last executing test programs:

4m17.676700164s ago: executing program 0 (id=1525):
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000001c0)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6t\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0)

4m17.626883154s ago: executing program 0 (id=1527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)

4m17.520275207s ago: executing program 0 (id=1528):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000240)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x38, 0x65, 0x62, 0x35, 0x66, 0x61, 0x62], 0x2d, [0x34, 0x38, 0x39, 0x39], 0x2d, [0x36, 0x61, 0x38, 0x65], 0x2d, [0x63, 0x33, 0x62, 0x61], 0x2d, [0x7f, 0x63, 0x33, 0x62, 0x35, 0x63, 0x65, 0x65]}}}]}, 0x1, 0x59d, &(0x7f0000001100)="$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")

4m17.364563739s ago: executing program 0 (id=1531):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000b00)={'sit0\x00', 0x0, 0x80, 0x40, 0x1, 0x7cd, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x68, 0x2, 0xa, 0x4, 0x0, @multicast2, @local}}}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48)
socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x1881, &(0x7f0000000880)={0x0, 0x17ec, 0x400, 0x2, 0x3c2}, &(0x7f0000000580), &(0x7f0000000900))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001a0"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/92)
listen(r4, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r4, @ANYBLOB="00000000f655670efae35674ec2f0702938791fba8b6d401d47af476a29a5862f449f48bb18f662bbc17a6dfe9afb7e19775fb0bcff93c49fadac3b8126953fa239824f7a99e55038dc77dde67a0"], 0x18, 0x20000080}}], 0x1, 0xc001)
close_range(r1, 0xffffffffffffffff, 0x400000000000000)

4m17.144782364s ago: executing program 0 (id=1535):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
syz_emit_ethernet(0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbabbbbbbbbb0180c200000e00044242f3f4"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r4, 0x0, 0x6}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
fcntl$setlease(r5, 0x400, 0x2)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0002e5ffffff0000000000000000000a0100"/28], 0x1c}, 0x1, 0x0, 0x0, 0x40858}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c002ccae8f0b101e9cb26cbcb00000203e9000000000700000000000000100800010001000000"], 0x1c}}, 0x0)
close(0x3)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0xf8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xf, 0x4}, {0xe, 0xd}}, [@TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x6, 0x1ff, 0xd, 0x0, 0x8c21, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0x9, 0x2000]}}, {{0x1c, 0x1, {0x7, 0xda, 0x2, 0x1e1, 0x0, 0x8, 0x8000, 0x4}}, {0xc, 0x2, [0x6, 0x0, 0x8, 0xa]}}, {{0x1c, 0x1, {0xf, 0x8, 0x4, 0x4, 0x0, 0x401, 0x9, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xd2, 0xb, 0x8, 0x9d07, 0x2, 0x0, 0x9, 0x6}}, {0x10, 0x2, [0x2, 0x0, 0x7f, 0x1b, 0xfff6, 0x9]}}, {{0x1c, 0x1, {0x3, 0xf4, 0x3, 0x2, 0x2, 0xfff, 0x8, 0x4}}, {0xc, 0x2, [0x7, 0x0, 0x5, 0x400]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x4004c00)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x40000010000, 0x4, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@norecovery}]}, 0x1, 0x463, &(0x7f00000014c0)="$eJzs3MtvG8UfAPCv17Gbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpW6DmiDRqoLCoRxRJe6IIxJ/ARfKBQEnJK5wR0gV6oXCyWjtXedR24ldJy715yM5ntkZZ+a7u2OPZ20HMLDG0j+FiB0R8WtEjNSzKyuM1e9u3bw88/fNyzOFqFbf+LNQq/fXzcszedX8cdvrmWq1TbtX346YrlTmLmT5icVz700sXLz03Jlz06fnTs+dnzq+cOTw/vKxqaM9iXNn2te9H87v2/PKW9demzl57Z0fv077uyMrXx5Hr4zV925TT/a6sT7buSxdGOpjR+hIMSLSw1Wqjf+RKMbWRtlIvPxJXzsHbKhqNaluaV18pQrcw9KJOjCI8hf69P1vftukqcdd4caJaKxj3Mpu9ZKhSLI6pew90kYYi4iTV/754uRwPT9o+x8A2HzXT0TEs83mf0k8sKze/7JrQ6MR8f+I2BUR90XE7oi4P6JW98GIeKjD9ldfIbl9/lMd6SqwdUrnfy9k17ZWzv/y2V+MFrPczlr8pcKpM5W5Q9k+ORilLWl+sk0b3730y2etyhrzv+yWtp/eL9VI/hhatUA3O704Hauv03XpxscRe4eW4h9uxF9ozHnTdvZExN4u2zjz9Ff7WpWtHX8bPZiUV7+MeKp+/K/EiuO/tHcLza9PHj9yePL5Y1NHJ4ajMndoIj8rbvfTz1dfb9X+HcXfAzeuV2Nb0/O/Ef9oYThi4eKls7XrtQudt3H1t09bvqfp9vwvF96spcvZtg+mFxcvTEaUC6/evn1q6bF5Pq+fnv8HDzQf/7tiaU88HBHpSbw/Ih6JiEezvj8WEY9HxIE28f/w4hPvdh5/m1X5Hkrjn13r+Mfy479m4lJErNhSPPv9N53Hn0uP/5Fa6mC2JX/+a2ddPe3qbAYAAID/nqT2GfhCMt5IJ8n4eP0z/LtjW1KZX1h85tT8++dn65+VH41SsnylK18PnczWhvP81Kr84Wzd+PPi1lp+fGa+Mtvn2GHQbW8x/lO/F/vdO2DD+b4WDC7jHwAGj9d/GFzGPwyuZuP/oz70A9h8a7z+b92sfgCbz/wfBpfxD4PL+IeB1PK78UlalNZY5xfpJe4gUe7ZP/y23NFvNdxBIpK7YtfdQ4lSNC0aWvePWXSZ2NK0qN/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//gELc7A==")

4m16.598896984s ago: executing program 0 (id=1546):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (fail_nth: 1)

4m1.468116786s ago: executing program 32 (id=1546):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (fail_nth: 1)

46.089830291s ago: executing program 3 (id=4261):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
symlink(0x0, 0x0) (fail_nth: 1)

45.736609988s ago: executing program 3 (id=4268):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x11d, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61a3fc0000e73afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0)

45.707800839s ago: executing program 3 (id=4270):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18)
syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58)

45.678492649s ago: executing program 3 (id=4271):
socket$packet(0x11, 0xa, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x80, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000140)=[{0x0, 0x24}, {0x0}], 0x33)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
ioctl$TCSETSW2(r6, 0x5453, 0x0)
io_setup(0x4, &(0x7f00000003c0)=<r7=>0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10)
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0)
io_submit(r7, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r6, 0x0, 0x0, 0x3b0}])
r10 = getpid()
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000001, 0xc3072, 0xffffffffffffffff, 0x200000)
syz_clone3(&(0x7f00000003c0)={0x120000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r10], 0x1}, 0x58)
sendmsg$AUDIT_SET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1e, 0x1, 0x0, r10, 0x520, 0x7000, 0x2, 0x8, 0x0, 0x7, 0x1}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
renameat2(r4, &(0x7f0000000140)='./file1\x00', r4, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(r11, r3, 0x0)

45.576422471s ago: executing program 3 (id=4273):
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
renameat(r5, &(0x7f0000000280)='./file1\x00', r6, &(0x7f0000000300)='./file1\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x50}, 0x48)
r9 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)

45.308391447s ago: executing program 3 (id=4282):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
syz_clone3(0x0, 0x0)

45.308170116s ago: executing program 33 (id=4282):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
syz_clone3(0x0, 0x0)

12.565619877s ago: executing program 5 (id=4727):
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r0, 0x0, 0x0)

7.044273384s ago: executing program 5 (id=4729):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
r1 = getpid()
syz_clone3(&(0x7f00000003c0)={0x120000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58)
sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1e, 0x1, 0x0, r1, 0x520, 0x7000, 0x2, 0x8, 0x0, 0x7, 0x1}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)

6.593697292s ago: executing program 5 (id=4771):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff}], 0x1, 0x1c3})

6.379160587s ago: executing program 5 (id=4774):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4541], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r0, 0xffffffffffffffff, 0x2f, 0x2004}, 0x20)

6.281592099s ago: executing program 5 (id=4775):
setreuid(0xee01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
munlockall()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioprio_get$uid(0x3, 0xee01)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)

4.432075554s ago: executing program 4 (id=4797):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
r1 = getpid()
syz_clone3(&(0x7f00000003c0)={0x120000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58)
sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)

4.379201665s ago: executing program 4 (id=4798):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xf, 0x3, &(0x7f0000000980)=ANY=[@ANYRES64, @ANYRES8=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1, <r3=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x25, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000008000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000950000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0xfff, 0xd1, &(0x7f00000004c0)=""/209, 0x41100, 0x10, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000740)=[r1, r1, r3], &(0x7f00000007c0)=[{0x5, 0x4, 0x3, 0xa}, {0x3, 0x5, 0x4, 0x4}, {0x4, 0x4, 0x2, 0x1}, {0x4, 0x3, 0x1, 0xb}, {0x3, 0x4, 0xc, 0x5}, {0x3, 0x2, 0x5}, {0x4, 0x2, 0x9, 0x6}, {0x3, 0x3, 0x1, 0x8}, {0x5, 0x5, 0xa, 0x3}], 0x10, 0x32}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000700000018121000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
umount2(0x0, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x1000f4)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
sendfile(r8, r7, 0x0, 0x7ffff000)

4.299328877s ago: executing program 4 (id=4799):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="620af8ff0c011021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e4000000000d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50)
pipe(&(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080))

2.683244408s ago: executing program 5 (id=4822):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
socket$inet(0x2, 0x5, 0x6)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{}, &(0x7f0000000f40), &(0x7f0000000f80)='%pK    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
socket$netlink(0x10, 0x3, 0x1e)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000300), 0x3)

1.868940624s ago: executing program 1 (id=4839):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030700000000000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000240012800b0001006272696467650000140002800800010007000000080002000302"], 0x4c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
unshare(0x2c020400)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44)
syz_io_uring_setup(0x1724, &(0x7f0000000100)={0x0, 0x1452, 0x801, 0x80400002, 0x2d4}, &(0x7f0000000300), &(0x7f0000000200))
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)

1.815900615s ago: executing program 1 (id=4842):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r2}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
unshare(0x24020400)
readv(r3, 0x0, 0x0)
write$tun(r3, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)={0x3, 0x0, @d}, 0x18, 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, &(0x7f0000000080)=""/23, 0x0, 0x17, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @remote, 0x3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
syslog(0x2, &(0x7f0000000040)=""/10, 0xa)

1.664373137s ago: executing program 6 (id=4843):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x20008000)

1.660084078s ago: executing program 6 (id=4844):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.586871879s ago: executing program 6 (id=4846):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1.418596622s ago: executing program 1 (id=4847):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)
pipe(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240), 0x0)
vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(0xffffffffffffffff, r6, 0x8f5, 0x0)
write$binfmt_script(r6, 0x0, 0xd9)
write(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x600048d6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})

1.368551713s ago: executing program 6 (id=4848):
setreuid(0xee01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
munlockall()
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

1.248415946s ago: executing program 4 (id=4854):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x38}}, 0x0)

1.161958507s ago: executing program 4 (id=4856):
setreuid(0xee01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
munlockall()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioprio_get$uid(0x3, 0xee01)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)

708.774606ms ago: executing program 2 (id=4861):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000deffffff000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setuid(0xee01)
setfsuid(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
r2 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000000)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0)
personality(0x4100001)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500), 0x8})
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0)

648.362607ms ago: executing program 2 (id=4862):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r4], 0x30}}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0)

648.018297ms ago: executing program 2 (id=4863):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)

622.028648ms ago: executing program 2 (id=4864):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030700"/18, @ANYRES32=0x0, @ANYBLOB="1501000000000000240012800b0001006272696467650000140002800800010007000000080002000302"], 0x4c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
unshare(0x2c020400)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44)
syz_io_uring_setup(0x1724, &(0x7f0000000100)={0x0, 0x1452, 0x801, 0x80400002, 0x2d4}, &(0x7f0000000300), &(0x7f0000000200))
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)

583.557619ms ago: executing program 2 (id=4865):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94)
syz_emit_ethernet(0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbabbbbbbbbb0180c200000e00044242f3f4"], 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x118}}, 0x0)
fcntl$setlease(r2, 0x400, 0x2)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40858}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
close(0x3)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0xbc, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xf, 0x4}, {0xe, 0xd}}, [@TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x6, 0x1ff, 0xd, 0x0, 0x8c21, 0x9, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x7, 0xda, 0x2, 0x1e1, 0x0, 0x8, 0x8000, 0x4}}, {0xc, 0x2, [0x6, 0x0, 0x8, 0xa]}}, {{0x1c, 0x1, {0xf, 0x8, 0x4, 0x4, 0x0, 0x401, 0x9, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x3, 0xf4, 0x3, 0x2, 0x2, 0xfff, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4004c00)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x40000010000, 0x4, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@norecovery}]}, 0x1, 0x463, &(0x7f00000014c0)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

470.722891ms ago: executing program 1 (id=4866):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080))

422.152911ms ago: executing program 1 (id=4867):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
r1 = getpid()
syz_clone3(&(0x7f00000003c0)={0x120000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1], 0x1}, 0x58)
sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd2b, 0x25dfdbfd, {0x1e, 0x1, 0x0, r1, 0x520, 0x7000, 0x2, 0x8, 0x0, 0x7, 0x1}}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)

410.307802ms ago: executing program 6 (id=4868):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10)

334.696563ms ago: executing program 6 (id=4869):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x200)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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")
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
write$binfmt_script(r6, 0x0, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r7, 0x4b47, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x4f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1c)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)

232.625465ms ago: executing program 1 (id=4870):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

149.024767ms ago: executing program 4 (id=4871):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@prjquota}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8084)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x965e}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000000181200", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800)

0s ago: executing program 2 (id=4872):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28)
getpeername$inet6(r1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00')
getdents64(r4, &(0x7f0000002f40)=""/4102, 0x1006)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, &(0x7f00000004c0)="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", &(0x7f0000000240)=""/94}, 0x20)

kernel console output (not intermixed with test programs):

=18473 comm="syz.1.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  367.933085][T18467] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4476: Allocating blocks 41-42 which overlap fs metadata
[  367.949318][   T29] audit: type=1326 audit(1759674793.255:29531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.1.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  367.986691][   T29] audit: type=1326 audit(1759674793.255:29532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.1.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  368.012581][T18475] netlink: 'syz.6.4475': attribute type 10 has an invalid length.
[  368.025261][T18467] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4476: Failed to acquire dquot type 1
[  368.052693][T18467] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  368.076507][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4479'.
[  368.083036][T18467] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4476: corrupted inode contents
[  368.097503][T18476] netlink: 'syz.6.4475': attribute type 10 has an invalid length.
[  368.115083][T18476] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  368.123800][T18467] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.4476: mark_inode_dirty error
[  368.145135][T18467] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4476: corrupted inode contents
[  368.161577][T18467] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4476: mark_inode_dirty error
[  368.181994][T18467] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4476: corrupted inode contents
[  368.203346][T18467] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  368.222722][T18467] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4476: corrupted inode contents
[  368.236130][T18467] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.4476: mark_inode_dirty error
[  368.257847][T18467] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  368.267352][T18467] EXT4-fs (loop4): 1 truncate cleaned up
[  368.281679][T18467] netlink: 'syz.4.4476': attribute type 13 has an invalid length.
[  368.294271][T18467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  368.376272][T18487] ALSA: seq fatal error: cannot create timer (-19)
[  368.437294][T18499] loop4: detected capacity change from 0 to 8192
[  368.750640][T18528] loop1: detected capacity change from 0 to 128
[  368.770101][ T8479] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.790178][ T8479] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.804313][ T8479] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.839589][T18531] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.874786][ T8479] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.900279][T18538] loop1: detected capacity change from 0 to 8192
[  368.917172][T18542] loop5: detected capacity change from 0 to 512
[  368.917196][T18526] ALSA: seq fatal error: cannot create timer (-19)
[  368.924044][T18542] EXT4-fs: Ignoring removed bh option
[  368.936110][T18542] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  368.945248][T18542] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  368.955049][T18531] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.967810][T18542] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  368.978909][T18542] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  368.995158][T18550] loop6: detected capacity change from 0 to 512
[  369.001625][T18542] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4498: bg 0: block 353: padding at end of block bitmap is not set
[  369.002066][T18550] EXT4-fs: Ignoring removed mblk_io_submit option
[  369.037792][T18550] EXT4-fs: Ignoring removed nomblk_io_submit option
[  369.045427][T18531] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.076377][T18550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  369.084891][T18550] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  369.095984][T18531] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.106427][T18551] netlink: 'syz.5.4498': attribute type 10 has an invalid length.
[  369.123916][T18551] bond0: (slave dummy0): Releasing backup interface
[  369.136910][T18551] netlink: 'syz.5.4498': attribute type 10 has an invalid length.
[  369.147803][T18551] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  369.169531][T18550] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4500: Allocating blocks 41-42 which overlap fs metadata
[  369.184494][T18550] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4500: Allocating blocks 41-42 which overlap fs metadata
[  369.198822][T18550] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4500: Failed to acquire dquot type 1
[  369.210863][T18550] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  369.226069][T18550] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4500: corrupted inode contents
[  369.238560][T18550] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #12: comm syz.6.4500: mark_inode_dirty error
[  369.263112][T18550] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4500: corrupted inode contents
[  369.277327][T18550] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.4500: mark_inode_dirty error
[  369.288846][T18559] loop1: detected capacity change from 0 to 512
[  369.295617][T18550] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4500: corrupted inode contents
[  369.307822][T18550] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem
[  369.316832][T18559] EXT4-fs: Ignoring removed nobh option
[  369.322655][T18550] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4500: corrupted inode contents
[  369.336235][T18559] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4503: iget: bad i_size value: 38620345925642
[  369.349936][T18550] EXT4-fs error (device loop6): ext4_truncate:4637: inode #12: comm syz.6.4500: mark_inode_dirty error
[  369.361429][T18559] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4503: couldn't read orphan inode 15 (err -117)
[  369.373892][T18550] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem
[  369.383420][T18550] EXT4-fs (loop6): 1 truncate cleaned up
[  369.383491][T18559] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  369.399875][T18550] netlink: 'syz.6.4500': attribute type 13 has an invalid length.
[  369.412313][T18550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  369.896490][T18584] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  369.959265][T18589] loop6: detected capacity change from 0 to 1024
[  369.966719][T18589] EXT4-fs: inline encryption not supported
[  370.055521][T18595] ALSA: seq fatal error: cannot create timer (-19)
[  370.063181][T18598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.071660][T18598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.115229][T18605] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  370.271513][ T7650] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.290078][T18620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  370.308635][ T7650] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.321713][ T7650] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.340281][ T7650] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.392161][T18630] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  370.601296][T18640] ALSA: seq fatal error: cannot create timer (-19)
[  370.627129][T18647] loop5: detected capacity change from 0 to 512
[  370.633805][T18647] EXT4-fs: Ignoring removed mblk_io_submit option
[  370.640323][T18647] EXT4-fs: Ignoring removed nomblk_io_submit option
[  370.647729][T18647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  370.656266][T18647] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  370.674444][T18647] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.4527: Allocating blocks 41-42 which overlap fs metadata
[  370.688744][T18647] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4527: Failed to acquire dquot type 1
[  370.700368][T18647] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  370.714919][T18647] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #12: comm syz.5.4527: corrupted inode contents
[  370.725592][T18652] validate_nla: 2 callbacks suppressed
[  370.725682][T18652] netlink: 'syz.6.4528': attribute type 13 has an invalid length.
[  370.727328][T18647] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #12: comm syz.5.4527: mark_inode_dirty error
[  370.732267][T18652] netlink: 'syz.6.4528': attribute type 17 has an invalid length.
[  370.752027][T18647] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #12: comm syz.5.4527: corrupted inode contents
[  370.771555][T18647] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.4527: mark_inode_dirty error
[  370.783102][T18652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  370.783454][T18647] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #12: comm syz.5.4527: corrupted inode contents
[  370.810666][T18647] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem
[  370.819624][T18647] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #12: comm syz.5.4527: corrupted inode contents
[  370.832042][T18647] EXT4-fs error (device loop5): ext4_truncate:4637: inode #12: comm syz.5.4527: mark_inode_dirty error
[  370.843943][T18647] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem
[  370.853541][T18647] EXT4-fs (loop5): 1 truncate cleaned up
[  370.880240][T18647] netlink: 'syz.5.4527': attribute type 13 has an invalid length.
[  370.893843][T18647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  370.985194][T18662] loop5: detected capacity change from 0 to 512
[  370.991809][T18662] EXT4-fs: Ignoring removed nobh option
[  370.999021][T18662] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4530: iget: bad i_size value: 38620345925642
[  371.012134][T18662] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4530: couldn't read orphan inode 15 (err -117)
[  371.026234][T18662] EXT4-fs (loop5): shut down requested (2)
[  371.273455][T18681] __nla_validate_parse: 21 callbacks suppressed
[  371.273475][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4538'.
[  371.297308][T18685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18685 comm=syz.4.4540
[  371.303930][T18681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.312650][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4540'.
[  371.329268][T18681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.348380][T18685] loop4: detected capacity change from 0 to 128
[  371.360940][T18685] ext4 filesystem being mounted at /412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  371.443081][T18669] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.466586][T18677] ALSA: seq fatal error: cannot create timer (-19)
[  371.505150][T18669] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.532412][T18696] loop6: detected capacity change from 0 to 512
[  371.540328][T18696] EXT4-fs: Ignoring removed nobh option
[  371.550345][T18696] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4542: iget: bad i_size value: 38620345925642
[  371.563503][T18696] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4542: couldn't read orphan inode 15 (err -117)
[  371.577214][T18696] EXT4-fs (loop6): shut down requested (2)
[  371.585584][T18669] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.635419][T18669] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.834296][T18709] loop6: detected capacity change from 0 to 512
[  371.840867][T18709] EXT4-fs: Ignoring removed mblk_io_submit option
[  371.847729][T18709] EXT4-fs: Ignoring removed nomblk_io_submit option
[  371.855045][T18709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  371.863623][T18709] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  371.894568][T18709] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4545: Allocating blocks 41-42 which overlap fs metadata
[  371.908791][T18709] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4545: Failed to acquire dquot type 1
[  371.920790][T18709] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  371.935616][T18709] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4545: corrupted inode contents
[  371.947766][T18709] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #12: comm syz.6.4545: mark_inode_dirty error
[  371.959375][T18709] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4545: corrupted inode contents
[  371.971717][T18709] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.4545: mark_inode_dirty error
[  371.983577][T18709] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4545: corrupted inode contents
[  371.995806][T18709] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem
[  372.004727][T18709] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4545: corrupted inode contents
[  372.017180][T18709] EXT4-fs error (device loop6): ext4_truncate:4637: inode #12: comm syz.6.4545: mark_inode_dirty error
[  372.029221][T18709] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem
[  372.031460][T18715] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  372.038830][T18709] EXT4-fs (loop6): 1 truncate cleaned up
[  372.053503][T18709] EXT4-fs mount: 37 callbacks suppressed
[  372.053557][T18709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.074761][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4548'.
[  372.083678][T18717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4548'.
[  372.093733][T18709] netlink: 'syz.6.4545': attribute type 13 has an invalid length.
[  372.101624][T18709] netlink: 184 bytes leftover after parsing attributes in process `syz.6.4545'.
[  372.105981][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4548'.
[  372.124449][T18709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  372.163263][T17840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.185103][T11815] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  372.416263][T18746] netlink: 'syz.6.4556': attribute type 13 has an invalid length.
[  372.424265][T18746] netlink: 'syz.6.4556': attribute type 17 has an invalid length.
[  372.446224][T18746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  372.464642][T18751] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  372.496174][T18755] loop6: detected capacity change from 0 to 1024
[  372.507859][T18757] loop4: detected capacity change from 0 to 512
[  372.514725][T18757] EXT4-fs: Ignoring removed mblk_io_submit option
[  372.515177][T18755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.521243][T18757] EXT4-fs: Ignoring removed nomblk_io_submit option
[  372.533608][T18755] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  372.550669][T18757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  372.559173][T18757] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  372.569115][T17840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.588357][T18757] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4561: Allocating blocks 41-42 which overlap fs metadata
[  372.602715][T18757] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4561: Failed to acquire dquot type 1
[  372.602776][T18761] loop6: detected capacity change from 0 to 128
[  372.620904][T18757] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  372.621525][T18761] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  372.636024][T18757] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4561: corrupted inode contents
[  372.657916][T18757] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.4561: mark_inode_dirty error
[  372.669646][T18757] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4561: corrupted inode contents
[  372.681692][T18757] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4561: mark_inode_dirty error
[  372.693937][T18757] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4561: corrupted inode contents
[  372.706403][T18757] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  372.715228][T18757] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4561: corrupted inode contents
[  372.727506][T18757] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.4561: mark_inode_dirty error
[  372.738916][T18757] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  372.749269][T18757] EXT4-fs (loop4): 1 truncate cleaned up
[  372.755498][T18757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.777183][ T7650] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.788086][T18757] netlink: 'syz.4.4561': attribute type 13 has an invalid length.
[  372.795992][T18757] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4561'.
[  372.805213][ T7650] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.813573][ T4081] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.826436][T18757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  372.835114][ T4081] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.845473][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4562'.
[  372.861068][T11815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.891231][T18767] loop5: detected capacity change from 0 to 8192
[  372.947435][T18769] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.001632][   T29] kauditd_printk_skb: 351 callbacks suppressed
[  373.001649][   T29] audit: type=1326 audit(1759674798.445:29869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  373.031744][   T29] audit: type=1326 audit(1759674798.445:29870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  373.033092][T18769] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.055467][   T29] audit: type=1326 audit(1759674798.455:29871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30501dd710 code=0x7ffc0000
[  373.088750][   T29] audit: type=1326 audit(1759674798.455:29872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f30501e06f7 code=0x7ffc0000
[  373.112376][   T29] audit: type=1326 audit(1759674798.455:29873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  373.135959][   T29] audit: type=1326 audit(1759674798.465:29874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f30501e06f7 code=0x7ffc0000
[  373.159614][   T29] audit: type=1326 audit(1759674798.465:29875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f30501ddb2a code=0x7ffc0000
[  373.183039][   T29] audit: type=1326 audit(1759674798.465:29876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  373.206739][   T29] audit: type=1326 audit(1759674798.465:29877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  373.230443][   T29] audit: type=1326 audit(1759674798.465:29878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18774 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  373.294021][T18778] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4567'.
[  373.295079][T18769] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.374715][T18769] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.619801][T18780] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.661437][T18787] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  373.672727][T18780] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.698267][T18789] loop6: detected capacity change from 0 to 512
[  373.705214][T18789] EXT4-fs: Ignoring removed nobh option
[  373.712391][T18789] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4571: iget: bad i_size value: 38620345925642
[  373.725474][T18789] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4571: couldn't read orphan inode 15 (err -117)
[  373.726352][T18780] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.738698][T18789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.761351][T18789] EXT4-fs (loop6): shut down requested (2)
[  373.777866][T17840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.791896][ T4081] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.803165][ T8479] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.814374][ T8479] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.823848][T18780] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.838327][ T8479] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.876910][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4573'.
[  373.951653][T18792] debugfs: 'ttyS3' already exists in 'caif_serial'
[  374.127384][T18814] netlink: 'syz.6.4576': attribute type 13 has an invalid length.
[  374.135288][T18814] netlink: 'syz.6.4576': attribute type 17 has an invalid length.
[  374.152325][T18814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  374.228170][T18812] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.284692][T18812] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.326091][T18812] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.404514][T18812] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.442531][T18834] loop6: detected capacity change from 0 to 8192
[  374.491303][T18838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.499979][T18838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.544005][T18832] ALSA: seq fatal error: cannot create timer (-19)
[  374.647661][T18844] loop2: detected capacity change from 0 to 128
[  374.654492][T18844] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  375.158321][T18849] loop6: detected capacity change from 0 to 1024
[  375.186889][T18849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.199893][T18849] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.227513][T17840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.247819][T18858] loop6: detected capacity change from 0 to 512
[  375.255986][T18858] EXT4-fs: Ignoring removed mblk_io_submit option
[  375.262637][T18858] EXT4-fs: Ignoring removed nomblk_io_submit option
[  375.269964][T18858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  375.278547][T18858] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  375.295442][T18858] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4590: Allocating blocks 41-42 which overlap fs metadata
[  375.310564][T18858] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4590: Failed to acquire dquot type 1
[  375.322304][T18858] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  375.337186][T18858] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4590: corrupted inode contents
[  375.349419][T18858] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #12: comm syz.6.4590: mark_inode_dirty error
[  375.361271][T18858] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4590: corrupted inode contents
[  375.373553][T18858] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.4590: mark_inode_dirty error
[  375.385127][T18858] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4590: corrupted inode contents
[  375.397497][T18858] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem
[  375.406433][T18858] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4590: corrupted inode contents
[  375.419228][T18858] EXT4-fs error (device loop6): ext4_truncate:4637: inode #12: comm syz.6.4590: mark_inode_dirty error
[  375.430644][T18858] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem
[  375.439811][T18858] EXT4-fs (loop6): 1 truncate cleaned up
[  375.446032][T18858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.467143][T18858] netlink: 'syz.6.4590': attribute type 13 has an invalid length.
[  375.519820][T18858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  375.533435][T18864] loop2: detected capacity change from 0 to 256
[  375.562629][T17840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.614069][T18868] loop2: detected capacity change from 0 to 512
[  375.620961][T18868] EXT4-fs: Ignoring removed nobh option
[  375.637980][T18868] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4594: iget: bad i_size value: 38620345925642
[  375.651223][T18868] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4594: couldn't read orphan inode 15 (err -117)
[  375.664059][T18868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.687506][T18876] bond0: (slave dummy0): Releasing backup interface
[  375.695309][T18868] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  375.706396][T18876] bond0: (slave bond_slave_0): Releasing backup interface
[  375.716139][T12565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.725517][T18876] bond0: (slave bond_slave_1): Releasing backup interface
[  375.736724][T18876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  375.744187][T18876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  375.750292][T18877] netlink: 'syz.6.4595': attribute type 10 has an invalid length.
[  375.760881][T18876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  375.768513][T18876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  375.778441][T18876] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  375.798022][T18877] batman_adv: batadv0: Adding interface: veth1_vlan
[  375.804704][T18877] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.833256][T18877] batman_adv: batadv0: Interface activated: veth1_vlan
[  375.867309][T18883] loop1: detected capacity change from 0 to 1024
[  375.884388][T18883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.896926][T18883] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.921124][T15185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.951267][T18894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18894 comm=syz.6.4603
[  375.976085][T18894] loop6: detected capacity change from 0 to 128
[  375.984212][T18894] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  375.997142][T18894] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  376.830947][T17840] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  376.840955][T18902] __nla_validate_parse: 5 callbacks suppressed
[  376.840981][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4605'.
[  376.863316][ T7650] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.880504][ T7650] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.899172][ T7650] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.912991][ T7650] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.922355][T18907] loop6: detected capacity change from 0 to 8192
[  376.993759][T18914] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4608'.
[  377.158706][T18927] loop6: detected capacity change from 0 to 8192
[  377.221648][T18931] loop6: detected capacity change from 0 to 512
[  377.238439][T18931] EXT4-fs: Ignoring removed mblk_io_submit option
[  377.283587][T18931] EXT4-fs: Ignoring removed nomblk_io_submit option
[  377.291943][T18931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  377.300665][T18931] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  377.302952][   T53] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.343276][   T53] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.363496][   T53] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.392384][   T53] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.401691][T18931] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4615: Allocating blocks 41-42 which overlap fs metadata
[  377.432131][T18941] loop4: detected capacity change from 0 to 512
[  377.438888][T18941] EXT4-fs: Ignoring removed nobh option
[  377.453689][T18941] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4618: iget: bad i_size value: 38620345925642
[  377.466693][T18931] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4615: Allocating blocks 41-42 which overlap fs metadata
[  377.490700][T18941] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4618: couldn't read orphan inode 15 (err -117)
[  377.513373][T18931] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4615: Failed to acquire dquot type 1
[  377.525386][T18941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.538997][T18923] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.551402][T18931] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  377.563063][T18941] EXT4-fs (loop4): shut down requested (2)
[  377.566225][T18931] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4615: corrupted inode contents
[  377.592967][T18931] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #12: comm syz.6.4615: mark_inode_dirty error
[  377.605334][T11815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.615145][T18931] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4615: corrupted inode contents
[  377.615493][T18923] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.643206][T18931] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.4615: mark_inode_dirty error
[  377.659222][T18931] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4615: corrupted inode contents
[  377.676434][T18931] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem
[  377.694770][T18948] loop4: detected capacity change from 0 to 512
[  377.701471][T18931] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4615: corrupted inode contents
[  377.713754][T18948] EXT4-fs: Ignoring removed nobh option
[  377.720698][T18948] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4619: iget: bad i_size value: 38620345925642
[  377.733590][T18931] EXT4-fs error (device loop6): ext4_truncate:4637: inode #12: comm syz.6.4615: mark_inode_dirty error
[  377.743254][T18948] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4619: couldn't read orphan inode 15 (err -117)
[  377.757750][T18923] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.768647][T18931] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem
[  377.786735][T18948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.803073][T18931] EXT4-fs (loop6): 1 truncate cleaned up
[  377.809367][T18931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.824190][T18951] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.834701][T18948] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  377.837057][T18931] netlink: 'syz.6.4615': attribute type 13 has an invalid length.
[  377.850983][T18931] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4615'.
[  377.861557][T18923] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.882230][T11815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.897366][T18931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  377.907617][T18951] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.929690][T17840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.014458][T18951] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.084777][T18951] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.139473][   T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.211187][T18960] loop6: detected capacity change from 0 to 512
[  378.219882][T18960] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  378.267532][T18960] EXT4-fs (loop6): 1 truncate cleaned up
[  378.273904][T18960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.292389][   T29] kauditd_printk_skb: 512 callbacks suppressed
[  378.292420][   T29] audit: type=1400 audit(1759674803.735:30384): avc:  denied  { connect } for  pid=18956 comm="syz.6.4622" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  378.319467][   T29] audit: type=1400 audit(1759674803.735:30385): avc:  denied  { write } for  pid=18956 comm="syz.6.4622" path="socket:[78530]" dev="sockfs" ino=78530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  378.349019][ T7650] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.369207][ T7650] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.377601][ T7650] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.595857][   T29] audit: type=1400 audit(1759674804.045:30386): avc:  denied  { create } for  pid=18967 comm="syz.4.4625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  378.620689][T18968] loop4: detected capacity change from 0 to 128
[  378.628937][T18968] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  378.978866][   T29] audit: type=1400 audit(1759674804.425:30387): avc:  denied  { write } for  pid=18975 comm="syz.2.4629" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  379.330363][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4625'.
[  379.749728][   T29] audit: type=1326 audit(1759674805.195:30388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.2.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a674eeec9 code=0x7ffc0000
[  379.892709][   T29] audit: type=1326 audit(1759674805.265:30389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.2.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a674eeec9 code=0x7ffc0000
[  379.916495][   T29] audit: type=1326 audit(1759674805.265:30390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.2.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0a674eeec9 code=0x7ffc0000
[  379.940137][   T29] audit: type=1326 audit(1759674805.265:30391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.2.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a674eeec9 code=0x7ffc0000
[  379.963836][   T29] audit: type=1326 audit(1759674805.265:30392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.2.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a674eeec9 code=0x7ffc0000
[  379.987459][   T29] audit: type=1326 audit(1759674805.275:30393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.2.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a674eeec9 code=0x7ffc0000
[  380.053930][T17840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.088353][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4633'.
[  380.119548][T18998] bridge0: entered promiscuous mode
[  380.143971][T18974] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.164294][T18998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4633'.
[  380.217971][T18974] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.284428][T18974] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.334695][T18974] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.366147][T19016] loop2: detected capacity change from 0 to 512
[  380.382993][T19016] EXT4-fs: Ignoring removed bh option
[  380.394053][T19016] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  380.403186][T19016] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  380.431963][T19016] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  380.441377][T19016] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  380.450523][T19016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.475445][T19016] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4639'.
[  380.493664][T19016] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4639'.
[  380.505182][T19016] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4639: bg 0: block 353: padding at end of block bitmap is not set
[  380.537834][T19000] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.584200][T19020] netlink: 'syz.2.4639': attribute type 10 has an invalid length.
[  380.606508][T19000] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.632623][T19020] bond0: (slave dummy0): Releasing backup interface
[  380.648863][T19025] netlink: 'syz.2.4639': attribute type 10 has an invalid length.
[  380.670689][T19025] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  380.682681][T19000] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.746576][T19000] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.802566][ T7650] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.816179][ T7650] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.826020][ T7650] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.834495][ T7650] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.902838][T19036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4644'.
[  381.231451][T12565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.539115][ T7650] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.550205][ T7650] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.562632][ T4081] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.574547][ T7650] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.869047][T19074] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  381.886259][T19075] loop4: detected capacity change from 0 to 1024
[  381.914539][T19075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.926838][T19075] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  381.951621][T11815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.995058][T19081] loop4: detected capacity change from 0 to 512
[  382.001721][T19081] EXT4-fs: Ignoring removed nobh option
[  382.009125][T19081] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4657: iget: bad i_size value: 38620345925642
[  382.022065][T19085] loop5: detected capacity change from 0 to 512
[  382.022845][T19081] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4657: couldn't read orphan inode 15 (err -117)
[  382.041150][T19085] EXT4-fs: Ignoring removed bh option
[  382.041787][T19081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.059557][T19085] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  382.068876][T19085] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  382.077376][T19081] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  382.077859][T19085] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  382.095436][T19085] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  382.104244][T19085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.121236][T19085] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4658'.
[  382.131707][T11815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.132255][T19085] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4658'.
[  382.154342][T19085] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4658: bg 0: block 353: padding at end of block bitmap is not set
[  382.214089][T19091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19091 comm=syz.6.4661
[  382.239870][T19095] netlink: 'syz.5.4658': attribute type 10 has an invalid length.
[  382.249879][T19095] bond0: (slave dummy0): Releasing backup interface
[  382.284174][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4661'.
[  382.303010][T19098] netlink: 'syz.5.4658': attribute type 10 has an invalid length.
[  382.306069][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4664'.
[  382.326833][T19098] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  382.339970][T19102] loop6: detected capacity change from 0 to 128
[  382.353819][T19102] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  382.367724][T19102] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  382.440306][T19105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4664'.
[  382.637210][T19111] loop4: detected capacity change from 0 to 8192
[  382.722456][T19116] loop2: detected capacity change from 0 to 1024
[  382.754633][T19116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.774826][T19116] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  382.831414][T12565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.888267][ T9233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.910611][T19126] loop5: detected capacity change from 0 to 512
[  382.917379][T19126] EXT4-fs: Ignoring removed nobh option
[  382.926315][T19126] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4672: iget: bad i_size value: 38620345925642
[  382.939519][T19126] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4672: couldn't read orphan inode 15 (err -117)
[  382.952184][T19126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.965833][T19126] EXT4-fs (loop5): shut down requested (2)
[  382.982200][ T9233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.008447][T19132] netlink: 'syz.4.4673': attribute type 13 has an invalid length.
[  383.016488][T19132] netlink: 'syz.4.4673': attribute type 17 has an invalid length.
[  383.073071][T19132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  383.105322][T17840] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  383.134286][T19141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4676'.
[  383.162735][T19143] loop6: detected capacity change from 0 to 512
[  383.169490][T19143] EXT4-fs: Ignoring removed mblk_io_submit option
[  383.176098][T19143] EXT4-fs: Ignoring removed nomblk_io_submit option
[  383.183501][T19145] netlink: 'syz.4.4677': attribute type 13 has an invalid length.
[  383.184439][T19143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  383.191388][T19145] netlink: 'syz.4.4677': attribute type 17 has an invalid length.
[  383.207805][T19143] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  383.219428][T19145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  383.237633][T19143] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4678: Allocating blocks 41-42 which overlap fs metadata
[  383.251907][T19143] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4678: Failed to acquire dquot type 1
[  383.277434][T19143] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  383.310938][   T29] kauditd_printk_skb: 899 callbacks suppressed
[  383.310956][   T29] audit: type=1326 audit(1759674808.735:31290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19136 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  383.336396][T19143] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4678: corrupted inode contents
[  383.341103][   T29] audit: type=1326 audit(1759674808.735:31291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19136 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  383.376769][   T29] audit: type=1326 audit(1759674808.735:31292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19136 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  383.381856][T19143] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #12: comm syz.6.4678: mark_inode_dirty error
[  383.400772][   T29] audit: type=1326 audit(1759674808.735:31293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19136 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  383.434903][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4681'.
[  383.436055][   T29] audit: type=1326 audit(1759674808.735:31294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19136 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  383.445964][T19143] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4678: corrupted inode contents
[  383.468543][   T29] audit: type=1326 audit(1759674808.735:31295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19136 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  383.468581][   T29] audit: type=1326 audit(1759674808.735:31296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19136 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  383.468608][   T29] audit: type=1326 audit(1759674808.735:31297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19136 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  383.482333][T19143] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.4678: mark_inode_dirty error
[  383.504077][   T29] audit: type=1326 audit(1759674808.735:31298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19136 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  383.504113][   T29] audit: type=1326 audit(1759674808.735:31299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19136 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30501deec9 code=0x7ffc0000
[  383.530067][T19143] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4678: corrupted inode contents
[  383.622452][T19143] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem
[  383.631535][T19143] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4678: corrupted inode contents
[  383.644893][T19143] EXT4-fs error (device loop6): ext4_truncate:4637: inode #12: comm syz.6.4678: mark_inode_dirty error
[  383.658854][ T4081] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.667390][T19143] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem
[  383.690581][T19143] EXT4-fs (loop6): 1 truncate cleaned up
[  383.690586][ T4081] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.690635][ T4081] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.690665][ T4081] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.699014][T19143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.736372][T19162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19162 comm=syz.5.4683
[  383.758595][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4683'.
[  383.783322][T19143] netlink: 'syz.6.4678': attribute type 13 has an invalid length.
[  383.791183][T19143] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4678'.
[  383.802514][T19165] loop1: detected capacity change from 0 to 128
[  383.810592][T19165] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  383.824733][T19143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  383.838690][T19162] loop5: detected capacity change from 0 to 128
[  383.866946][T17840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.877028][T19162] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  383.889748][T19162] ext4 filesystem being mounted at /587/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  383.940976][T19174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4688'.
[  384.594923][T19188] loop4: detected capacity change from 0 to 128
[  384.623806][T19188] syz.4.4690: attempt to access beyond end of device
[  384.623806][T19188] loop4: rw=34817, sector=121, nr_sectors = 120 limit=128
[  384.654773][ T4081] kworker/u8:11: attempt to access beyond end of device
[  384.654773][ T4081] loop4: rw=1, sector=241, nr_sectors = 800 limit=128
[  384.689805][T19190] loop4: detected capacity change from 0 to 512
[  384.700612][T19192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19192 comm=syz.1.4691
[  384.718824][T19190] EXT4-fs: Ignoring removed bh option
[  384.725087][T19190] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  384.728481][ T9233] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  384.734367][T19190] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  384.752755][T19190] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  384.779511][T19192] loop1: detected capacity change from 0 to 128
[  384.781080][T19198] loop5: detected capacity change from 0 to 1024
[  384.786002][T19190] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  384.801540][T19190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.814531][T19192] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  384.827397][T19192] ext4 filesystem being mounted at /237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  384.828921][T19198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.871599][T19198] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  384.891623][T19190] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4692: bg 0: block 353: padding at end of block bitmap is not set
[  384.933651][ T9233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.001007][T19203] netlink: 'syz.4.4692': attribute type 10 has an invalid length.
[  385.015749][T19203] bond0: (slave dummy0): Releasing backup interface
[  385.045774][T19203] netlink: 'syz.4.4692': attribute type 10 has an invalid length.
[  385.070572][T19203] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  385.165240][T19206] ALSA: seq fatal error: cannot create timer (-19)
[  385.222155][T19229] loop6: detected capacity change from 0 to 128
[  385.240828][T19229] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  385.289369][T19233] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  386.033727][T19241] loop5: detected capacity change from 0 to 512
[  386.041478][T19241] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  386.127899][T19241] EXT4-fs (loop5): 1 truncate cleaned up
[  386.134669][T19241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.533500][T19244] sd 0:0:1:0: device reset
[  386.618886][T15185] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  386.883679][T11815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.894894][T19270] netlink: 'syz.1.4717': attribute type 13 has an invalid length.
[  386.942713][T19270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  386.987128][T19272] loop4: detected capacity change from 0 to 128
[  387.005753][T19274] loop6: detected capacity change from 0 to 128
[  387.193965][T19278] sd 0:0:1:0: device reset
[  387.240504][T19280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19280 comm=syz.1.4722
[  387.273901][T19280] __nla_validate_parse: 11 callbacks suppressed
[  387.273918][T19280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4722'.
[  387.325682][T19280] loop1: detected capacity change from 0 to 128
[  387.344233][T19280] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  387.367395][T19280] ext4 filesystem being mounted at /241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  387.425676][T19276] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.515508][T19276] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.604118][T19272] syz.4.4719: attempt to access beyond end of device
[  387.604118][T19272] loop4: rw=34817, sector=121, nr_sectors = 120 limit=128
[  387.635238][T19276] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.684318][ T7650] kworker/u8:14: attempt to access beyond end of device
[  387.684318][ T7650] loop4: rw=1, sector=241, nr_sectors = 800 limit=128
[  387.724968][T19276] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.749439][ T9233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.758764][T19289] loop4: detected capacity change from 0 to 512
[  387.765708][T19289] EXT4-fs: Ignoring removed mblk_io_submit option
[  387.772298][T19289] EXT4-fs: Ignoring removed nomblk_io_submit option
[  387.780231][T19289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  387.788808][T19289] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  387.805305][T19289] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4724: Allocating blocks 41-42 which overlap fs metadata
[  387.822406][ T4081] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.837665][ T4081] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.857502][ T4081] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.866050][T19289] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4724: Allocating blocks 41-42 which overlap fs metadata
[  387.866067][ T4081] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.898771][T19289] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4724: Failed to acquire dquot type 1
[  387.924631][T19289] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  387.953896][T19299] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.977478][T19289] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4724: corrupted inode contents
[  387.999556][T19289] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.4724: mark_inode_dirty error
[  388.011467][T19289] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4724: corrupted inode contents
[  388.033074][T19289] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4724: mark_inode_dirty error
[  388.045497][T19299] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.055782][T19289] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4724: corrupted inode contents
[  388.082180][T19289] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  388.099716][T19289] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4724: corrupted inode contents
[  388.121744][T19289] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.4724: mark_inode_dirty error
[  388.122649][T19299] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.145393][T19289] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  388.156592][T19289] EXT4-fs (loop4): 1 truncate cleaned up
[  388.163466][T15185] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  388.178707][T19289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.198775][   T37] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.217006][T19299] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.218826][T19289] validate_nla: 1 callbacks suppressed
[  388.218844][T19289] netlink: 'syz.4.4724': attribute type 13 has an invalid length.
[  388.240462][T19289] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4724'.
[  388.264478][   T37] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.303162][T19289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  388.356810][T11815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.358189][T19322] netlink: 'syz.1.4731': attribute type 13 has an invalid length.
[  388.374212][T19322] netlink: 'syz.1.4731': attribute type 17 has an invalid length.
[  388.383840][   T37] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.403317][T19322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  388.428834][T19305] chnl_net:caif_netlink_parms(): no params data found
[  388.469863][   T29] kauditd_printk_skb: 399 callbacks suppressed
[  388.469883][   T29] audit: type=1400 audit(1759674813.915:31644): avc:  denied  { audit_control } for  pid=19333 comm="syz.1.4733" capability=30  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  388.527194][T19337] loop1: detected capacity change from 0 to 512
[  388.541469][T19337] EXT4-fs: Ignoring removed nobh option
[  388.547865][   T37] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.551243][   T29] audit: type=1400 audit(1759674813.965:31645): avc:  denied  { allowed } for  pid=19330 comm="syz.4.4732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  388.566898][T19337] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4734: iget: bad i_size value: 38620345925642
[  388.577171][   T29] audit: type=1400 audit(1759674813.965:31646): avc:  denied  { create } for  pid=19330 comm="syz.4.4732" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  388.598577][T19337] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4734: couldn't read orphan inode 15 (err -117)
[  388.611306][   T29] audit: type=1400 audit(1759674813.965:31647): avc:  denied  { create } for  pid=19336 comm="syz.1.4734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  388.642788][   T29] audit: type=1326 audit(1759674813.965:31648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.4.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944d7beec9 code=0x7ffc0000
[  388.666560][   T29] audit: type=1326 audit(1759674813.965:31649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.4.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f944d7beec9 code=0x7ffc0000
[  388.690266][   T29] audit: type=1326 audit(1759674813.965:31650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.4.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944d7beec9 code=0x7ffc0000
[  388.713885][   T29] audit: type=1326 audit(1759674813.965:31651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.4.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f944d7beec9 code=0x7ffc0000
[  388.714763][T19337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.737492][   T29] audit: type=1326 audit(1759674813.965:31652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.4.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944d7beec9 code=0x7ffc0000
[  388.773606][   T29] audit: type=1326 audit(1759674813.965:31653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.4.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f944d7beec9 code=0x7ffc0000
[  388.814436][T19340] loop4: detected capacity change from 0 to 128
[  388.824795][T19337] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  388.835467][T19317] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.841403][T19340] syz.4.4735: attempt to access beyond end of device
[  388.841403][T19340] loop4: rw=34817, sector=121, nr_sectors = 120 limit=128
[  388.870899][T15185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.888182][T19305] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.895360][T19305] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.905333][T19305] bridge_slave_0: entered allmulticast mode
[  388.912062][T19305] bridge_slave_0: entered promiscuous mode
[  388.912606][ T4081] kworker/u8:11: attempt to access beyond end of device
[  388.912606][ T4081] loop4: rw=1, sector=241, nr_sectors = 800 limit=128
[  388.933802][T19317] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.945436][T19305] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.952654][T19305] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.961037][T19345] loop1: detected capacity change from 0 to 128
[  388.968355][T19305] bridge_slave_1: entered allmulticast mode
[  388.975233][T19305] bridge_slave_1: entered promiscuous mode
[  389.002552][T19349] loop4: detected capacity change from 0 to 512
[  389.003912][T19317] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.009346][T19349] EXT4-fs: Ignoring removed mblk_io_submit option
[  389.025251][T19349] EXT4-fs: Ignoring removed nomblk_io_submit option
[  389.032379][T19349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  389.041028][T19349] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  389.047843][T19351] loop1: detected capacity change from 0 to 512
[  389.057350][T19351] EXT4-fs: Ignoring removed mblk_io_submit option
[  389.064096][T19351] EXT4-fs: Ignoring removed nomblk_io_submit option
[  389.066426][T19305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.081376][T19317] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.091513][T19351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  389.091667][T19349] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4738: Allocating blocks 41-42 which overlap fs metadata
[  389.100026][T19351] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  389.116219][T19349] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4738: Allocating blocks 41-42 which overlap fs metadata
[  389.134490][T19351] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.4739: Allocating blocks 41-42 which overlap fs metadata
[  389.150800][T19349] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4738: Failed to acquire dquot type 1
[  389.158991][T19305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.162421][T19351] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4739: Failed to acquire dquot type 1
[  389.180749][T19349] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  389.197014][T19349] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4738: corrupted inode contents
[  389.197117][T19351] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, 
[  389.197493][T19349] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.4738: mark_inode_dirty error
[  389.209136][T19351] inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  389.220746][T19349] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4738: corrupted inode contents
[  389.228577][T19351] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.4739: corrupted inode contents
[  389.243426][T19349] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4738: mark_inode_dirty error
[  389.250141][T19351] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.4739: mark_inode_dirty error
[  389.261834][T19349] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4738: corrupted inode contents
[  389.275277][T19351] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.4739: corrupted inode contents
[  389.283857][T19349] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  389.296052][T19351] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.4739: mark_inode_dirty error
[  389.307769][T19349] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4738: corrupted inode contents
[  389.316731][T19351] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.4739: corrupted inode contents
[  389.327510][T19349] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.4738: mark_inode_dirty error
[  389.339513][T19351] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  389.351371][T19349] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  389.362611][T19351] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.4739: corrupted inode contents
[  389.371347][T19349] EXT4-fs (loop4): 1 truncate cleaned up
[  389.398377][T19349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.401828][T19351] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.4739: mark_inode_dirty error
[  389.435315][T19351] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  389.440426][T19349] netlink: 'syz.4.4738': attribute type 13 has an invalid length.
[  389.444605][T19351] EXT4-fs (loop1): 1 truncate cleaned up
[  389.452251][T19349] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4738'.
[  389.467535][T19351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.496957][T19356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  389.506327][T19351] netlink: 'syz.1.4739': attribute type 13 has an invalid length.
[  389.514195][T19351] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4739'.
[  389.525533][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.535243][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  389.544969][   T37] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  389.554041][   T37] bond0 (unregistering): Released all slaves
[  389.562753][   T37] bond1 (unregistering): Released all slaves
[  389.571642][   T37] bond2 (unregistering): Released all slaves
[  389.574963][T19357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  389.580819][   T37] bond3 (unregistering): Released all slaves
[  389.594815][   T37] bond4 (unregistering): Released all slaves
[  389.603093][   T37] bond5 (unregistering): Released all slaves
[  389.611228][   T37] bond6 (unregistering): Released all slaves
[  389.620162][   T37] bond7 (unregistering): Released all slaves
[  389.628759][   T37] bond8 (unregistering): Released all slaves
[  389.637606][T19305] team0: Port device team_slave_0 added
[  389.645634][T19305] team0: Port device team_slave_1 added
[  389.665524][T19305] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.672492][T19305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.698533][T19305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.709935][T15185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.719989][T19305] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.727118][T19305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.753136][T19305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.753633][T11815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.782491][T19359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19359 comm=syz.1.4740
[  389.800666][T19305] hsr_slave_0: entered promiscuous mode
[  389.807196][T19305] hsr_slave_1: entered promiscuous mode
[  389.811334][T19361] loop4: detected capacity change from 0 to 512
[  389.813626][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4740'.
[  389.819852][T19361] EXT4-fs: Ignoring removed mblk_io_submit option
[  389.828588][T19305] debugfs: 'hsr0' already exists in 'hsr'
[  389.835064][T19361] EXT4-fs: Ignoring removed nomblk_io_submit option
[  389.840284][T19305] Cannot create hsr debugfs directory
[  389.852545][T19361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  389.861182][T19361] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  389.872325][T19362] loop1: detected capacity change from 0 to 128
[  389.874756][T19361] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4741: Allocating blocks 41-42 which overlap fs metadata
[  389.878829][   T37] hsr_slave_0: left promiscuous mode
[  389.893663][T19361] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4741: Allocating blocks 41-42 which overlap fs metadata
[  389.898213][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  389.911748][T19361] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4741: Failed to acquire dquot type 1
[  389.918763][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  389.931264][T19362] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  389.938298][T19361] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  389.949527][T19362] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  389.964270][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  389.995863][T19361] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4741: corrupted inode contents
[  390.003104][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.022419][T19361] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.4741: mark_inode_dirty error
[  390.034094][T19361] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4741: corrupted inode contents
[  390.037697][   T37] veth1_to_batadv: left promiscuous mode
[  390.046244][T19361] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4741: mark_inode_dirty error
[  390.062938][   T37] veth1_macvtap: left promiscuous mode
[  390.063210][T19361] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4741: corrupted inode contents
[  390.080486][T19361] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  390.082163][   T37] veth0_macvtap: left promiscuous mode
[  390.089345][T19361] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4741: corrupted inode contents
[  390.102962][   T37] veth1_vlan: left promiscuous mode
[  390.106941][T19361] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.4741: mark_inode_dirty error
[  390.111774][   T37] veth0_vlan: left promiscuous mode
[  390.123142][T19361] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  390.137318][T19361] EXT4-fs (loop4): 1 truncate cleaned up
[  390.175349][T19361] netlink: 'syz.4.4741': attribute type 13 has an invalid length.
[  390.183296][T19361] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4741'.
[  390.233497][T19367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  390.251400][ T8479] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.277507][ T8479] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.290707][ T8479] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.305241][ T8479] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.396871][T19373] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4742'.
[  390.481290][   T37] ------------[ cut here ]------------
[  390.486866][   T37] WARNING: CPU: 1 PID: 37 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0
[  390.496504][   T37] Modules linked in:
[  390.500498][   T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  390.511986][   T37] Tainted: [W]=WARN
[  390.516021][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  390.526358][   T37] Workqueue: netns cleanup_net
[  390.526453][T19385] loop6: detected capacity change from 0 to 128
[  390.531187][   T37] RIP: 0010:xfrm_state_fini+0x179/0x1f0
[  390.531227][   T37] Code: 48 8d bb 70 0e 00 00 e8 25 53 b8 fc 48 8b bb 70 0e 00 00 e8 89 fe c4 fc 5b 41 5e 41 5f 5d e9 3e 3e af 00 cc e8 78 02 9d fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 6a 02 9d fc 90 0f 0b 90 4c 89 f7 e8 ee
[  390.562758][T19385] syz.6.4748: attempt to access beyond end of device
[  390.562758][T19385] loop6: rw=34817, sector=121, nr_sectors = 120 limit=128
[  390.576723][   T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293
[  390.583042][   T37] RAX: ffffffff84ba3d28 RBX: ffff888109e1c680 RCX: ffff8881010d9080
[  390.591032][   T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109e1d4c0
[  390.599132][   T37] RBP: ffffffff86c90380 R08: 0001ffff8684802f R09: 0000000000000000
[  390.607154][   T37] R10: ffffc90000143be8 R11: 0001c90000143be8 R12: ffffffff86c903a0
[  390.615179][   T37] R13: ffff888109e1c6a8 R14: ffff888109e1d4c0 R15: ffff888109e1c680
[  390.623227][   T37] FS:  0000000000000000(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000
[  390.632189][   T37] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  390.638830][   T37] CR2: 000000110c2b175e CR3: 0000000006834000 CR4: 00000000003506f0
[  390.646844][   T37] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000
[  390.654979][   T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  390.663299][   T37] Call Trace:
[  390.666363][T19387] loop4: detected capacity change from 0 to 512
[  390.666750][   T37]  <TASK>
[  390.675856][   T37]  xfrm_net_exit+0x2d/0x60
[  390.680310][   T37]  ops_undo_list+0x278/0x410
[  390.683335][T19387] EXT4-fs: Ignoring removed mblk_io_submit option
[  390.685009][   T37]  cleanup_net+0x2f4/0x4f0
[  390.691586][T19387] EXT4-fs: Ignoring removed nomblk_io_submit option
[  390.695819][   T37]  process_scheduled_works+0x4ce/0x9d0
[  390.695867][   T37]  worker_thread+0x582/0x770
[  390.712553][   T37]  kthread+0x489/0x510
[  390.716681][   T37]  ? finish_task_switch+0xad/0x2b0
[  390.716808][T19387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  390.721861][   T37]  ? __pfx_worker_thread+0x10/0x10
[  390.730351][T19387] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  390.735487][   T37]  ? __pfx_kthread+0x10/0x10
[  390.749153][   T37]  ret_from_fork+0x122/0x1b0
[  390.753880][   T37]  ? __pfx_kthread+0x10/0x10
[  390.758616][   T37]  ret_from_fork_asm+0x1a/0x30
[  390.763484][   T37]  </TASK>
[  390.766523][   T37] ---[ end trace 0000000000000000 ]---
[  390.772786][   T37] ------------[ cut here ]------------
[  390.778441][   T37] WARNING: CPU: 1 PID: 37 at net/xfrm/xfrm_state.c:3313 xfrm_state_fini+0x1b9/0x1f0
[  390.784597][T19387] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4749: Allocating blocks 41-42 which overlap fs metadata
[  390.787889][   T37] Modules linked in:
[  390.802121][T19387] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4749: Allocating blocks 41-42 which overlap fs metadata
[  390.805579][   T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  390.820148][T19387] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4749: Failed to acquire dquot type 1
[  390.830626][   T37] Tainted: [W]=WARN
[  390.842169][T19387] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:
[  390.845678][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  390.845681][T19387] freeing already freed block (bit 14); block bitmap corrupt.
[  390.845908][T19387] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4749: corrupted inode contents
[  390.854911][   T37] Workqueue: netns cleanup_net
[  390.854956][   T37] RIP: 0010:xfrm_state_fini+0x1b9/0x1f0
[  390.865398][T19387] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.4749: mark_inode_dirty error
[  390.872524][   T37] Code: 52 b8 fc 4d 8b 3e e9 06 ff ff ff e8 51 02 9d fc 90 0f 0b 90 4c 89 f7 e8 d5 52 b8 fc 4d 8b 3e e9 24 ff ff ff e8 38 02 9d fc 90 <0f> 0b 90 4c 89 f7 e8 bc 52 b8 fc 4d 8b 3e e9 42 ff ff ff e8 1f 02
[  390.884787][T19387] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4749: corrupted inode contents
[  390.889114][   T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293
[  390.895261][T19387] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4749: mark_inode_dirty error
[  390.906022][   T37] 
[  390.906032][   T37] RAX: ffffffff84ba3d68 RBX: ffff888109e1c680 RCX: ffff8881010d9080
[  390.906049][   T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88812da21f40
[  390.906067][   T37] RBP: 0000000000000040 R08: 0001888109e1d4df R09: 0000000000000000
[  390.926037][T19387] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4749: corrupted inode contents
[  390.937555][   T37] R10: ffff88812da21680 R11: 000188812da217ff R12: ffffffff86c903a0
[  390.943924][T19387] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  390.955037][   T37] R13: ffff888109e1c6a8 R14: ffff888109e1d4d8 R15: ffff88812da21f40
[  390.957610][T19387] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4749: corrupted inode contents
[  390.965352][   T37] FS:  0000000000000000(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000
[  390.973766][T19387] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.4749: mark_inode_dirty error
[  390.981495][   T37] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  390.993595][T19387] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  391.001297][   T37] CR2: 000000110c2b175e CR3: 0000000006834000 CR4: 00000000003506f0
[  391.010057][T19387] EXT4-fs (loop4): 1 truncate cleaned up
[  391.017817][   T37] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000
[  391.017836][   T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  391.040608][T19387] netlink: 'syz.4.4749': attribute type 13 has an invalid length.
[  391.050270][   T37] Call Trace:
[  391.050285][   T37]  <TASK>
[  391.056963][T19387] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4749'.
[  391.065844][   T37]  xfrm_net_exit+0x2d/0x60
[  391.096384][T19390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  391.103477][   T37]  ops_undo_list+0x278/0x410
[  391.136265][   T37]  cleanup_net+0x2f4/0x4f0
[  391.140699][   T37]  process_scheduled_works+0x4ce/0x9d0
[  391.146222][   T37]  worker_thread+0x582/0x770
[  391.150886][   T37]  kthread+0x489/0x510
[  391.154985][   T37]  ? finish_task_switch+0xad/0x2b0
[  391.160209][   T37]  ? __pfx_worker_thread+0x10/0x10
[  391.165407][   T37]  ? __pfx_kthread+0x10/0x10
[  391.170005][   T37]  ret_from_fork+0x122/0x1b0
[  391.174673][   T37]  ? __pfx_kthread+0x10/0x10
[  391.179310][   T37]  ret_from_fork_asm+0x1a/0x30
[  391.184118][   T37]  </TASK>
[  391.187137][   T37] ---[ end trace 0000000000000000 ]---
[  391.193341][   T37] ------------[ cut here ]------------
[  391.198877][   T37] WARNING: CPU: 1 PID: 37 at net/xfrm/xfrm_state.c:3315 xfrm_state_fini+0x1d2/0x1f0
[  391.208348][   T37] Modules linked in:
[  391.212267][   T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  391.223586][   T37] Tainted: [W]=WARN
[  391.227381][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  391.237496][   T37] Workqueue: netns cleanup_net
[  391.242346][   T37] RIP: 0010:xfrm_state_fini+0x1d2/0x1f0
[  391.247950][   T37] Code: 52 b8 fc 4d 8b 3e e9 24 ff ff ff e8 38 02 9d fc 90 0f 0b 90 4c 89 f7 e8 bc 52 b8 fc 4d 8b 3e e9 42 ff ff ff e8 1f 02 9d fc 90 <0f> 0b 90 4c 89 f7 e8 a3 52 b8 fc 4d 8b 3e e9 60 ff ff ff 66 66 2e
[  391.267604][   T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293
[  391.273748][   T37] RAX: ffffffff84ba3d81 RBX: ffff888109e1c680 RCX: ffff8881010d9080
[  391.281742][   T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88812da21a80
[  391.289796][   T37] RBP: 0000000000000040 R08: 0001888109e1d4d7 R09: 0000000000000000
[  391.297822][   T37] R10: ffff88812da217c0 R11: 000188812da21f7f R12: ffffffff86c903a0
[  391.305836][   T37] R13: ffff888109e1c6a8 R14: ffff888109e1d4d0 R15: ffff88812da21a80
[  391.313866][   T37] FS:  0000000000000000(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000
[  391.322910][   T37] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  391.329557][   T37] CR2: 000000110c2b175e CR3: 0000000006834000 CR4: 00000000003506f0
[  391.337660][   T37] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000
[  391.345651][   T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  391.353716][   T37] Call Trace:
[  391.356990][   T37]  <TASK>
[  391.359925][   T37]  xfrm_net_exit+0x2d/0x60
[  391.364409][   T37]  ops_undo_list+0x278/0x410
[  391.369080][   T37]  cleanup_net+0x2f4/0x4f0
[  391.373569][   T37]  process_scheduled_works+0x4ce/0x9d0
[  391.379119][   T37]  worker_thread+0x582/0x770
[  391.383810][   T37]  kthread+0x489/0x510
[  391.387882][   T37]  ? finish_task_switch+0xad/0x2b0
[  391.393058][   T37]  ? __pfx_worker_thread+0x10/0x10
[  391.398290][   T37]  ? __pfx_kthread+0x10/0x10
[  391.402974][   T37]  ret_from_fork+0x122/0x1b0
[  391.407566][   T37]  ? __pfx_kthread+0x10/0x10
[  391.412166][   T37]  ret_from_fork_asm+0x1a/0x30
[  391.416971][   T37]  </TASK>
[  391.419989][   T37] ---[ end trace 0000000000000000 ]---
[  391.430265][ T4081] kworker/u8:11: attempt to access beyond end of device
[  391.430265][ T4081] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  391.533874][T19402] loop4: detected capacity change from 0 to 512
[  391.540544][T19402] EXT4-fs: Ignoring removed mblk_io_submit option
[  391.547167][T19402] EXT4-fs: Ignoring removed nomblk_io_submit option
[  391.557519][T19403] netlink: 'syz.6.4755': attribute type 13 has an invalid length.
[  391.565401][T19403] netlink: 'syz.6.4755': attribute type 17 has an invalid length.
[  391.573573][T19402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  391.582006][T19402] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  391.601806][T19403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  391.644762][T19402] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4752: Allocating blocks 41-42 which overlap fs metadata
[  391.692359][T19402] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4752: Allocating blocks 41-42 which overlap fs metadata
[  391.708985][T19305] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  391.727093][T19305] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  391.735894][T19402] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4752: Failed to acquire dquot type 1
[  391.738350][T19305] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  391.770118][T19402] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  391.786061][T19305] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  391.793489][T19402] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4752: corrupted inode contents
[  391.808243][T19402] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #12: comm syz.4.4752: mark_inode_dirty error
[  391.822488][T19402] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4752: corrupted inode contents
[  391.866400][T19402] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4752: mark_inode_dirty error
[  391.868394][T19305] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.914836][T19305] 8021q: adding VLAN 0 to HW filter on device team0
[  391.935182][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.942277][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.969636][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.976762][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.019261][T19402] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4752: corrupted inode contents
[  392.034287][T19402] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  392.048200][T19402] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #12: comm syz.4.4752: corrupted inode contents
[  392.060670][T19402] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.4752: mark_inode_dirty error
[  392.076331][T19402] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  392.132891][T19432] loop1: detected capacity change from 0 to 512
[  392.140947][T19432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  392.153238][T19432] EXT4-fs (loop1): 1 truncate cleaned up
[  392.193570][T19402] EXT4-fs (loop4): 1 truncate cleaned up
[  392.235492][T19436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19436 comm=syz.6.4760
[  392.259945][T19402] netlink: 'syz.4.4752': attribute type 13 has an invalid length.
[  392.267901][T19402] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4752'.
[  392.299142][T19305] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.319126][T19402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  392.330413][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4760'.
[  392.416988][T19436] loop6: detected capacity change from 0 to 128
[  392.463643][T19436] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  392.993823][T19305] veth0_vlan: entered promiscuous mode
[  393.010577][T19305] veth1_vlan: entered promiscuous mode
[  393.074268][T19305] veth0_macvtap: entered promiscuous mode
[  393.097362][T19305] veth1_macvtap: entered promiscuous mode
[  393.135735][T19305] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.164896][T19305] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.188042][ T3574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.198128][ T3574] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.223277][ T3574] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.261399][ T3574] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.384681][ T3574] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.416113][ T3574] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.466261][ T3574] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.498874][ T3574] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.515079][T19465] sd 0:0:1:0: device reset
[  393.545797][T19467] loop6: detected capacity change from 0 to 512
[  393.553950][T19461] loop5: detected capacity change from 0 to 8192
[  393.572814][T19467] EXT4-fs: Ignoring removed mblk_io_submit option
[  393.579691][T19467] EXT4-fs: Ignoring removed nomblk_io_submit option
[  393.595351][T19471] sd 0:0:1:0: device reset
[  393.610403][T19467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  393.618954][T19467] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  393.645402][   T29] kauditd_printk_skb: 276 callbacks suppressed
[  393.645421][   T29] audit: type=1400 audit(1759674819.095:31911): avc:  denied  { kexec_image_load } for  pid=19472 comm="syz.2.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  393.672915][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4767'.
[  393.693367][   T29] audit: type=1400 audit(1759674819.125:31912): avc:  denied  { ioctl } for  pid=19472 comm="syz.2.4767" path="socket:[83152]" dev="sockfs" ino=83152 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  393.738010][T19467] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4763: Allocating blocks 41-42 which overlap fs metadata
[  393.756413][T19467] Quota error (device loop6): write_blk: dquota write failed
[  393.763922][T19467] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  393.793317][T19467] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4763: Allocating blocks 41-42 which overlap fs metadata
[  393.813077][T19467] Quota error (device loop6): write_blk: dquota write failed
[  393.823152][   T29] audit: type=1400 audit(1759674819.265:31913): avc:  denied  { create } for  pid=19472 comm="syz.2.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  393.842865][   T29] audit: type=1400 audit(1759674819.265:31914): avc:  denied  { name_bind } for  pid=19472 comm="syz.2.4767" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  393.864906][   T29] audit: type=1400 audit(1759674819.265:31915): avc:  denied  { node_bind } for  pid=19472 comm="syz.2.4767" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  393.885995][T19467] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  393.907367][T19467] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4763: Failed to acquire dquot type 1
[  393.923022][   T29] audit: type=1326 audit(1759674819.365:31916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19480 comm="syz.4.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944d7beec9 code=0x7ffc0000
[  393.953731][T19467] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  393.969924][T19467] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4763: corrupted inode contents
[  394.006281][T19467] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #12: comm syz.6.4763: mark_inode_dirty error
[  394.034731][T19467] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4763: corrupted inode contents
[  394.036057][T19494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19494 comm=syz.1.4773
[  394.063247][T19496] loop4: detected capacity change from 0 to 512
[  394.064304][T19467] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.4763: mark_inode_dirty error
[  394.071739][T19496] EXT4-fs: Ignoring removed bh option
[  394.089359][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4773'.
[  394.098859][T19496] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  394.098913][T19467] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4763: corrupted inode contents
[  394.108114][T19496] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  394.129969][T19467] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem
[  394.139246][T19467] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #12: comm syz.6.4763: corrupted inode contents
[  394.151532][T19496] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  394.161285][T19496] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  394.173047][T19494] loop1: detected capacity change from 0 to 128
[  394.181364][T19467] EXT4-fs error (device loop6): ext4_truncate:4637: inode #12: comm syz.6.4763: mark_inode_dirty error
[  394.194018][T19496] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4772'.
[  394.204195][T19496] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4772'.
[  394.213708][T19467] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem
[  394.214495][T19494] ext4 filesystem being mounted at /252/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  394.233163][T19496] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4772: bg 0: block 353: padding at end of block bitmap is not set
[  394.272588][T19467] EXT4-fs (loop6): 1 truncate cleaned up
[  394.294569][T19467] netlink: 'syz.6.4763': attribute type 13 has an invalid length.
[  394.302606][T19467] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4763'.
[  394.323190][T19467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  394.392810][T19503] netlink: 'syz.4.4772': attribute type 10 has an invalid length.
[  394.403715][T19503] bond0: (slave dummy0): Releasing backup interface
[  394.414960][T19503] netlink: 'syz.4.4772': attribute type 10 has an invalid length.
[  394.434580][T19503] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  394.622615][T19510] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.914890][T19518] sd 0:0:1:0: device reset
[  394.997588][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4784'.
[  395.097074][T19520] ALSA: seq fatal error: cannot create timer (-19)
[  395.185186][T19551] netlink: 'syz.4.4787': attribute type 13 has an invalid length.
[  395.193163][T19551] netlink: 'syz.4.4787': attribute type 17 has an invalid length.
[  395.211379][T19551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  395.257310][T19558] loop4: detected capacity change from 0 to 512
[  395.259396][T19557] loop1: detected capacity change from 0 to 1024
[  395.270468][T19558] EXT4-fs: Ignoring removed nobh option
[  395.277934][T19558] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4790: iget: bad i_size value: 38620345925642
[  395.291101][T19558] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4790: couldn't read orphan inode 15 (err -117)
[  395.306108][T19557] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  395.323055][T19558] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  395.353849][T19564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19564 comm=syz.1.4792
[  395.367431][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4792'.
[  395.371537][T19566] loop6: detected capacity change from 0 to 512
[  395.383304][T19566] EXT4-fs: Ignoring removed bh option
[  395.389181][T19566] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  395.398296][T19566] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  395.408595][T19564] loop1: detected capacity change from 0 to 128
[  395.411618][T19566] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  395.424507][T19566] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  395.435808][T19564] ext4 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  395.436252][T19566] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4791'.
[  395.482654][T19566] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4791'.
[  395.492630][T19566] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4791: bg 0: block 353: padding at end of block bitmap is not set
[  395.564861][T19572] netlink: 'syz.6.4791': attribute type 10 has an invalid length.
[  395.584874][T19572] netlink: 'syz.6.4791': attribute type 10 has an invalid length.
[  395.600824][T19572] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  395.987502][T19582] loop4: detected capacity change from 0 to 8192
[  396.048682][T19584] loop4: detected capacity change from 0 to 128
[  396.074925][T19584] syz.4.4798: attempt to access beyond end of device
[  396.074925][T19584] loop4: rw=34817, sector=121, nr_sectors = 120 limit=128
[  396.104630][ T3574] kworker/u8:8: attempt to access beyond end of device
[  396.104630][ T3574] loop4: rw=1, sector=241, nr_sectors = 800 limit=128
[  396.210504][T19587] sd 0:0:1:0: device reset
[  396.340668][T19595] loop6: detected capacity change from 0 to 512
[  396.347420][T19595] EXT4-fs: Ignoring removed nobh option
[  396.354502][T19595] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4803: iget: bad i_size value: 38620345925642
[  396.367702][T19595] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4803: couldn't read orphan inode 15 (err -117)
[  396.381677][T19595] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  396.737579][T19615] loop6: detected capacity change from 0 to 8192
[  396.929561][T19626] loop6: detected capacity change from 0 to 512
[  396.936369][T19626] EXT4-fs: Ignoring removed bh option
[  396.942260][T19626] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  396.951455][T19626] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  396.960631][T19626] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  396.972907][T19626] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  396.987590][T19626] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4811: bg 0: block 353: padding at end of block bitmap is not set
[  397.005373][T19510] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.074569][T19637] netlink: 'syz.6.4811': attribute type 10 has an invalid length.
[  397.092362][T19637] bond0: (slave dummy0): Releasing backup interface
[  397.109498][T19637] netlink: 'syz.6.4811': attribute type 10 has an invalid length.
[  397.119322][T19639] loop2: detected capacity change from 0 to 512
[  397.126765][T19639] EXT4-fs: Ignoring removed mblk_io_submit option
[  397.137455][T19637] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  397.146369][T19639] EXT4-fs: Ignoring removed nomblk_io_submit option
[  397.156996][T19641] loop1: detected capacity change from 0 to 512
[  397.164957][T19639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  397.173498][T19639] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  397.183520][T19641] EXT4-fs: Ignoring removed nobh option
[  397.190699][T19641] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4816: iget: bad i_size value: 38620345925642
[  397.203942][T19641] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4816: couldn't read orphan inode 15 (err -117)
[  397.217548][T19639] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.4815: Allocating blocks 41-42 which overlap fs metadata
[  397.231695][T19639] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.4815: Allocating blocks 41-42 which overlap fs metadata
[  397.246642][T19639] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4815: Failed to acquire dquot type 1
[  397.247149][T19641] EXT4-fs (loop1): shut down requested (2)
[  397.258351][T19639] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  397.278835][T19639] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.4815: corrupted inode contents
[  397.291102][T19639] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.4815: mark_inode_dirty error
[  397.303009][T19639] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.4815: corrupted inode contents
[  397.315058][T19639] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.4815: mark_inode_dirty error
[  397.326643][T19639] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.4815: corrupted inode contents
[  397.338831][T19639] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  397.348307][T19639] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.4815: corrupted inode contents
[  397.360482][T19639] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.4815: mark_inode_dirty error
[  397.371891][T19639] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  397.381340][T19639] EXT4-fs (loop2): 1 truncate cleaned up
[  397.410882][T19510] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.423743][T19639] netlink: 'syz.2.4815': attribute type 13 has an invalid length.
[  397.431600][T19639] __nla_validate_parse: 3 callbacks suppressed
[  397.431617][T19639] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4815'.
[  397.453077][T19639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  397.486807][T19510] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.591815][ T7650] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.604593][ T7650] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.634753][ T4081] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.653305][   T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.661963][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4821'.
[  397.883710][T19667] team0 (unregistering): Port device team_slave_0 removed
[  397.893815][T19667] team0 (unregistering): Port device team_slave_1 removed
[  397.946765][T19666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  398.030111][T19679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4827'.
[  398.046546][T19679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4827'.
[  398.065401][T19682] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.148332][T19682] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.188659][T19689] sd 0:0:1:0: device reset
[  398.255464][T19682] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.272554][T19695] loop6: detected capacity change from 0 to 764
[  398.280311][T19695] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  398.315244][T19682] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.372364][T19702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  398.412094][   T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.429673][   T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.447743][   T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.457972][   T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.536709][T19709] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4839'.
[  398.550416][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4839'.
[  398.589026][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4840'.
[  398.660318][T19714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  398.708797][   T29] kauditd_printk_skb: 346 callbacks suppressed
[  398.708815][   T29] audit: type=1326 audit(1759674824.155:32259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.1.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  398.743264][   T29] audit: type=1326 audit(1759674824.155:32260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.1.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  398.767019][   T29] audit: type=1326 audit(1759674824.155:32261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.1.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  398.790776][   T29] audit: type=1326 audit(1759674824.155:32262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.1.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  398.814725][   T29] audit: type=1326 audit(1759674824.155:32263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.1.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  398.816591][T19735] loop6: detected capacity change from 0 to 512
[  398.838701][   T29] audit: type=1326 audit(1759674824.155:32264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.1.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  398.868437][   T29] audit: type=1326 audit(1759674824.155:32265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.1.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  398.892112][   T29] audit: type=1326 audit(1759674824.155:32266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.1.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  398.916232][   T29] audit: type=1326 audit(1759674824.245:32267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.1.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  398.918194][T19735] EXT4-fs: Ignoring removed nobh option
[  398.940264][   T29] audit: type=1326 audit(1759674824.245:32268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.1.4842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d71eec9 code=0x7ffc0000
[  398.983005][T19735] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4846: iget: bad i_size value: 38620345925642
[  398.996499][T19735] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4846: couldn't read orphan inode 15 (err -117)
[  399.013286][T19735] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  399.098954][T19752] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4852'.
[  399.110186][T19752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4852'.
[  399.155092][T19755] loop2: detected capacity change from 0 to 128
[  399.166611][T19755] ext4 filesystem being mounted at /418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  399.215598][T19741] ALSA: seq fatal error: cannot create timer (-19)
[  399.305037][T19767] loop2: detected capacity change from 0 to 128
[  399.342245][T19767] syz.2.4857: attempt to access beyond end of device
[  399.342245][T19767] loop2: rw=34817, sector=121, nr_sectors = 120 limit=128
[  399.386197][   T37] kworker/u8:2: attempt to access beyond end of device
[  399.386197][   T37] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  399.426920][T19770] loop2: detected capacity change from 0 to 512
[  399.433615][T19770] EXT4-fs: Ignoring removed nobh option
[  399.463212][T19770] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4858: iget: bad i_size value: 38620345925642
[  399.483341][T19770] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4858: couldn't read orphan inode 15 (err -117)
[  399.506972][T19770] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  399.524177][T19749] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.596521][T19749] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.654819][T19749] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.669036][T19778] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.714656][T19749] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.715437][T19782] validate_nla: 6 callbacks suppressed
[  399.715454][T19782] netlink: 'syz.2.4862': attribute type 6 has an invalid length.
[  399.765585][T19778] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.785263][T19786] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4864'.
[  399.821298][ T4081] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.829363][T19788] loop2: detected capacity change from 0 to 512
[  399.833534][ T4081] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.836706][T19788] EXT4-fs: Ignoring removed mblk_io_submit option
[  399.858299][T19788] EXT4-fs: Ignoring removed nomblk_io_submit option
[  399.865264][ T4081] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.873600][ T4081] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.883744][T19778] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.894252][T19788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  399.896148][T19790] sd 0:0:1:0: device reset
[  399.902706][T19788] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  399.916937][T19788] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.4865: Allocating blocks 41-42 which overlap fs metadata
[  399.933569][T19788] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4865: Failed to acquire dquot type 1
[  399.953528][T19788] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  399.969020][T19778] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.974204][T19788] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.4865: corrupted inode contents
[  399.992643][T19788] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.4865: mark_inode_dirty error
[  400.009443][T19788] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.4865: corrupted inode contents
[  400.021592][T19788] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.4865: mark_inode_dirty error
[  400.033919][T19788] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.4865: corrupted inode contents
[  400.046015][T19788] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  400.054781][T19788] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.4865: corrupted inode contents
[  400.068562][ T4081] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.076928][ T4081] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.090787][T19797] loop1: detected capacity change from 0 to 8192
[  400.113692][T19788] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.4865: mark_inode_dirty error
[  400.147673][T19788] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  400.181139][ T4081] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.181786][T19788] EXT4-fs (loop2): 1 truncate cleaned up
[  400.189704][ T4081] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.212229][T19804] loop1: detected capacity change from 0 to 512
[  400.218879][T19804] EXT4-fs: Ignoring removed nobh option
[  400.226800][T19804] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4870: iget: bad i_size value: 38620345925642
[  400.243137][T19804] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4870: couldn't read orphan inode 15 (err -117)
[  400.259405][T19804] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  400.271867][T19788] netlink: 'syz.2.4865': attribute type 13 has an invalid length.
[  400.287184][T19807] loop4: detected capacity change from 0 to 128
[  400.314762][T19808] loop6: detected capacity change from 0 to 512
[  400.322167][T19808] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  400.335269][T19808] EXT4-fs (loop6): 1 truncate cleaned up
[  400.347049][T19807] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  400.364325][T19788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  401.203657][ T3403] ==================================================================
[  401.211783][ T3403] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages
[  401.219977][ T3403] 
[  401.222301][ T3403] read-write to 0xffff8881004811f8 of 8 bytes by task 19804 on cpu 1:
[  401.230478][ T3403]  __filemap_remove_folio+0x1bc/0x2a0
[  401.235860][ T3403]  __remove_mapping+0x390/0x4c0
[  401.240726][ T3403]  remove_mapping+0x22/0x90
[  401.245258][ T3403]  mapping_try_invalidate+0x26a/0x3f0
[  401.250633][ T3403]  invalidate_mapping_pages+0x27/0x40
[  401.256013][ T3403]  invalidate_bdev+0x58/0x70
[  401.260606][ T3403]  reconfigure_super+0x417/0x580
[  401.265549][ T3403]  path_mount+0xad2/0xb70
[  401.269886][ T3403]  __se_sys_mount+0x28c/0x2e0
[  401.274571][ T3403]  __x64_sys_mount+0x67/0x80
[  401.279173][ T3403]  x64_sys_call+0x2b51/0x3000
[  401.283968][ T3403]  do_syscall_64+0xd2/0x200
[  401.288483][ T3403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.294380][ T3403] 
[  401.296732][ T3403] read to 0xffff8881004811f8 of 8 bytes by task 3403 on cpu 0:
[  401.304289][ T3403]  nr_blockdev_pages+0x7e/0xd0
[  401.309060][ T3403]  si_meminfo+0x87/0xd0
[  401.313227][ T3403]  update_defense_level+0x47/0x5c0
[  401.318352][ T3403]  defense_work_handler+0x1f/0x80
[  401.323409][ T3403]  process_scheduled_works+0x4ce/0x9d0
[  401.328974][ T3403]  worker_thread+0x582/0x770
[  401.333579][ T3403]  kthread+0x489/0x510
[  401.337683][ T3403]  ret_from_fork+0x122/0x1b0
[  401.342278][ T3403]  ret_from_fork_asm+0x1a/0x30
[  401.347046][ T3403] 
[  401.349378][ T3403] value changed: 0x0000000000000004 -> 0x0000000000000002
[  401.356485][ T3403] 
[  401.358811][ T3403] Reported by Kernel Concurrency Sanitizer on:
[  401.364995][ T3403] CPU: 0 UID: 0 PID: 3403 Comm: kworker/0:3 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  401.376463][ T3403] Tainted: [W]=WARN
[  401.380263][ T3403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  401.390323][ T3403] Workqueue: events_long defense_work_handler
[  401.396411][ T3403] ==================================================================
[  401.987913][T19812] netlink: 'syz.2.4872': attribute type 13 has an invalid length.
[  401.995863][T19812] netlink: 'syz.2.4872': attribute type 17 has an invalid length.
[  402.011991][T19812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  402.117770][T17840] EXT4-fs unmount: 44 callbacks suppressed
[  402.117848][T17840] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.