj6XDX7afdF3hP0N6UIpfS/2rzB0Lb1r08s1WK3/ozFQXaoZjd/8o6+FA7ZUkiTJcMva+t+y5aRRoVDbIEkeJMAroBD9LgHQH/kf+ucraU91abq1H/xqe3Yxqj2gNO4X2av2Sanagy2P1fpGg1t0/O9ExJXlL/6bvqLtOAQAQG+9dTHi0aVauyN/1T4pxvca8n0zmxsai4hvRcSBiPh21n75bkQ17/cj4mDDNvu7mAUor1pubf8Un2bt1Mbmas+k7b9fZXNbze2/esnHBrKl/dX4BwtXr8/NnszOyXgMDqfLk627rg+rvf3rj/7T6fjlhvZf+kqPn7cFs3I8La0aoJupLFReNu7cswfVE3u/Nf5ClAp5KuJQRBzexP7Tc3b9568f7fR5U/xpnC3x/7vzzkubKNAqyf8jfla7/stRjT8f+6wFP5SlJhZu/nVi/t7iL683zk9Onjs7dWZiT8zNnpzI74pW73/48HdZsqUb0Xz9k6Th+udVY0sn0tLr/42293995nIsTdXna+c3foyHTx517NNs9v4fKvyhms7nZ+9WFhbuTEYMFZZb1099ve3dykhT/jT+8ePt6/+BiC//l213JCLSm/gHEfHDiDiWlf1HEfHjiDi+RvzvXvrJXzp1IdePf2ul8c9s6PrfWxyJLFFfkyYufBDRvCZPDNx4582WA/+r3BL/YHS6/qerqfFszUxlYc96cbUpYNvES59AAAAA2AGORcS+KBRPZANN+6JYPHEiYm99BGV+4RdXb//t1kztGYGxGCzmI12jDeOhk9nYcLqcbjXVsJx+fqo6bpwkSTKSLqf997mD/Q0ddr29Hep/6tPWR1qAV82G5tE6PdEG7Eir6/+Trrfs/RcygO3Vg+/RADuU+g+7V9f1f6ueggP6pl39vx/xog9FAbZZu/r/x5Y1F7alLMD2alf/zf3D7rD58T9fBoCdzvg/7EpdPSS/icSBy2vkKZS620+p68f410sUY+1fARiL+m8a5G2atXf4STGiN2dsoKdnfqTpmhbb5tkTvThWFNfNU9rADzFsb6JYmZvLH3Dpe3mGI2Kdu7d+s93PE4tbXbDquXmtf/8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9MZXAQAA//9o4dKW")

769.931418ms ago: executing program 0 (id=4175):
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240088c0}, 0x54)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
semget$private(0x0, 0x20000000102, 0x200)

648.94366ms ago: executing program 0 (id=4176):
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r0, r1, 0x0)

604.052401ms ago: executing program 1 (id=4177):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000f20b00000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18)
fchown(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, &(0x7f00000001c0), 0x8)
listen(r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r7, &(0x7f0000004200)='t', 0x1)
sendfile(r7, r6, 0x0, 0x7ffff000)
fallocate(r2, 0x0, 0x0, 0x1001f4)

555.179891ms ago: executing program 4 (id=4178):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a0000", 0x2b}], 0x1}, 0x0)

554.654281ms ago: executing program 4 (id=4179):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x7ffff000)
fallocate(r0, 0x0, 0x0, 0x1001f4)

495.083082ms ago: executing program 0 (id=4180):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000180)="35a70f51bc", &(0x7f0000000040)=""/12, &(0x7f0000000f80), &(0x7f00000005c0), 0x4, r2}, 0x38)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18)
semop(0x0, 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = gettid()
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
read$ptp(r6, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c000100040000000200", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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")

458.281963ms ago: executing program 3 (id=4181):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x8000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000))
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="44ffffff7f00000000000000fcdbff2500000000a95725ac6af7e2e1ec7e735ce4148a0da63fe1a47d736708b1f2e056fa85c5d36cbe7f6009deaddb7b71e46807eb1dd26d579da24c0662887e7e4b2700", @ANYRES32=0x0, @ANYBLOB="14d80400000000002400128009000100626f6e64000000001400028008001f00ffffff7f0800070007000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e3fdccea768caaf9e4ab26d8ab7d3468bfa139809086ead108205771ed54bb59d5dc28e0145a13db698c9a439727674ec4e1b9204112b7e1803d572ce577dada60413188fdcc1425dbc5bf60e19d152db191ca6e78b41555075e0943acae18f31f385877f8cad56792a407d5357cf26a3ea312c04f8b25ab469564d46017bfd002fc9515d8bc9f9c0def5aa00a6219da84bf5a58c919332d09a9c0ea9a57a4ee56e475d8"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES8=r4, @ANYRES16=0x0, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000001cc0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_uid}]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r11 = socket(0x10, 0x3, 0x0)
write(r11, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0xffffff5f, 0x8001, {{0x24, 0x4, 0x1, 0x4, 0x90, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast1, @loopback, {[@rr={0x7, 0x1f, 0xd5, [@private=0xa010102, @local, @broadcast, @broadcast, @remote, @multicast2, @empty]}, @timestamp={0x44, 0xc, 0xf1, 0x0, 0x7, [0x9, 0x1ff]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xc6, 0x1, 0x4, [{@loopback, 0x4}]}, @timestamp={0x44, 0x20, 0xfb, 0x0, 0x4, [0x8, 0x7f, 0xa, 0x966, 0x0, 0x2, 0x2]}, @generic={0x83, 0x8, "ac4477ea2062"}, @ssrr={0x89, 0x17, 0xcf, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})

323.640014ms ago: executing program 3 (id=4182):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0xa, 0x8001}}}}]}, 0x58}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

298.371455ms ago: executing program 4 (id=4183):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x7de, 0x101, 0x0, 0x8, 0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20e, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x1, 0xb, 0xb, 0x4, 0xfffffffffffffff0}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd29}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x64, &(0x7f0000000800)=""/100, 0x40f00, 0x60, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000080)=[{0x5, 0x5, 0x1, 0xa}, {0x2, 0x1, 0x6, 0x5}], 0x10, 0x54}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

249.908796ms ago: executing program 1 (id=4184):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
io_setup(0x62d3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

206.303256ms ago: executing program 1 (id=4185):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0xf8, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0xe6, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6433", @typed={0x4, 0xe9}]}]}, 0xf8}], 0x1, 0x0, 0x0, 0x1}, 0x0)

175.759367ms ago: executing program 1 (id=4186):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10004305", 0x4, 0x20008040, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x101000)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

162.822507ms ago: executing program 3 (id=4187):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x8, 0x1, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x6}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x1)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES32=r4, @ANYRES8=0x0], 0x28}}, 0x40000)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x20880, 0x1, 0x21}, 0x18)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0xab, &(0x7f0000000c80)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x95, 0x68, 0x0, 0x4, 0x6, 0x0, @remote, @multicast2}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x12, 0x4, 0x4, 0x0, 0x0, {[@sack={0x5, 0x26, [0xf70, 0x8, 0x33f, 0x3, 0x0, 0x800008, 0x1, 0x2, 0x1ff]}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x7f}, @eol, @fastopen={0x22, 0x5, "ffa1c8"}]}}, {"f76d6ac967b722e3afc14085d6d96074cfc3c24783e01efb22218f07e2b02d448584b424744b293d44c7040000000000006208706d99982781"}}}}}}, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000002c0)={0x5, {{0xa, 0x4e22, 0x1, @loopback}}, {{0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}}}, 0x108)
r6 = socket$kcm(0x2, 0xa, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22020000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781"], 0xfdef)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000000d06030000004000000000000200000811000300686173683a6e45742c6e657400000000000003006c6973743a73657400000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'hsr0\x00', @multicast})
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000200)={0x6, 'ip6gre0\x00', {0x3}, 0x7f})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000200000002c00128009000100626f6e64000000001c0002800500010005000000050006000500000008001c00"], 0x4c}, 0x1, 0x0, 0x0, 0x100}, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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")

0s ago: executing program 2 (id=4188):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018"], 0x54}}, 0x20000080)

kernel console output (not intermixed with test programs):

00-0000-000000000007.
[  298.896970][T13858] tipc: Started in network mode
[  298.901937][T13858] tipc: Node identity 6eaa649336f3, cluster identity 4711
[  298.909306][T13858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.916562][T13858] syzkaller0: entered promiscuous mode
[  298.922155][T13858] syzkaller0: entered allmulticast mode
[  298.932014][T13858] tipc: Resetting bearer <eth:syzkaller0>
[  298.950584][T13857] tipc: Resetting bearer <eth:syzkaller0>
[  298.959222][T13857] tipc: Disabling bearer <eth:syzkaller0>
[  299.375683][T13874] loop1: detected capacity change from 0 to 8192
[  299.413945][T13876] netlink: 'syz.1.3440': attribute type 1 has an invalid length.
[  299.421771][T13876] __nla_validate_parse: 5 callbacks suppressed
[  299.421813][T13876] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3440'.
[  299.483293][T13880] loop1: detected capacity change from 0 to 8192
[  299.759346][T13890] netlink: 'syz.3.3444': attribute type 1 has an invalid length.
[  299.767261][T13890] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3444'.
[  299.829898][T13898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3448'.
[  299.926091][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3455'.
[  299.964249][T13919] netlink: 'syz.3.3458': attribute type 1 has an invalid length.
[  299.972138][T13919] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3458'.
[  300.011632][T13926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3461'.
[  300.545931][T13944] xt_hashlimit: size too large, truncated to 1048576
[  300.597577][T13945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=13945 comm=syz.1.3468
[  300.612580][T13945] hsr0: entered promiscuous mode
[  300.617695][T13945] hsr0: entered allmulticast mode
[  300.622840][T13945] hsr_slave_0: entered allmulticast mode
[  300.628562][T13945] hsr_slave_1: entered allmulticast mode
[  300.636320][T13945] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  300.648644][T13945] loop1: detected capacity change from 0 to 512
[  300.656834][T13945] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  300.669568][T13945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  300.677894][T13945] EXT4-fs (loop1): orphan cleanup on readonly fs
[  300.684457][T13945] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #11: comm syz.1.3468: corrupted in-inode xattr: e_name out of bounds
[  300.698636][T13945] EXT4-fs (loop1): Remounting filesystem read-only
[  300.705726][T13945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  300.732635][T12136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  300.827261][T13957] loop1: detected capacity change from 0 to 8192
[  300.858081][T13963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3477'.
[  300.933851][T13963] loop4: detected capacity change from 0 to 8192
[  300.943029][T13973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.965422][T13973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.975849][T13977] netlink: 'syz.1.3482': attribute type 1 has an invalid length.
[  300.983764][T13977] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3482'.
[  301.154954][T13993] loop4: detected capacity change from 0 to 8192
[  301.337435][T14012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3496'.
[  301.461241][T14018] loop2: detected capacity change from 0 to 8192
[  301.533898][T14024] netlink: 'syz.2.3502': attribute type 1 has an invalid length.
[  301.541825][T14024] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3502'.
[  301.622315][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.631423][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.631557][T14030] xt_hashlimit: size too large, truncated to 1048576
[  301.674799][T14032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=14032 comm=syz.0.3505
[  301.689754][T14032] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  301.702340][T14032] loop0: detected capacity change from 0 to 512
[  301.709956][T14032] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  301.722539][T14032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  301.731185][T14032] EXT4-fs (loop0): orphan cleanup on readonly fs
[  301.738352][T14032] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #11: comm syz.0.3505: corrupted in-inode xattr: e_name out of bounds
[  301.754753][T14032] EXT4-fs (loop0): Remounting filesystem read-only
[  301.763153][T14032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  301.797611][T13524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  301.856321][T14044] netlink: 'syz.0.3510': attribute type 1 has an invalid length.
[  301.900221][T14052] loop0: detected capacity change from 0 to 512
[  301.907136][T14052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  301.918242][T14052] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3513: invalid block
[  301.930431][T14052] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3513: invalid indirect mapped block 4294967295 (level 1)
[  301.944976][T14052] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3513: invalid indirect mapped block 4294967295 (level 1)
[  301.961597][T14052] EXT4-fs (loop0): 2 truncates cleaned up
[  301.969330][T14052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.226782][T14052] Set syz1 is full, maxelem 65536 reached
[  302.248133][T13524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.267358][T14070] xt_hashlimit: size too large, truncated to 1048576
[  302.319045][T14071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=14071 comm=syz.0.3519
[  302.344841][T14071] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  302.382834][T14071] loop0: detected capacity change from 0 to 512
[  302.389903][T14071] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  302.401490][T14071] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  302.409567][T14071] EXT4-fs (loop0): orphan cleanup on readonly fs
[  302.425537][T14071] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #11: comm syz.0.3519: corrupted in-inode xattr: e_name out of bounds
[  302.443920][T14071] EXT4-fs (loop0): Remounting filesystem read-only
[  302.451233][T14071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  302.464524][T14079] loop4: detected capacity change from 0 to 512
[  302.471795][T14079] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  302.492745][T13524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  302.517501][T14083] loop0: detected capacity change from 0 to 1024
[  302.528211][T14085] loop4: detected capacity change from 0 to 128
[  302.530500][T14083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.536947][T14085] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  302.547116][T14083] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.560933][T14085] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  302.622886][T11890] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  302.677831][T14095] loop4: detected capacity change from 0 to 1024
[  302.697325][T14095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.733752][T13524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.877847][T14110] xt_hashlimit: size too large, truncated to 1048576
[  302.956806][T14115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=14115 comm=syz.1.3534
[  302.970559][T14115] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  302.986028][T14113] netlink: 'syz.3.3533': attribute type 10 has an invalid length.
[  303.011386][T14115] loop1: detected capacity change from 0 to 512
[  303.023465][T14115] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  303.036183][T14115] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  303.046029][T14115] EXT4-fs (loop1): orphan cleanup on readonly fs
[  303.052629][T14115] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #11: comm syz.1.3534: corrupted in-inode xattr: e_name out of bounds
[  303.072427][T14115] EXT4-fs (loop1): Remounting filesystem read-only
[  303.080702][T14115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  303.127063][T12136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  303.215763][T14055] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  303.532290][T11610] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  303.544650][T11610] EXT4-fs (loop4): This should not happen!! Data will be lost
[  303.544650][T11610] 
[  303.546801][   T29] kauditd_printk_skb: 918 callbacks suppressed
[  303.546820][   T29] audit: type=1326 audit(1752070096.812:50856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34e22858e7 code=0x7ffc0000
[  303.554415][T11610] EXT4-fs (loop4): Total free blocks count 0
[  303.562575][   T29] audit: type=1326 audit(1752070096.822:50857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34e222ab19 code=0x7ffc0000
[  303.584104][T11610] EXT4-fs (loop4): Free/Dirty block details
[  303.584150][T11610] EXT4-fs (loop4): free_blocks=68451041280
[  303.590211][   T29] audit: type=1326 audit(1752070096.822:50858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34e22858e7 code=0x7ffc0000
[  303.613948][T11610] EXT4-fs (loop4): dirty_blocks=16416
[  303.620015][   T29] audit: type=1326 audit(1752070096.822:50859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34e222ab19 code=0x7ffc0000
[  303.625758][T11610] EXT4-fs (loop4): Block reservation details
[  303.649302][   T29] audit: type=1326 audit(1752070096.822:50860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f34e228e929 code=0x7ffc0000
[  303.654653][T11610] EXT4-fs (loop4): i_reserved_data_blocks=1026
[  303.662919][T11591] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28
[  303.681259][   T29] audit: type=1326 audit(1752070096.912:50861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34e22858e7 code=0x7ffc0000
[  303.751683][   T29] audit: type=1326 audit(1752070096.912:50862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34e222ab19 code=0x7ffc0000
[  303.775228][   T29] audit: type=1326 audit(1752070096.912:50863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f34e228e929 code=0x7ffc0000
[  303.798924][   T29] audit: type=1326 audit(1752070096.942:50864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34e22858e7 code=0x7ffc0000
[  303.822562][   T29] audit: type=1326 audit(1752070096.942:50865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14124 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34e222ab19 code=0x7ffc0000
[  303.954941][T14149] loop4: detected capacity change from 0 to 128
[  303.974511][T14149] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  303.987382][T14149] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  304.000598][T14153] xt_hashlimit: size too large, truncated to 1048576
[  304.058460][T14160] netlink: 'syz.1.3552': attribute type 1 has an invalid length.
[  304.101656][T14158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=14158 comm=syz.3.3549
[  304.115050][T14158] hsr0: entered promiscuous mode
[  304.120629][T14158] hsr0: entered allmulticast mode
[  304.125940][T14158] hsr_slave_0: entered allmulticast mode
[  304.131776][T14158] hsr_slave_1: entered allmulticast mode
[  304.146308][T14158] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  304.161041][T14158] loop3: detected capacity change from 0 to 512
[  304.168453][T14158] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  304.191649][T14158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  304.199835][T14158] EXT4-fs (loop3): orphan cleanup on readonly fs
[  304.201152][T11890] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  304.206777][T14158] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #11: comm syz.3.3549: corrupted in-inode xattr: e_name out of bounds
[  304.229390][T14158] EXT4-fs (loop3): Remounting filesystem read-only
[  304.236689][T14158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  304.273289][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  304.282474][T14173] loop4: detected capacity change from 0 to 1024
[  304.296949][T14173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.309379][T14173] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.348507][T14181] netlink: 'syz.3.3559': attribute type 1 has an invalid length.
[  304.456146][T11890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.604837][T14197] netlink: 'syz.2.3563': attribute type 1 has an invalid length.
[  304.612654][T14197] __nla_validate_parse: 7 callbacks suppressed
[  304.612669][T14197] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3563'.
[  304.660380][T14201] loop2: detected capacity change from 0 to 512
[  304.667214][T14201] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  304.678866][T14201] EXT4-fs (loop2): 1 truncate cleaned up
[  304.684884][T14201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.708956][T13218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.728653][T14204] tipc: Started in network mode
[  304.733623][T14204] tipc: Node identity 8e45f1491e37, cluster identity 4711
[  304.740926][T14204] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.749892][T14204] tipc: Resetting bearer <eth:syzkaller0>
[  304.757282][T14203] tipc: Disabling bearer <eth:syzkaller0>
[  304.846756][T14208] loop2: detected capacity change from 0 to 512
[  304.853770][T14208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  304.864363][T14208] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3568: invalid block
[  304.877232][T14208] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3568: invalid indirect mapped block 4294967295 (level 1)
[  304.892030][T14208] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3568: invalid indirect mapped block 4294967295 (level 1)
[  304.907766][T14208] EXT4-fs (loop2): 2 truncates cleaned up
[  304.914005][T14208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.005178][T14215] loop0: detected capacity change from 0 to 1024
[  305.048951][T14215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.062314][T14215] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.089691][T14222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.098710][T14222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.200162][T14208] Set syz1 is full, maxelem 65536 reached
[  305.221585][T13218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.242388][T14226] netlink: 'syz.2.3574': attribute type 1 has an invalid length.
[  305.250336][T14226] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3574'.
[  305.260305][T13524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.322405][T14234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.344743][T14234] tipc: Resetting bearer <eth:syzkaller0>
[  305.363705][T14233] tipc: Disabling bearer <eth:syzkaller0>
[  305.482115][T14250] loop3: detected capacity change from 0 to 512
[  305.489234][T14250] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  305.499282][T14250] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3585: invalid block
[  305.511731][T14250] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3585: invalid indirect mapped block 4294967295 (level 1)
[  305.526029][T14250] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3585: invalid indirect mapped block 4294967295 (level 1)
[  305.540602][T14250] EXT4-fs (loop3): 2 truncates cleaned up
[  305.546929][T14250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.707476][T14250] Set syz1 is full, maxelem 65536 reached
[  305.727392][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.764150][T14257] loop3: detected capacity change from 0 to 1024
[  305.776951][T14257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.789237][T14257] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.936813][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.216958][T14267] netlink: 'syz.4.3589': attribute type 1 has an invalid length.
[  306.224799][T14267] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3589'.
[  306.288660][T14273] loop0: detected capacity change from 0 to 512
[  306.295972][T14273] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  306.314791][T14277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.323416][T14277] tipc: Resetting bearer <eth:syzkaller0>
[  306.334080][T14276] tipc: Disabling bearer <eth:syzkaller0>
[  306.399989][T14283] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3597'.
[  306.450266][T14294] netlink: 'syz.2.3601': attribute type 1 has an invalid length.
[  306.458117][T14294] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3601'.
[  306.485653][T14291] loop4: detected capacity change from 0 to 8192
[  306.518800][T14299] loop2: detected capacity change from 0 to 1024
[  306.525553][T14299] EXT4-fs: Ignoring removed i_version option
[  306.531986][T14299] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  306.544429][T14299] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3604: Invalid block bitmap block 0 in block_group 0
[  306.558153][T14299] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3604: Failed to acquire dquot type 0
[  306.569716][T14299] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.3604: Freeing blocks not in datazone - block = 0, count = 4096
[  306.584126][T14299] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3604: Invalid inode bitmap blk 0 in block_group 0
[  306.596945][T11610] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 0
[  306.608643][T14299] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  306.617425][T14299] EXT4-fs (loop2): 1 orphan inode deleted
[  306.623485][T14299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.646413][T13218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.836684][T14310] loop3: detected capacity change from 0 to 512
[  306.843709][T14310] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  306.951179][T14316] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14316 comm=syz.3.3610
[  306.963950][T14316] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14316 comm=syz.3.3610
[  307.005220][T14316] loop3: detected capacity change from 0 to 8192
[  307.090275][T14318] xt_hashlimit: size too large, truncated to 1048576
[  307.141790][T14319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=14319 comm=syz.3.3611
[  307.159205][T14319] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  307.171609][T14319] loop3: detected capacity change from 0 to 512
[  307.180315][T14319] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  307.191061][T14319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  307.200873][T14319] EXT4-fs (loop3): orphan cleanup on readonly fs
[  307.207458][T14319] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #11: comm syz.3.3611: corrupted in-inode xattr: e_name out of bounds
[  307.221990][T14319] EXT4-fs (loop3): Remounting filesystem read-only
[  307.229080][T14319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  307.255105][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  307.297466][T14327] loop0: detected capacity change from 0 to 512
[  307.304339][T14327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  307.314995][T14327] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3614: invalid block
[  307.328239][T14327] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3614: invalid indirect mapped block 4294967295 (level 1)
[  307.342456][T14327] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3614: invalid indirect mapped block 4294967295 (level 1)
[  307.357289][T14327] EXT4-fs (loop0): 2 truncates cleaned up
[  307.363523][T14327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.423745][T14335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3617'.
[  307.518746][T14340] loop2: detected capacity change from 0 to 512
[  307.527615][T14340] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  307.531236][T14327] Set syz1 is full, maxelem 65536 reached
[  307.569811][T14343] syzkaller0: entered promiscuous mode
[  307.575404][T14343] syzkaller0: entered allmulticast mode
[  308.204518][T14365] loop1: detected capacity change from 0 to 1024
[  308.258264][T14371] netlink: 'syz.4.3631': attribute type 1 has an invalid length.
[  308.266138][T14371] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3631'.
[  308.322728][T14378] loop3: detected capacity change from 0 to 512
[  308.344901][T14378] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  308.365153][T14380] syzkaller0: entered promiscuous mode
[  308.370704][T14380] syzkaller0: entered allmulticast mode
[  308.474209][T14387] loop4: detected capacity change from 0 to 128
[  308.488145][T14387] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  308.559673][   T29] kauditd_printk_skb: 1700 callbacks suppressed
[  308.559689][   T29] audit: type=1326 audit(1752070101.822:52563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f0e858e7 code=0x7ffc0000
[  308.594236][T14396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.595322][   T29] audit: type=1326 audit(1752070101.852:52564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f0e2ab19 code=0x7ffc0000
[  308.613016][T14396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.626106][   T29] audit: type=1326 audit(1752070101.852:52565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f0e858e7 code=0x7ffc0000
[  308.657447][   T29] audit: type=1326 audit(1752070101.852:52566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f0e2ab19 code=0x7ffc0000
[  308.681019][   T29] audit: type=1326 audit(1752070101.852:52567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f29f0e8e929 code=0x7ffc0000
[  308.709960][T14151] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  308.719365][   T29] audit: type=1326 audit(1752070101.872:52568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f0e858e7 code=0x7ffc0000
[  308.748412][   T29] audit: type=1326 audit(1752070101.872:52569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f0e2ab19 code=0x7ffc0000
[  308.771923][   T29] audit: type=1326 audit(1752070101.872:52570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f29f0e8e929 code=0x7ffc0000
[  308.795468][   T29] audit: type=1326 audit(1752070101.872:52571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f0e858e7 code=0x7ffc0000
[  308.819317][   T29] audit: type=1326 audit(1752070101.872:52572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14364 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f0e2ab19 code=0x7ffc0000
[  308.888301][T14401] loop4: detected capacity change from 0 to 8192
[  308.898893][T14403] loop0: detected capacity change from 0 to 512
[  308.905786][T14403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  308.915710][T14403] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3642: invalid block
[  308.929499][T14403] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3642: invalid indirect mapped block 4294967295 (level 1)
[  308.943833][T14403] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3642: invalid indirect mapped block 4294967295 (level 1)
[  308.958575][T14403] EXT4-fs (loop0): 2 truncates cleaned up
[  308.982153][T14406] netlink: 'syz.4.3643': attribute type 1 has an invalid length.
[  308.990128][T14406] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3643'.
[  309.086889][T11610] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  309.099203][T11610] EXT4-fs (loop1): This should not happen!! Data will be lost
[  309.099203][T11610] 
[  309.099797][T14412] syzkaller0: entered promiscuous mode
[  309.108989][T11610] EXT4-fs (loop1): Total free blocks count 0
[  309.114371][T14412] syzkaller0: entered allmulticast mode
[  309.126128][T11610] EXT4-fs (loop1): Free/Dirty block details
[  309.132040][T11610] EXT4-fs (loop1): free_blocks=68451041280
[  309.137926][T11610] EXT4-fs (loop1): dirty_blocks=16416
[  309.143316][T11610] EXT4-fs (loop1): Block reservation details
[  309.149336][T11610] EXT4-fs (loop1): i_reserved_data_blocks=1026
[  309.162123][T14403] Set syz1 is full, maxelem 65536 reached
[  309.162280][T11610] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28
[  309.180617][T11610] EXT4-fs (loop1): This should not happen!! Data will be lost
[  309.180617][T11610] 
[  309.244786][T14420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14420 comm=syz.0.3650
[  309.257415][T14420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14420 comm=syz.0.3650
[  309.307429][T14420] loop0: detected capacity change from 0 to 8192
[  309.369977][T14426] netlink: 'syz.0.3651': attribute type 1 has an invalid length.
[  309.377842][T14426] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3651'.
[  309.448583][T14430] loop0: detected capacity change from 0 to 8192
[  309.571608][T14440] loop0: detected capacity change from 0 to 512
[  309.578743][T14440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  309.588619][T14440] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3658: invalid block
[  309.600989][T14440] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3658: invalid indirect mapped block 4294967295 (level 1)
[  309.616128][T14440] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3658: invalid indirect mapped block 4294967295 (level 1)
[  309.630355][T14440] EXT4-fs (loop0): 2 truncates cleaned up
[  309.777121][T14440] Set syz1 is full, maxelem 65536 reached
[  309.841046][T14448] loop0: detected capacity change from 0 to 128
[  309.850519][T14448] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  309.912081][T14451] loop0: detected capacity change from 0 to 1024
[  309.918847][T14451] EXT4-fs: Ignoring removed i_version option
[  309.925380][T14451] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  309.937187][T14451] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3662: Invalid block bitmap block 0 in block_group 0
[  309.951123][T14451] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3662: Failed to acquire dquot type 0
[  309.963226][T14451] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.3662: Freeing blocks not in datazone - block = 0, count = 4096
[  309.976808][T14451] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3662: Invalid inode bitmap blk 0 in block_group 0
[  309.989589][T14451] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  309.998220][T11610] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 0
[  309.998238][T14451] EXT4-fs (loop0): 1 orphan inode deleted
[  310.025156][T14454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3663'.
[  310.106456][T14460] loop4: detected capacity change from 0 to 8192
[  310.197954][T14470] loop1: detected capacity change from 0 to 512
[  310.205016][T14470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  310.214856][T14470] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3670: invalid block
[  310.227537][T14470] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3670: invalid indirect mapped block 4294967295 (level 1)
[  310.242924][T14470] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3670: invalid indirect mapped block 4294967295 (level 1)
[  310.258522][T14470] EXT4-fs (loop1): 2 truncates cleaned up
[  310.407334][T14479] loop2: detected capacity change from 0 to 1024
[  310.414196][T14479] EXT4-fs: Ignoring removed i_version option
[  310.423020][T14479] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  310.423962][T14470] Set syz1 is full, maxelem 65536 reached
[  310.437233][T14479] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3674: Invalid block bitmap block 0 in block_group 0
[  310.453233][T14479] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3674: Failed to acquire dquot type 0
[  310.465435][T14479] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.3674: Freeing blocks not in datazone - block = 0, count = 4096
[  310.479358][T14479] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3674: Invalid inode bitmap blk 0 in block_group 0
[  310.492136][T11648] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:66: Failed to release dquot type 0
[  310.492190][T14479] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  310.492252][T14479] EXT4-fs (loop2): 1 orphan inode deleted
[  310.539901][T14486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3675'.
[  310.584569][T14488] loop2: detected capacity change from 0 to 8192
[  310.648073][T14495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.656699][T14495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.688558][T14497] netlink: 'syz.2.3681': attribute type 1 has an invalid length.
[  310.696396][T14497] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3681'.
[  310.960840][T14506] syzkaller0: entered promiscuous mode
[  310.966457][T14506] syzkaller0: entered allmulticast mode
[  311.032191][T14508] loop0: detected capacity change from 0 to 512
[  311.039273][T14508] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  311.068975][T14510] loop0: detected capacity change from 0 to 1024
[  311.075602][T14510] EXT4-fs: Ignoring removed i_version option
[  311.081859][T14510] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  311.093714][T14510] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3687: Invalid block bitmap block 0 in block_group 0
[  311.107390][T14510] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3687: Failed to acquire dquot type 0
[  311.118992][T14510] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.3687: Freeing blocks not in datazone - block = 0, count = 4096
[  311.132645][T14510] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3687: Invalid inode bitmap blk 0 in block_group 0
[  311.145646][T14510] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  311.147146][T11619] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 0
[  311.154511][T14510] EXT4-fs (loop0): 1 orphan inode deleted
[  311.289129][T14517] loop0: detected capacity change from 0 to 8192
[  311.365235][T14525] loop0: detected capacity change from 0 to 128
[  311.374623][T14525] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  311.450747][T14536] loop0: detected capacity change from 0 to 512
[  311.458107][T14536] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  311.493639][T14538] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14538 comm=syz.0.3699
[  311.506492][T14538] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14538 comm=syz.0.3699
[  311.554696][T14538] loop0: detected capacity change from 0 to 8192
[  311.638605][T14551] xt_hashlimit: size too large, truncated to 1048576
[  311.659362][T14552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.672653][T14552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.726447][T14554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=14554 comm=syz.1.3705
[  311.740599][T14554] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  311.763742][T14554] loop1: detected capacity change from 0 to 512
[  311.785181][T14554] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  311.798002][T14554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  311.806175][T14554] EXT4-fs (loop1): orphan cleanup on readonly fs
[  311.813160][T14554] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #11: comm syz.1.3705: corrupted in-inode xattr: e_name out of bounds
[  311.827946][T14554] EXT4-fs (loop1): Remounting filesystem read-only
[  311.886969][T14565] loop1: detected capacity change from 0 to 512
[  311.894129][T14565] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  311.982134][T14578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3716'.
[  312.027365][T14584] xt_hashlimit: size too large, truncated to 1048576
[  312.129098][T14588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=14588 comm=syz.2.3719
[  312.142372][T14588] hsr0: entered promiscuous mode
[  312.147450][T14588] hsr0: entered allmulticast mode
[  312.152526][T14588] hsr_slave_0: entered allmulticast mode
[  312.158210][T14588] hsr_slave_1: entered allmulticast mode
[  312.170392][T14584] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  312.181713][T14584] loop2: detected capacity change from 0 to 512
[  312.188753][T14584] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  312.199482][T14584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  312.207547][T14584] EXT4-fs (loop2): orphan cleanup on readonly fs
[  312.214078][T14584] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #11: comm syz.2.3719: corrupted in-inode xattr: e_name out of bounds
[  312.228563][T14584] EXT4-fs (loop2): Remounting filesystem read-only
[  312.271884][T14593] loop4: detected capacity change from 0 to 128
[  312.280453][T14593] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  312.411729][T14601] loop4: detected capacity change from 0 to 512
[  312.418938][T14601] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  312.564755][T14615] loop4: detected capacity change from 0 to 8192
[  312.588488][T14617] loop0: detected capacity change from 0 to 1024
[  312.595178][T14617] EXT4-fs: Ignoring removed i_version option
[  312.601661][T14617] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  312.614806][T14617] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3732: Invalid block bitmap block 0 in block_group 0
[  312.630149][T14617] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3732: Failed to acquire dquot type 0
[  312.642971][T14617] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.3732: Freeing blocks not in datazone - block = 0, count = 4096
[  312.659951][T14617] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3732: Invalid inode bitmap blk 0 in block_group 0
[  312.673583][T14617] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  312.683435][T11619] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 0
[  312.683621][T14617] EXT4-fs (loop0): 1 orphan inode deleted
[  312.735747][T14627] loop4: detected capacity change from 0 to 512
[  312.743135][T14627] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  312.746816][T14629] netlink: 'syz.0.3737': attribute type 1 has an invalid length.
[  312.759617][T14629] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3737'.
[  312.909268][T14645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.924138][T14643] loop1: detected capacity change from 0 to 8192
[  312.930832][T14645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.982883][T14647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3744'.
[  313.043981][T14651] loop2: detected capacity change from 0 to 1024
[  313.050723][T14647] loop1: detected capacity change from 0 to 8192
[  313.060690][T14651] EXT4-fs: Ignoring removed i_version option
[  313.067241][T14651] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  313.079910][T14651] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3746: Invalid block bitmap block 0 in block_group 0
[  313.093693][T14651] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3746: Failed to acquire dquot type 0
[  313.105443][T14651] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.3746: Freeing blocks not in datazone - block = 0, count = 4096
[  313.119252][T14651] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3746: Invalid inode bitmap blk 0 in block_group 0
[  313.133013][T14651] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  313.142096][T11591] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0
[  313.142257][T14651] EXT4-fs (loop2): 1 orphan inode deleted
[  313.196885][T14661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3750'.
[  313.210203][T14663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.219264][T14663] tipc: Resetting bearer <eth:syzkaller0>
[  313.226662][T14662] tipc: Disabling bearer <eth:syzkaller0>
[  313.260623][T14669] xt_hashlimit: size too large, truncated to 1048576
[  313.351153][T14675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3757'.
[  313.361396][T14676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=14676 comm=syz.1.3754
[  313.393240][T14676] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  313.405111][T14676] loop1: detected capacity change from 0 to 512
[  313.412852][T14676] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  313.432072][T14675] loop2: detected capacity change from 0 to 8192
[  313.439902][T14676] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  313.448004][T14676] EXT4-fs (loop1): orphan cleanup on readonly fs
[  313.454606][T14676] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #11: comm syz.1.3754: corrupted in-inode xattr: e_name out of bounds
[  313.454810][T14676] EXT4-fs (loop1): Remounting filesystem read-only
[  313.502890][T14684] loop3: detected capacity change from 0 to 1024
[  313.509765][T14684] EXT4-fs: Ignoring removed i_version option
[  313.516435][T14684] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  313.529079][T14684] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3761: Invalid block bitmap block 0 in block_group 0
[  313.544715][T14684] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3761: Failed to acquire dquot type 0
[  313.556746][T14684] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.3761: Freeing blocks not in datazone - block = 0, count = 4096
[  313.568350][T14692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3763'.
[  313.602661][T14696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.611561][T14696] tipc: Resetting bearer <eth:syzkaller0>
[  313.613951][T14684] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3761: Invalid inode bitmap blk 0 in block_group 0
[  313.630579][T14684] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  313.631747][T11591] __quota_error: 829 callbacks suppressed
[  313.631765][T11591] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8
[  313.640550][T14684] EXT4-fs (loop3): 1 orphan inode deleted
[  313.644940][T11591] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0
[  313.672714][T14695] tipc: Disabling bearer <eth:syzkaller0>
[  313.749020][   T29] audit: type=1326 audit(1752070107.012:53385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14704 comm="syz.3.3769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1bfc4e929 code=0x0
[  313.783658][T14710] xt_hashlimit: size too large, truncated to 1048576
[  313.824425][T14707] loop0: detected capacity change from 0 to 1024
[  313.860967][T14715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3774'.
[  313.871406][T14718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=14718 comm=syz.1.3771
[  313.886869][T14707] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.899240][T14718] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  313.924325][T14718] loop1: detected capacity change from 0 to 512
[  313.947954][T14718] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  313.962286][T14718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  313.970466][T14718] EXT4-fs (loop1): orphan cleanup on readonly fs
[  313.977968][T14718] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #11: comm syz.1.3771: corrupted in-inode xattr: e_name out of bounds
[  313.992007][T14715] loop2: detected capacity change from 0 to 8192
[  313.992731][T14718] EXT4-fs (loop1): Remounting filesystem read-only
[  314.053138][   T29] audit: type=1326 audit(1752070107.312:53386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.0.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e228e929 code=0x7ffc0000
[  314.076935][   T29] audit: type=1326 audit(1752070107.312:53387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.0.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f34e228e929 code=0x7ffc0000
[  314.100599][   T29] audit: type=1326 audit(1752070107.312:53388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.0.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e228e929 code=0x7ffc0000
[  314.124436][   T29] audit: type=1326 audit(1752070107.312:53389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14706 comm="syz.0.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e228e929 code=0x7ffc0000
[  314.174189][T14738] tipc: Started in network mode
[  314.179214][T14738] tipc: Node identity 8a0e7952d23a, cluster identity 4711
[  314.186669][T14738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.195715][T14738] tipc: Resetting bearer <eth:syzkaller0>
[  314.203078][T14737] tipc: Disabling bearer <eth:syzkaller0>
[  314.290050][T14746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.326903][T14746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.446635][T14757] xt_hashlimit: size too large, truncated to 1048576
[  314.537372][T14759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=14759 comm=syz.0.3789
[  314.551045][T14759] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  314.563817][T14759] loop0: detected capacity change from 0 to 512
[  314.623719][T14759] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  314.634222][T14759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  314.672180][T14759] EXT4-fs (loop0): orphan cleanup on readonly fs
[  314.678806][T14759] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #11: comm syz.0.3789: corrupted in-inode xattr: e_name out of bounds
[  314.694094][T14759] EXT4-fs (loop0): Remounting filesystem read-only
[  314.786790][T14770] loop3: detected capacity change from 0 to 1024
[  314.842938][T14770] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.845452][T14776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.865018][T14776] tipc: Resetting bearer <eth:syzkaller0>
[  314.879730][T14773] tipc: Disabling bearer <eth:syzkaller0>
[  315.009617][   T29] audit: type=1326 audit(1752070108.272:53390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14769 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bfc4e929 code=0x7ffc0000
[  315.033278][   T29] audit: type=1326 audit(1752070108.272:53391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14769 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe1bfc4e929 code=0x7ffc0000
[  315.059544][   T29] audit: type=1326 audit(1752070108.322:53392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14769 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bfc4e929 code=0x7ffc0000
[  315.083322][   T29] audit: type=1326 audit(1752070108.322:53393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14769 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bfc4e929 code=0x7ffc0000
[  315.139311][T14790] loop4: detected capacity change from 0 to 128
[  315.165443][T14790] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  315.230518][T14802] __nla_validate_parse: 1 callbacks suppressed
[  315.230535][T14802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3805'.
[  315.268680][T14805] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14805 comm=syz.2.3806
[  315.281301][T14805] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14805 comm=syz.2.3806
[  315.332806][T14805] loop2: detected capacity change from 0 to 8192
[  315.550365][T14826] loop4: detected capacity change from 0 to 1024
[  315.576862][T14826] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.679084][T14831] ipvlan2: entered promiscuous mode
[  315.685682][T14831] bridge0: port 3(ipvlan2) entered blocking state
[  315.692288][T14831] bridge0: port 3(ipvlan2) entered disabled state
[  315.699275][T14831] ipvlan2: entered allmulticast mode
[  315.704636][T14831] bridge0: entered allmulticast mode
[  315.710740][T14831] ipvlan2: left allmulticast mode
[  315.715810][T14831] bridge0: left allmulticast mode
[  315.774994][T14836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3817'.
[  315.808274][T14838] loop4: detected capacity change from 0 to 128
[  315.818895][T14838] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  316.006590][T14843] loop4: detected capacity change from 0 to 2048
[  316.213035][T14858] loop3: detected capacity change from 0 to 8192
[  316.351253][T14870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.360001][T14870] tipc: Resetting bearer <eth:syzkaller0>
[  316.376405][T14869] tipc: Disabling bearer <eth:syzkaller0>
[  316.406858][    T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  316.420619][    T9] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  316.553661][T14887] loop0: detected capacity change from 0 to 1024
[  316.580977][T14887] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.585374][T14888] loop2: detected capacity change from 0 to 8192
[  316.725189][T14898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3842'.
[  316.785173][T14903] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  316.794295][T14898] loop2: detected capacity change from 0 to 8192
[  316.964542][T14920] loop2: detected capacity change from 0 to 8192
[  317.040864][T14930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.046580][T14931] loop2: detected capacity change from 0 to 1024
[  317.063799][T14930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.067294][T14931] EXT4-fs: Ignoring removed i_version option
[  317.117691][T14931] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  317.134101][T14932] ipvlan2: entered promiscuous mode
[  317.142706][T14931] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3853: Invalid block bitmap block 0 in block_group 0
[  317.163276][T14931] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3853: Failed to acquire dquot type 0
[  317.201598][T14931] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.3853: Freeing blocks not in datazone - block = 0, count = 4096
[  317.229622][T14932] bridge0: port 3(ipvlan2) entered blocking state
[  317.236166][T14932] bridge0: port 3(ipvlan2) entered disabled state
[  317.243250][T14931] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3853: Invalid inode bitmap blk 0 in block_group 0
[  317.267112][T14931] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  317.280152][T11610] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 0
[  317.292516][T14931] EXT4-fs (loop2): 1 orphan inode deleted
[  317.295599][T14932] ipvlan2: entered allmulticast mode
[  317.303640][T14932] bridge0: entered allmulticast mode
[  317.311144][ T3407] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  317.316074][T14932] ipvlan2: left allmulticast mode
[  317.323647][T14932] bridge0: left allmulticast mode
[  317.325853][T14931] EXT4-fs mount: 53 callbacks suppressed
[  317.325874][T14931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.365414][ T3407] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  317.395956][T13218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.417975][T14941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3857'.
[  317.490895][T14945] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  317.502008][T14941] loop2: detected capacity change from 0 to 8192
[  317.690937][T14958] loop4: detected capacity change from 0 to 128
[  317.708618][T14958] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  317.751980][T14958] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  317.861784][T11890] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  317.876812][T14964] loop1: detected capacity change from 0 to 8192
[  317.927173][T14970] loop4: detected capacity change from 0 to 2048
[  317.947707][T14970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.980500][T14977] loop1: detected capacity change from 0 to 1024
[  317.987619][T14977] EXT4-fs: Ignoring removed i_version option
[  317.988267][T11890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.004852][T14977] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  318.021562][T14977] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3868: Invalid block bitmap block 0 in block_group 0
[  318.040872][T14983] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  318.041525][T14977] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3868: Failed to acquire dquot type 0
[  318.066597][T14977] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.3868: Freeing blocks not in datazone - block = 0, count = 4096
[  318.080850][T14977] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3868: Invalid inode bitmap blk 0 in block_group 0
[  318.095256][T14977] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  318.101219][T11619] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 0
[  318.117703][T14977] EXT4-fs (loop1): 1 orphan inode deleted
[  318.129090][T14977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.159011][T14991] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14991 comm=syz.0.3872
[  318.171663][T14991] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14991 comm=syz.0.3872
[  318.186514][T12136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.220224][T14995] loop1: detected capacity change from 0 to 1024
[  318.239543][T14995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.252291][T14991] loop0: detected capacity change from 0 to 8192
[  318.338969][T15002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.367521][T15002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.442806][T15005] loop0: detected capacity change from 0 to 512
[  318.459157][T15005] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  318.470064][T15003] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3874'.
[  318.502981][T15008] loop0: detected capacity change from 0 to 128
[  318.511872][T15008] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  318.526216][T15008] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  318.618445][T13524] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  318.639655][   T29] kauditd_printk_skb: 702 callbacks suppressed
[  318.639674][   T29] audit: type=1326 audit(1752070111.902:54090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f0e858e7 code=0x7ffc0000
[  318.720225][T15022] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  318.770990][   T29] audit: type=1326 audit(1752070111.902:54091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f0e2ab19 code=0x7ffc0000
[  318.794600][   T29] audit: type=1326 audit(1752070111.902:54092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f29f0e8e929 code=0x7ffc0000
[  318.818105][   T29] audit: type=1326 audit(1752070111.912:54093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f0e858e7 code=0x7ffc0000
[  318.841608][   T29] audit: type=1326 audit(1752070111.912:54094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f0e2ab19 code=0x7ffc0000
[  318.865101][   T29] audit: type=1326 audit(1752070111.912:54095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f29f0e8e929 code=0x7ffc0000
[  318.888598][   T29] audit: type=1326 audit(1752070111.922:54096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f0e858e7 code=0x7ffc0000
[  318.912150][   T29] audit: type=1326 audit(1752070111.922:54097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29f0e2ab19 code=0x7ffc0000
[  318.935660][   T29] audit: type=1326 audit(1752070111.922:54098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f29f0e8e929 code=0x7ffc0000
[  318.959099][   T29] audit: type=1326 audit(1752070111.932:54099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.1.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29f0e858e7 code=0x7ffc0000
[  319.003251][T15034] loop3: detected capacity change from 0 to 1024
[  319.010203][T15034] EXT4-fs: Ignoring removed i_version option
[  319.017986][T15034] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  319.037405][T15034] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3885: Invalid block bitmap block 0 in block_group 0
[  319.062345][T15034] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3885: Failed to acquire dquot type 0
[  319.081199][T15034] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.3885: Freeing blocks not in datazone - block = 0, count = 4096
[  319.099053][T15034] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3885: Invalid inode bitmap blk 0 in block_group 0
[  319.113162][T15034] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  319.121952][T11638] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:57: Failed to release dquot type 0
[  319.134858][T15034] EXT4-fs (loop3): 1 orphan inode deleted
[  319.152212][T15034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.156759][T11638] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  319.185388][T15045] loop4: detected capacity change from 0 to 128
[  319.193791][T11638] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  319.196412][T15045] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  319.206162][T11638] EXT4-fs (loop1): This should not happen!! Data will be lost
[  319.206162][T11638] 
[  319.227812][T11638] EXT4-fs (loop1): Total free blocks count 0
[  319.233811][T11638] EXT4-fs (loop1): Free/Dirty block details
[  319.239758][T11638] EXT4-fs (loop1): free_blocks=68451041280
[  319.245611][T11638] EXT4-fs (loop1): dirty_blocks=16416
[  319.251122][T11638] EXT4-fs (loop1): Block reservation details
[  319.252017][T15045] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  319.257143][T11638] EXT4-fs (loop1): i_reserved_data_blocks=1026
[  319.274840][T11638] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28
[  319.278347][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.383811][T11890] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  319.438801][T15061] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  319.450872][T15058] loop3: detected capacity change from 0 to 512
[  319.462296][T15058] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  319.507592][T15067] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15067 comm=syz.3.3898
[  319.520287][T15067] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15067 comm=syz.3.3898
[  319.537137][   T23] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  319.565601][   T23] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  319.619095][T15067] loop3: detected capacity change from 0 to 8192
[  319.711299][T15082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.719901][T15082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.758197][T15084] loop3: detected capacity change from 0 to 1024
[  319.777295][T15084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.789887][T15084] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.830034][T15090] loop0: detected capacity change from 0 to 1024
[  319.837706][T15090] EXT4-fs: Ignoring removed i_version option
[  319.844112][T15090] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  319.856785][T15090] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3904: Invalid block bitmap block 0 in block_group 0
[  319.870671][T15090] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3904: Failed to acquire dquot type 0
[  319.882265][T15090] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.3904: Freeing blocks not in datazone - block = 0, count = 4096
[  319.895938][T15090] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3904: Invalid inode bitmap blk 0 in block_group 0
[  319.908999][T15090] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  319.917688][T11619] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 0
[  319.930464][T15090] EXT4-fs (loop0): 1 orphan inode deleted
[  319.936773][T15090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.962483][T13524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.972570][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.994551][T15095] loop0: detected capacity change from 0 to 128
[  320.002658][T15095] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  320.015173][T15095] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  320.049108][T15099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.057881][T15099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.076959][T13524] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  320.297070][T15104] loop1: detected capacity change from 0 to 512
[  320.304999][T15104] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  320.317501][T15106] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  320.411865][T15118] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15118 comm=syz.2.3912
[  320.424523][T15118] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15118 comm=syz.2.3912
[  320.463732][T15118] loop2: detected capacity change from 0 to 8192
[  320.683082][    T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  320.698265][    T9] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  320.946874][T15130] loop0: detected capacity change from 0 to 1024
[  320.958042][T15130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.970331][T15130] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.126091][T13524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.214026][T15147] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  321.281307][T15156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3922'.
[  321.371326][T15160] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15160 comm=syz.1.3924
[  321.383991][T15160] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15160 comm=syz.1.3924
[  321.424211][T15160] loop1: detected capacity change from 0 to 8192
[  321.625218][T15166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.635203][T15166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.291360][T15183] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  322.363892][T15191] loop1: detected capacity change from 0 to 512
[  322.371066][T15191] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  322.423395][T15195] loop1: detected capacity change from 0 to 128
[  322.432429][T15195] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  322.445016][T15195] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  322.497054][T12136] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  322.515213][T15198] loop1: detected capacity change from 0 to 512
[  322.522479][T15198] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  322.533054][T15198] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3937: invalid block
[  322.545562][T15198] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3937: invalid indirect mapped block 4294967295 (level 1)
[  322.559914][T15198] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3937: invalid indirect mapped block 4294967295 (level 1)
[  322.574406][T15198] EXT4-fs (loop1): 2 truncates cleaned up
[  322.580721][T15198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.609161][T15201] loop2: detected capacity change from 0 to 1024
[  322.617200][T15201] EXT4-fs: Ignoring removed i_version option
[  322.623600][T15201] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  322.637796][T15201] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3938: Invalid block bitmap block 0 in block_group 0
[  322.651635][T15201] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3938: Failed to acquire dquot type 0
[  322.663952][T15201] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.3938: Freeing blocks not in datazone - block = 0, count = 4096
[  322.683203][T15201] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3938: Invalid inode bitmap blk 0 in block_group 0
[  322.696245][T11591] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0
[  322.750602][T15201] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  322.774351][T15201] EXT4-fs (loop2): 1 orphan inode deleted
[  322.781643][T15201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.794543][T15198] Set syz1 is full, maxelem 65536 reached
[  322.812587][T13218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.833938][T12136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.850881][T15212] loop2: detected capacity change from 0 to 1024
[  322.868323][T15212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.887641][T15220] loop1: detected capacity change from 0 to 512
[  322.905008][T15222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3947'.
[  322.918174][T15220] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  323.055830][T15234] loop3: detected capacity change from 0 to 2048
[  323.090800][T15234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.091197][T15231] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3943'.
[  323.228659][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.301178][T15244] loop3: detected capacity change from 0 to 1024
[  323.308127][T15244] EXT4-fs: Ignoring removed i_version option
[  323.314951][T15244] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  323.328363][T15244] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3954: Invalid block bitmap block 0 in block_group 0
[  323.342064][T15244] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3954: Failed to acquire dquot type 0
[  323.353599][T15244] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.3954: Freeing blocks not in datazone - block = 0, count = 4096
[  323.367232][T15244] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3954: Invalid inode bitmap blk 0 in block_group 0
[  323.380451][T15244] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  323.389156][T11591] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0
[  323.389267][T15244] EXT4-fs (loop3): 1 orphan inode deleted
[  323.407840][T15244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.431789][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.450476][T15247] loop3: detected capacity change from 0 to 512
[  323.458097][T15247] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  323.468308][T15247] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3955: invalid block
[  323.480515][T15247] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3955: invalid indirect mapped block 4294967295 (level 1)
[  323.494665][T15247] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3955: invalid indirect mapped block 4294967295 (level 1)
[  323.508908][T15247] EXT4-fs (loop3): 2 truncates cleaned up
[  323.515480][T15247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.649579][   T29] kauditd_printk_skb: 1424 callbacks suppressed
[  323.649592][   T29] audit: type=1326 audit(1752070116.912:55512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15211 comm="syz.2.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0d63a58e7 code=0x7ffc0000
[  323.675994][T15247] Set syz1 is full, maxelem 65536 reached
[  323.684029][   T29] audit: type=1326 audit(1752070116.942:55513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15211 comm="syz.2.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0d634ab19 code=0x7ffc0000
[  323.708823][   T29] audit: type=1326 audit(1752070116.942:55514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15211 comm="syz.2.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0d63a58e7 code=0x7ffc0000
[  323.732318][   T29] audit: type=1326 audit(1752070116.942:55515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15211 comm="syz.2.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0d634ab19 code=0x7ffc0000
[  323.755871][   T29] audit: type=1326 audit(1752070116.942:55516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15211 comm="syz.2.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe0d63ae929 code=0x7ffc0000
[  323.779362][   T29] audit: type=1326 audit(1752070116.942:55517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15226 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34e22858e7 code=0x7ffc0000
[  323.802932][   T29] audit: type=1326 audit(1752070116.942:55518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15226 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34e222ab19 code=0x7ffc0000
[  323.826478][   T29] audit: type=1326 audit(1752070116.942:55519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15226 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f34e228e929 code=0x7ffc0000
[  323.850166][   T29] audit: type=1326 audit(1752070116.972:55520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15226 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34e22858e7 code=0x7ffc0000
[  323.850202][   T29] audit: type=1326 audit(1752070116.972:55521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15226 comm="syz.0.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34e222ab19 code=0x7ffc0000
[  323.851991][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.913912][T15252] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  323.983347][T11638] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  324.010586][T11638] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  324.022992][T11638] EXT4-fs (loop2): This should not happen!! Data will be lost
[  324.022992][T11638] 
[  324.032687][T11638] EXT4-fs (loop2): Total free blocks count 0
[  324.038719][T11638] EXT4-fs (loop2): Free/Dirty block details
[  324.044634][T11638] EXT4-fs (loop2): free_blocks=68451041280
[  324.044707][T15267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3962'.
[  324.050506][T11638] EXT4-fs (loop2): dirty_blocks=16416
[  324.064921][T11638] EXT4-fs (loop2): Block reservation details
[  324.070957][T11638] EXT4-fs (loop2): i_reserved_data_blocks=1026
[  324.080440][T11638] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28
[  324.119726][T15268] loop3: detected capacity change from 0 to 8192
[  324.153011][T15274] loop0: detected capacity change from 0 to 512
[  324.161317][T15274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  324.180077][T15274] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3966: invalid block
[  324.202517][T15274] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3966: invalid indirect mapped block 4294967295 (level 1)
[  324.217991][T15274] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3966: invalid indirect mapped block 4294967295 (level 1)
[  324.253069][T15274] EXT4-fs (loop0): 2 truncates cleaned up
[  324.259251][T15274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.343938][T15287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.381374][T15288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.392514][T15287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.397688][T15288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.438570][T15274] Set syz1 is full, maxelem 65536 reached
[  324.463754][T13524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.486555][T15290] loop0: detected capacity change from 0 to 1024
[  324.497178][T15290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.682449][T15294] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3971'.
[  325.018146][T15299] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  325.028316][T15301] loop1: detected capacity change from 0 to 1024
[  325.035085][T15301] EXT4-fs: Ignoring removed i_version option
[  325.041541][T15301] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  325.053541][T15301] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3974: Invalid block bitmap block 0 in block_group 0
[  325.067272][T15301] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3974: Failed to acquire dquot type 0
[  325.078955][T15301] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.3974: Freeing blocks not in datazone - block = 0, count = 4096
[  325.094176][T15301] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3974: Invalid inode bitmap blk 0 in block_group 0
[  325.107422][T11591] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0
[  325.120239][T15301] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  325.128943][T15301] EXT4-fs (loop1): 1 orphan inode deleted
[  325.135028][T15301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.165099][T12136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.210747][T15318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3979'.
[  325.242333][T11591] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  325.257413][T15318] loop1: detected capacity change from 0 to 8192
[  325.270142][T11591] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  325.282430][T11591] EXT4-fs (loop0): This should not happen!! Data will be lost
[  325.282430][T11591] 
[  325.292717][T11591] EXT4-fs (loop0): Total free blocks count 0
[  325.298789][T11591] EXT4-fs (loop0): Free/Dirty block details
[  325.304694][T11591] EXT4-fs (loop0): free_blocks=68451041280
[  325.310597][T11591] EXT4-fs (loop0): dirty_blocks=16416
[  325.316050][T11591] EXT4-fs (loop0): Block reservation details
[  325.319622][ T3407] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  325.322031][T11591] EXT4-fs (loop0): i_reserved_data_blocks=1026
[  325.336513][ T3407] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  325.364066][T11591] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28
[  325.388243][T15322] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15322 comm=syz.1.3980
[  325.400845][T15322] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15322 comm=syz.1.3980
[  325.460406][T15322] loop1: detected capacity change from 0 to 8192
[  325.574022][T15329] loop0: detected capacity change from 0 to 512
[  325.581830][T15329] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  325.628133][T15333] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  325.733266][T15345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.741750][T15345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.856989][T15353] loop3: detected capacity change from 0 to 2048
[  325.866669][T15353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.964932][T15362] loop4: detected capacity change from 0 to 512
[  325.972268][T15362] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  325.992114][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.015171][T15366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15366 comm=syz.3.3995
[  326.027832][T15366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15366 comm=syz.3.3995
[  326.076196][T15366] loop3: detected capacity change from 0 to 8192
[  326.105775][ T3400] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  326.113526][ T3400] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  326.153916][T15369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.162317][T15369] tipc: Resetting bearer <eth:syzkaller0>
[  326.170743][T15368] tipc: Disabling bearer <eth:syzkaller0>
[  326.238281][T15371] loop3: detected capacity change from 0 to 1024
[  326.245002][T15371] EXT4-fs: Ignoring removed i_version option
[  326.251576][T15371] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  326.267399][T15371] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3998: Invalid block bitmap block 0 in block_group 0
[  326.282092][T15371] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3998: Failed to acquire dquot type 0
[  326.293642][T15371] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.3998: Freeing blocks not in datazone - block = 0, count = 4096
[  326.308223][T15371] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3998: Invalid inode bitmap blk 0 in block_group 0
[  326.321041][T15371] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  326.330055][T15371] EXT4-fs (loop3): 1 orphan inode deleted
[  326.335864][T11648] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:66: Failed to release dquot type 0
[  326.348013][T15371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.382049][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.416384][T15379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4002'.
[  326.461437][T15381] loop1: detected capacity change from 0 to 8192
[  326.496318][T15390] loop3: detected capacity change from 0 to 2048
[  326.507778][T15390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.643162][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.669250][ T3407] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  326.677276][ T3407] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  326.728186][T15405] loop3: detected capacity change from 0 to 1024
[  326.734850][T15405] EXT4-fs: Ignoring removed i_version option
[  326.746311][T15405] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  326.773759][T15405] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4011: Invalid block bitmap block 0 in block_group 0
[  326.799075][T15405] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4011: Failed to acquire dquot type 0
[  326.819684][T15405] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4011: Freeing blocks not in datazone - block = 0, count = 4096
[  326.838954][T15405] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4011: Invalid inode bitmap blk 0 in block_group 0
[  326.854379][T15405] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  326.863168][T11591] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0
[  326.876355][T15405] EXT4-fs (loop3): 1 orphan inode deleted
[  326.884764][T15405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.913067][T12320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.029717][T15415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.050273][T15415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.171614][T15417] ipvlan2: entered promiscuous mode
[  327.177673][T15417] bridge0: port 3(ipvlan2) entered blocking state
[  327.184165][T15417] bridge0: port 3(ipvlan2) entered disabled state
[  327.191892][T15417] ipvlan2: entered allmulticast mode
[  327.197242][T15417] bridge0: entered allmulticast mode
[  327.203110][T15417] ipvlan2: left allmulticast mode
[  327.208227][T15417] bridge0: left allmulticast mode
[  327.279470][T15421] loop0: detected capacity change from 0 to 128
[  327.299600][T15421] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  327.311955][T15421] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  327.380053][T13524] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  327.413628][T15427] xt_hashlimit: size too large, truncated to 1048576
[  327.502331][T15432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=15432 comm=syz.0.4018
[  327.515713][T15432] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  327.577595][T15432] loop0: detected capacity change from 0 to 512
[  327.584654][T15432] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  327.595661][T15432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  327.603689][T15432] EXT4-fs (loop0): orphan cleanup on readonly fs
[  327.635249][T15432] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #11: comm syz.0.4018: corrupted in-inode xattr: e_name out of bounds
[  327.661533][T15432] EXT4-fs (loop0): Remounting filesystem read-only
[  327.685779][T15432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  327.731118][ T3407] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  327.755473][ T3407] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  327.788360][T13524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  327.830610][T15443] loop0: detected capacity change from 0 to 1024
[  327.858801][T15443] EXT4-fs: Ignoring removed i_version option
[  327.883445][T15443] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  327.910522][T15443] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4024: Invalid block bitmap block 0 in block_group 0
[  327.926784][T15443] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4024: Failed to acquire dquot type 0
[  327.942193][T15443] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.4024: Freeing blocks not in datazone - block = 0, count = 4096
[  327.951753][T15452] syzkaller0: entered promiscuous mode
[  327.958853][T15454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.961106][T15452] syzkaller0: entered allmulticast mode
[  327.969775][T15454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.979710][T15443] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4024: Invalid inode bitmap blk 0 in block_group 0
[  327.995863][T11638] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:57: Failed to release dquot type 0
[  328.008361][T15443] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  328.018564][T15443] EXT4-fs (loop0): 1 orphan inode deleted
[  328.025587][T15443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.052583][T13524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.098963][T15462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4031'.
[  328.125605][T15460] loop0: detected capacity change from 0 to 1024
[  328.148070][T15460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.162534][T15464] loop1: detected capacity change from 0 to 8192
[  328.163208][T15458] loop2: detected capacity change from 0 to 8192
[  328.169250][T15460] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.219982][T15468] loop2: detected capacity change from 0 to 1024
[  328.237373][T15468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.249439][T15472] xt_hashlimit: size too large, truncated to 1048576
[  328.257905][T15468] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.298659][T15474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=15474 comm=syz.1.4035
[  328.317023][T15474] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  328.329293][T15474] loop1: detected capacity change from 0 to 512
[  328.336626][T15474] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  328.347409][T15474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  328.355524][T15474] EXT4-fs (loop1): orphan cleanup on readonly fs
[  328.362525][T15474] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #11: comm syz.1.4035: corrupted in-inode xattr: e_name out of bounds
[  328.376816][T15474] EXT4-fs (loop1): Remounting filesystem read-only
[  328.383880][T15474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  328.407658][T13524] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.418746][T12136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  328.444682][T13218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.478897][T15487] loop0: detected capacity change from 0 to 1024
[  328.485798][T15487] EXT4-fs: Ignoring removed i_version option
[  328.492666][T15487] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  328.528247][T15487] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4040: Invalid block bitmap block 0 in block_group 0
[  328.543396][T15487] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4040: Failed to acquire dquot type 0
[  328.579295][T15487] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.4040: Freeing blocks not in datazone - block = 0, count = 4096
[  328.593098][T15487] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4040: Invalid inode bitmap blk 0 in block_group 0
[  328.606042][T11648] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:66: Failed to release dquot type 0
[  328.617825][T15487] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  328.626578][T15487] EXT4-fs (loop0): 1 orphan inode deleted
[  328.662350][T15497] syzkaller0: entered promiscuous mode
[  328.668220][T15497] syzkaller0: entered allmulticast mode
[  328.694434][   T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  328.703538][   T36] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  328.802236][T15504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4043'.
[  328.945345][   T29] kauditd_printk_skb: 594 callbacks suppressed
[  328.945363][   T29] audit: type=1326 audit(1752070122.192:56101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15492 comm="syz.2.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d63ae929 code=0x7ffc0000
[  328.975401][   T29] audit: type=1326 audit(1752070122.202:56102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15492 comm="syz.2.4041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d63ae929 code=0x7ffc0000
[  329.008393][T15506] loop0: detected capacity change from 0 to 2048
[  329.093839][   T29] audit: type=1326 audit(1752070122.352:56103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15512 comm="syz.0.4046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34e228e929 code=0x0
[  329.124596][T15515] xt_hashlimit: size too large, truncated to 1048576
[  329.278944][T15515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=15515 comm=syz.2.4047
[  329.304521][T15515] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  329.316792][T15515] loop2: detected capacity change from 0 to 512
[  329.323807][T15515] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  329.336731][T15515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  329.344989][T15515] EXT4-fs (loop2): orphan cleanup on readonly fs
[  329.352583][T15515] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #11: comm syz.2.4047: corrupted in-inode xattr: e_name out of bounds
[  329.367970][T15515] EXT4-fs (loop2): Remounting filesystem read-only
[  329.396092][T15521] loop1: detected capacity change from 0 to 1024
[  329.406805][T15521] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.481477][T15532] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15532 comm=syz.4.4052
[  329.494174][T15532] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15532 comm=syz.4.4052
[  329.522305][   T29] audit: type=1326 audit(1752070122.782:56104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15520 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f0e8e929 code=0x7ffc0000
[  329.546421][T15532] loop4: detected capacity change from 0 to 8192
[  329.553135][   T29] audit: type=1326 audit(1752070122.812:56105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15520 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f0e8e929 code=0x7ffc0000
[  329.576863][   T29] audit: type=1326 audit(1752070122.812:56106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15520 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f29f0e8e929 code=0x7ffc0000
[  329.600494][   T29] audit: type=1326 audit(1752070122.812:56107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15520 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f0e8e929 code=0x7ffc0000
[  329.624244][   T29] audit: type=1326 audit(1752070122.812:56108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15520 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f0e8e929 code=0x7ffc0000
[  329.673163][T15535] loop1: detected capacity change from 0 to 512
[  329.680077][T15535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  329.690567][T15535] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.4053: invalid block
[  329.704298][T15535] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4053: invalid indirect mapped block 4294967295 (level 1)
[  329.719850][T15535] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4053: invalid indirect mapped block 4294967295 (level 1)
[  329.735041][T15535] EXT4-fs (loop1): 2 truncates cleaned up
[  329.748394][T15540] loop4: detected capacity change from 0 to 1024
[  329.755096][T15540] EXT4-fs: Ignoring removed i_version option
[  329.761767][T15540] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  329.773901][T15540] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4055: Invalid block bitmap block 0 in block_group 0
[  329.789305][T15540] Quota error (device loop4): write_blk: dquota write failed
[  329.796740][T15540] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  329.809224][T15540] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4055: Failed to acquire dquot type 0
[  329.820772][T15540] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.4055: Freeing blocks not in datazone - block = 0, count = 4096
[  329.835105][T15540] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4055: Invalid inode bitmap blk 0 in block_group 0
[  329.849042][T15540] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  329.857883][T15540] EXT4-fs (loop4): 1 orphan inode deleted
[  329.872920][T11638] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:57: Failed to release dquot type 0
[  329.911699][T15535] Set syz1 is full, maxelem 65536 reached
[  329.940282][T15543] loop4: detected capacity change from 0 to 2048
[  330.054237][ T3407] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  330.062254][ T3407] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  330.140664][T15561] loop4: detected capacity change from 0 to 1024
[  330.159154][T15561] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.336929][T15573] loop0: detected capacity change from 0 to 512
[  330.343995][T15573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  330.355062][T15573] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.4064: invalid block
[  330.368314][T15573] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4064: invalid indirect mapped block 4294967295 (level 1)
[  330.382783][T15573] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4064: invalid indirect mapped block 4294967295 (level 1)
[  330.398195][T15573] EXT4-fs (loop0): 2 truncates cleaned up
[  330.559581][T15573] Set syz1 is full, maxelem 65536 reached
[  330.658194][T15578] loop4: detected capacity change from 0 to 8192
[  330.743481][T15582] loop4: detected capacity change from 0 to 512
[  330.750708][T15582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  330.761287][T15582] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.4068: invalid block
[  330.773525][T15582] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4068: invalid indirect mapped block 4294967295 (level 1)
[  330.787727][T15582] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4068: invalid indirect mapped block 4294967295 (level 1)
[  330.803037][T15582] EXT4-fs (loop4): 2 truncates cleaned up
[  330.842290][T15586] xt_hashlimit: size too large, truncated to 1048576
[  330.867443][T15588] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15588 comm=syz.1.4070
[  330.880218][T15588] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15588 comm=syz.1.4070
[  330.928600][T15588] loop1: detected capacity change from 0 to 8192
[  330.949960][T15590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=15590 comm=syz.4.4069
[  330.951490][T15591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4071'.
[  330.963012][T15590] hsr0: entered promiscuous mode
[  330.976873][T15590] hsr0: entered allmulticast mode
[  330.981934][T15590] hsr_slave_0: entered allmulticast mode
[  330.987622][T15590] hsr_slave_1: entered allmulticast mode
[  331.033644][T15590] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  331.053288][T15586] loop4: detected capacity change from 0 to 512
[  331.064575][T15597] loop2: detected capacity change from 0 to 2048
[  331.073632][T15586] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  331.089270][T15586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  331.153480][T15586] EXT4-fs (loop4): orphan cleanup on readonly fs
[  331.204285][T15586] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #11: comm syz.4.4069: corrupted in-inode xattr: e_name out of bounds
[  331.222720][T15586] EXT4-fs (loop4): Remounting filesystem read-only
[  331.230724][ T3400] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  331.280714][ T3400] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  331.313251][T15611] netlink: 'syz.1.4078': attribute type 1 has an invalid length.
[  331.321070][T15611] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4078'.
[  331.333912][T15614] loop2: detected capacity change from 0 to 512
[  331.354028][T15614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  331.415365][T15614] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.4079: invalid block
[  331.433224][T15614] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4079: invalid indirect mapped block 4294967295 (level 1)
[  331.448539][T15614] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4079: invalid indirect mapped block 4294967295 (level 1)
[  331.449503][T15629] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15629 comm=syz.1.4083
[  331.475237][T15629] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15629 comm=syz.1.4083
[  331.489787][T15614] EXT4-fs (loop2): 2 truncates cleaned up
[  331.580458][T15631] loop0: detected capacity change from 0 to 1024
[  331.634129][T15631] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.700210][T15629] loop1: detected capacity change from 0 to 8192
[  331.717413][T15614] Set syz1 is full, maxelem 65536 reached
[  331.754895][T15644] loop4: detected capacity change from 0 to 2048
[  331.817038][T15653] syzkaller0: entered promiscuous mode
[  331.822745][T15653] syzkaller0: entered allmulticast mode
[  331.839145][T15659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4096'.
[  331.876237][T15661] loop3: detected capacity change from 0 to 1024
[  331.896914][T15661] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.094818][T15678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4102'.
[  332.131176][T15683] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15683 comm=syz.3.4104
[  332.143797][T15683] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15683 comm=syz.3.4104
[  332.144738][ T3400] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  332.164196][ T3400] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  332.227990][T15683] loop3: detected capacity change from 0 to 8192
[  332.370742][T15693] syzkaller0: entered promiscuous mode
[  332.376471][T15693] syzkaller0: entered allmulticast mode
[  332.389719][T15695] loop4: detected capacity change from 0 to 1024
[  332.396465][T15695] EXT4-fs: Ignoring removed i_version option
[  332.402925][T15695] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  332.414947][T15695] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4109: Invalid block bitmap block 0 in block_group 0
[  332.428613][T15695] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4109: Failed to acquire dquot type 0
[  332.440156][T15695] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.4109: Freeing blocks not in datazone - block = 0, count = 4096
[  332.453736][T15695] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4109: Invalid inode bitmap blk 0 in block_group 0
[  332.466503][T11590] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0
[  332.478092][T15695] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  332.486872][T15695] EXT4-fs (loop4): 1 orphan inode deleted
[  332.526358][T15700] loop0: detected capacity change from 0 to 1024
[  332.533074][T15700] EXT4-fs: Ignoring removed i_version option
[  332.542371][T15700] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  332.564542][T15700] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4110: Invalid block bitmap block 0 in block_group 0
[  332.579655][T15700] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4110: Failed to acquire dquot type 0
[  332.591286][T15700] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.4110: Freeing blocks not in datazone - block = 0, count = 4096
[  332.606690][T15700] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4110: Invalid inode bitmap blk 0 in block_group 0
[  332.622414][T15700] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  332.632975][T11591] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0
[  332.645138][T15700] EXT4-fs (loop0): 1 orphan inode deleted
[  332.690995][T15714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15714 comm=syz.2.4117
[  332.703727][T15714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15714 comm=syz.2.4117
[  332.743550][T15717] loop3: detected capacity change from 0 to 2048
[  332.790334][T15723] loop0: detected capacity change from 0 to 1024
[  332.796952][T15714] loop2: detected capacity change from 0 to 8192
[  332.807058][T15723] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.882864][T15729] syzkaller0: entered promiscuous mode
[  332.888511][T15729] syzkaller0: entered allmulticast mode
[  333.030349][T15737] loop2: detected capacity change from 0 to 8192
[  333.057373][T15745] loop3: detected capacity change from 0 to 512
[  333.064647][T15745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  333.083435][T15745] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.4129: invalid block
[  333.096740][T15745] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4129: invalid indirect mapped block 4294967295 (level 1)
[  333.111223][T15745] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4129: invalid indirect mapped block 4294967295 (level 1)
[  333.126844][T15745] EXT4-fs (loop3): 2 truncates cleaned up
[  333.179562][T15754] loop2: detected capacity change from 0 to 512
[  333.217003][T15754] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.288828][T15745] Set syz1 is full, maxelem 65536 reached
[  333.314246][T15760] loop2: detected capacity change from 0 to 1024
[  333.358247][T15769] netlink: 'syz.1.4138': attribute type 1 has an invalid length.
[  333.366157][T15769] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4138'.
[  333.530795][T15781] loop4: detected capacity change from 0 to 1024
[  333.539270][T15781] EXT4-fs: Ignoring removed i_version option
[  333.549392][T15781] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  333.563752][T15777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4135'.
[  333.572821][T15777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4135'.
[  333.583925][T15781] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4141: Invalid block bitmap block 0 in block_group 0
[  333.602477][T15781] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4141: Failed to acquire dquot type 0
[  333.614417][T15781] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.4141: Freeing blocks not in datazone - block = 0, count = 4096
[  333.630559][T15781] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4141: Invalid inode bitmap blk 0 in block_group 0
[  333.645684][T15781] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  333.654922][T15781] EXT4-fs (loop4): 1 orphan inode deleted
[  333.660840][T11638] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:57: Failed to release dquot type 0
[  333.702602][T15786] xt_hashlimit: size too large, truncated to 1048576
[  333.784293][T15790] loop4: detected capacity change from 0 to 1024
[  333.789545][T15789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=15789 comm=syz.0.4142
[  333.804392][T15789] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  333.812480][T15790] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.823881][T15789] loop0: detected capacity change from 0 to 512
[  333.834225][T15789] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  333.851039][T15789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  333.862450][T15789] EXT4-fs (loop0): orphan cleanup on readonly fs
[  333.870337][T15789] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #11: comm syz.0.4142: corrupted in-inode xattr: e_name out of bounds
[  333.886032][T15789] EXT4-fs (loop0): Remounting filesystem read-only
[  333.916020][T15796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4144'.
[  333.941755][T15799] loop0: detected capacity change from 0 to 128
[  333.950755][T15799] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  333.959628][   T29] kauditd_printk_skb: 472 callbacks suppressed
[  333.959645][   T29] audit: type=1326 audit(1752070127.222:56571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15759 comm="syz.2.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0d63a58e7 code=0x7ffc0000
[  333.990894][   T29] audit: type=1326 audit(1752070127.222:56572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.3.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1bfc458e7 code=0x7ffc0000
[  334.014519][   T29] audit: type=1326 audit(1752070127.222:56573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.3.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1bfbeab19 code=0x7ffc0000
[  334.038186][   T29] audit: type=1326 audit(1752070127.222:56574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.3.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe1bfc4e929 code=0x7ffc0000
[  334.061795][   T29] audit: type=1326 audit(1752070127.232:56575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.3.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1bfc458e7 code=0x7ffc0000
[  334.085420][   T29] audit: type=1326 audit(1752070127.232:56576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.3.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1bfbeab19 code=0x7ffc0000
[  334.108979][   T29] audit: type=1326 audit(1752070127.232:56577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.3.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe1bfc4e929 code=0x7ffc0000
[  334.132659][   T29] audit: type=1326 audit(1752070127.232:56578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15759 comm="syz.2.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0d634ab19 code=0x7ffc0000
[  334.156141][   T29] audit: type=1326 audit(1752070127.232:56579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15759 comm="syz.2.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe0d63ae929 code=0x7ffc0000
[  334.179593][   T29] audit: type=1326 audit(1752070127.232:56580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz.3.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1bfc458e7 code=0x7ffc0000
[  334.236641][T15802] loop0: detected capacity change from 0 to 512
[  334.238820][T11590] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  334.266493][T11590] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  334.266516][T15802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  334.287222][T11590] EXT4-fs (loop2): This should not happen!! Data will be lost
[  334.287222][T11590] 
[  334.296900][T11590] EXT4-fs (loop2): Total free blocks count 0
[  334.301102][T15807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4150'.
[  334.302933][T11590] EXT4-fs (loop2): Free/Dirty block details
[  334.317874][T11590] EXT4-fs (loop2): free_blocks=68451041280
[  334.323696][T11590] EXT4-fs (loop2): dirty_blocks=16416
[  334.329172][T11590] EXT4-fs (loop2): Block reservation details
[  334.335191][T11590] EXT4-fs (loop2): i_reserved_data_blocks=1026
[  334.344366][T15802] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.4146: invalid block
[  334.345692][T11590] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28
[  334.368938][T11590] EXT4-fs (loop2): This should not happen!! Data will be lost
[  334.368938][T11590] 
[  334.377049][T15802] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4146: invalid indirect mapped block 4294967295 (level 1)
[  334.400349][T15802] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4146: invalid indirect mapped block 4294967295 (level 1)
[  334.449159][T15819] syzkaller0: entered promiscuous mode
[  334.454820][T15819] syzkaller0: entered allmulticast mode
[  334.455016][T15818] loop4: detected capacity change from 0 to 1024
[  334.463854][T15802] EXT4-fs (loop0): 2 truncates cleaned up
[  334.542533][T15818] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.595468][T15825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4155'.
[  334.634796][T15831] loop2: detected capacity change from 0 to 1024
[  334.654696][T15802] Set syz1 is full, maxelem 65536 reached
[  334.680088][T15836] loop3: detected capacity change from 0 to 1024
[  334.698868][T15836] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.842178][T15850] loop3: detected capacity change from 0 to 512
[  334.848028][T15845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4158'.
[  334.850731][T15850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  334.857543][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4158'.
[  334.877758][T15850] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.4161: invalid block
[  334.892428][T15850] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4161: invalid indirect mapped block 4294967295 (level 1)
[  334.911713][T15850] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4161: invalid indirect mapped block 4294967295 (level 1)
[  334.928741][T15850] EXT4-fs (loop3): 2 truncates cleaned up
[  335.103600][T15850] Set syz1 is full, maxelem 65536 reached
[  335.137973][T15853] xt_hashlimit: size too large, truncated to 1048576
[  335.223086][T15856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=15856 comm=syz.1.4162
[  335.237337][T15856] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  335.249836][T15856] loop1: detected capacity change from 0 to 512
[  335.259093][T15856] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  335.273167][T15856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  335.296267][T15856] EXT4-fs (loop1): orphan cleanup on readonly fs
[  335.303473][T15856] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #11: comm syz.1.4162: corrupted in-inode xattr: e_name out of bounds
[  335.318728][T15856] EXT4-fs (loop1): Remounting filesystem read-only
[  335.366145][T15863] loop4: detected capacity change from 0 to 2048
[  335.378985][T15865] syzkaller0: entered promiscuous mode
[  335.384518][T15865] syzkaller0: entered allmulticast mode
[  335.458169][T15868] ipvlan2: entered promiscuous mode
[  335.467454][T15868] bridge0: port 3(ipvlan2) entered blocking state
[  335.473978][T15868] bridge0: port 3(ipvlan2) entered disabled state
[  335.485382][T15868] ipvlan2: entered allmulticast mode
[  335.491030][T15868] bridge0: entered allmulticast mode
[  335.497115][T15868] ipvlan2: left allmulticast mode
[  335.502263][T15868] bridge0: left allmulticast mode
[  335.574707][T11648] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  335.591663][T11648] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  335.603978][T11648] EXT4-fs (loop2): This should not happen!! Data will be lost
[  335.603978][T11648] 
[  335.613852][T11648] EXT4-fs (loop2): Total free blocks count 0
[  335.619864][T11648] EXT4-fs (loop2): Free/Dirty block details
[  335.625827][T11648] EXT4-fs (loop2): free_blocks=68451041280
[  335.631643][T11648] EXT4-fs (loop2): dirty_blocks=16416
[  335.637035][T11648] EXT4-fs (loop2): Block reservation details
[  335.643070][T11648] EXT4-fs (loop2): i_reserved_data_blocks=1026
[  335.653827][T15875] loop0: detected capacity change from 0 to 512
[  335.664709][T15875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  335.722953][T11648] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28
[  335.735607][T11648] EXT4-fs (loop2): This should not happen!! Data will be lost
[  335.735607][T11648] 
[  335.785971][   T23] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  335.796126][T15875] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.4170: invalid block
[  335.809377][   T23] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  335.819664][T15875] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4170: invalid indirect mapped block 4294967295 (level 1)
[  335.944947][T15875] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4170: invalid indirect mapped block 4294967295 (level 1)
[  335.986408][T15875] EXT4-fs (loop0): 2 truncates cleaned up
[  336.156253][T15875] Set syz1 is full, maxelem 65536 reached
[  336.190939][T15890] xt_hashlimit: size too large, truncated to 1048576
[  336.256293][T15550] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  336.288017][T15891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=15891 comm=syz.3.4174
[  336.325918][T15891] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  336.337576][T15891] loop3: detected capacity change from 0 to 512
[  336.347516][T15891] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  336.392451][T15897] loop1: detected capacity change from 0 to 2048
[  336.420530][T15891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  336.429169][T15891] EXT4-fs (loop3): orphan cleanup on readonly fs
[  336.436134][T15891] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #11: comm syz.3.4174: corrupted in-inode xattr: e_name out of bounds
[  336.450423][T15903] loop4: detected capacity change from 0 to 2048
[  336.459130][T15891] EXT4-fs (loop3): Remounting filesystem read-only
[  336.486859][T15909] loop0: detected capacity change from 0 to 1024
[  336.677328][T15920] syzkaller0: entered promiscuous mode
[  336.682836][T15920] syzkaller0: entered allmulticast mode
[  336.820138][T15933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.831112][T15934] xt_hashlimit: size too large, truncated to 1048576
[  336.848972][T15933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.926822][T15936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=15936 comm=syz.3.4187
[  336.940562][T15936] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  336.955054][T15936] loop3: detected capacity change from 0 to 512
[  336.993771][T15938] __nla_validate_parse: 4 callbacks suppressed
[  336.993829][T15938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4188'.
[  337.038846][T11591] ==================================================================
[  337.045982][T15936] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  337.046959][T11591] BUG: KCSAN: data-race in memcpy_and_pad / rcu_tasks_trace_pregp_step
[  337.064764][T11591] 
[  337.067128][T11591] write to 0xffff88810b84949c of 4 bytes by task 28 on cpu 1:
[  337.074603][T11591]  rcu_tasks_trace_pregp_step+0x1ac/0x920
[  337.080343][T11591]  rcu_tasks_wait_gp+0x88/0x530
[  337.085233][T11591]  rcu_tasks_one_gp+0x7f6/0x8e0
[  337.090115][T11591]  rcu_tasks_kthread+0xf7/0x110
[  337.090604][T15936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  337.094978][T11591]  kthread+0x489/0x510
[  337.095001][T11591]  ret_from_fork+0xda/0x150
[  337.095019][T11591]  ret_from_fork_asm+0x1a/0x30
[  337.095038][T11591] 
[  337.095043][T11591] read to 0xffff88810b849040 of 3200 bytes by task 11591 on cpu 0:
[  337.126488][T11591]  memcpy_and_pad+0x48/0x80
[  337.131014][T11591]  arch_dup_task_struct+0x2c/0x40
[  337.136065][T11591]  dup_task_struct+0x83/0x6a0
[  337.140773][T11591]  copy_process+0x399/0x1f90
[  337.145389][T11591]  kernel_clone+0x16c/0x5b0
[  337.148927][T15936] EXT4-fs (loop3): orphan cleanup on readonly fs
[  337.149907][T11591]  user_mode_thread+0x7d/0xb0
[  337.160939][T11591]  call_usermodehelper_exec_work+0x7a/0x160
[  337.166878][T11591]  process_scheduled_works+0x4cb/0x9d0
[  337.172373][T11591]  worker_thread+0x582/0x770
[  337.173335][T15936] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #11: comm syz.3.4187: corrupted in-inode xattr: e_name out of bounds
[  337.176986][T11591]  kthread+0x489/0x510
[  337.177008][T11591]  ret_from_fork+0xda/0x150
[  337.177029][T11591]  ret_from_fork_asm+0x1a/0x30
[  337.204157][T11591] 
[  337.206497][T11591] Reported by Kernel Concurrency Sanitizer on:
[  337.212670][T11591] CPU: 0 UID: 0 PID: 11591 Comm: kworker/u8:11 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) 
[  337.225452][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  337.227871][T15936] EXT4-fs (loop3): Remounting filesystem read-only
[  337.235508][T11591] Workqueue: events_unbound call_usermodehelper_exec_work
[  337.235549][T11591] ==================================================================
[  337.371704][T11591] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  337.387164][T11591] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  337.399430][T11591] EXT4-fs (loop0): This should not happen!! Data will be lost
[  337.399430][T11591] 
[  337.409139][T11591] EXT4-fs (loop0): Total free blocks count 0
[  337.415216][T11591] EXT4-fs (loop0): Free/Dirty block details
[  337.421215][T11591] EXT4-fs (loop0): free_blocks=68451041280
[  337.427041][T11591] EXT4-fs (loop0): dirty_blocks=16416
[  337.432471][T11591] EXT4-fs (loop0): Block reservation details
[  337.438503][T11591] EXT4-fs (loop0): i_reserved_data_blocks=1026
[  337.447466][T11638] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28
[  337.460070][T11638] EXT4-fs (loop0): This should not happen!! Data will be lost
[  337.460070][T11638]